Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File:                     TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier:          Y7eodvCVxlpK2nxUUuq8V8ifVakO9HwC0qSL4aRunyM=
Subject key identifier:   41:CC:B0:11:F7:4E:D4:93:6E:AD:52:6A:43:44:3C:C7:7B:28:B3:58
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer:       /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial:       01962F74F128A2EB1DF99BEEC75E73D545E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number:          0830
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: RlEonH2ZI87pCBF5qUstz/eCpjbH9clt5Dm0jXZoL3Q=)
                          2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f1:28:a2:eb:1d:f9:9b:ee:c7:5e:73:d5:45:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=41ccb011f74ed4936ead526a43443cc77b28b358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:65:64:ff:f3:79:98:a7:66:62:1a:19:ef:
                    be:a3:e0:b3:df:a3:56:59:42:85:94:67:1b:db:52:
                    5c:06:b6:3b:90:35:ee:b5:5f:f3:de:c5:51:7e:12:
                    35:00:51:c7:d7:4f:f8:d0:de:1d:5e:dd:67:50:fc:
                    bc:e2:b3:e4:8b:a0:45:9c:5a:57:76:c2:60:33:2b:
                    ba:cf:d5:76:f1:9d:29:4b:4b:d1:aa:e7:38:e7:64:
                    90:6c:8d:99:33:62:5e:8b:e3:68:2e:73:65:7b:45:
                    34:ea:dc:46:bd:aa:13:7e:6b:5b:ac:ed:7f:80:db:
                    f3:0f:31:c9:b0:66:c0:76:53:05:0e:58:f6:06:0b:
                    2a:43:84:d9:83:e3:a8:5c:af:02:3f:a6:a7:9a:92:
                    f0:bc:0e:83:f1:f1:f9:de:44:10:b5:77:e3:49:b8:
                    75:f2:ba:2a:84:1d:c7:7f:11:45:e4:7e:0c:d2:7b:
                    5f:08:2f:99:3c:c1:b4:b3:16:de:12:b9:88:fd:96:
                    5f:f0:60:36:2a:14:63:1d:4b:e9:28:34:75:e3:5d:
                    bf:0e:6f:d8:cc:4a:ff:55:bf:ee:81:b8:23:5c:91:
                    6c:93:70:a2:b0:06:07:b8:9c:20:64:97:d6:b1:4a:
                    09:96:12:be:80:b0:40:c1:85:64:48:2d:8a:ac:5b:
                    bd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CC:B0:11:F7:4E:D4:93:6E:AD:52:6A:43:44:3C:C7:7B:28:B3:58
            X509v3 Authority Key Identifier:
                keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:46:3e:04:1b:8b:2a:4f:d3:b3:7e:f8:1d:89:34:89:d4:af:
         8e:0b:1e:b4:ac:90:69:4d:b3:2c:d2:4b:e0:f7:b0:26:45:03:
         7d:be:8d:3c:c3:1e:aa:55:af:95:39:67:a4:36:ee:48:f1:82:
         82:83:45:7d:03:b6:82:77:56:e6:9a:83:09:16:18:42:23:49:
         a6:b6:14:76:c8:c2:9a:78:87:23:15:55:fd:e6:96:93:f6:1a:
         b8:c4:30:69:de:51:d5:4d:6a:b4:fc:f1:83:81:b2:27:3b:be:
         32:a7:c3:a5:3a:a1:8e:b3:bf:62:48:3f:44:64:1a:95:01:4f:
         15:d4:5c:22:1b:5b:f0:05:93:03:d7:b1:22:e7:2d:a7:b0:46:
         da:2f:17:ab:a5:13:a1:c7:02:25:aa:fe:0e:96:a5:4b:20:a0:
         45:ba:e9:ea:c6:57:4f:f6:d8:ff:9f:a9:1f:16:1c:2d:13:26:
         4e:f7:e8:e4:eb:54:b9:4c:91:f5:1d:46:24:78:77:62:ea:3d:
         0c:9f:c4:f2:e1:7c:e5:75:11:e9:c7:b7:bd:44:35:34:b8:07:
         c3:62:3e:59:8d:68:f3:72:85:12:6f:ff:27:b8:ce:fa:8d:69:
         a5:c6:7c:4b:83:93:18:41:d1:72:21:f0:fa:c9:17:f6:44:de:
         3d:dd:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----