Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
File:                     Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json)
Hash identifier:          QLk8MUUmP3vNMIkiYZCiTsjN6d3QZ6CbbcLP10mdiV4=
Subject key identifier:   5B:EA:8B:68:4B:3A:B2:2E:85:A9:01:C7:B9:D8:B6:B4:CD:3E:10:89
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Certificate issuer:       /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial:       01962F06AF5486A568C5F0B004DFB8A8743E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
Manifest number:          02B3
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: cIPaAVZqhcgR0r5dorJK0Pfcwx385rsOVMqYzN2ifBg=)
                          2: dRB7xJtajjzk6UoGyoSGsT51giI.roa (hash: YcmDNZ/enUR0rChrVz40koeNmEa+q2s38R7f9KQbajo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:af:54:86:a5:68:c5:f0:b0:04:df:b8:a8:74:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=5bea8b684b3ab22e85a901c7b9d8b6b4cd3e1089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:50:ee:83:5b:08:5b:b3:8b:28:1a:98:ea:
                    65:51:08:9d:6c:9f:c2:91:47:53:e9:9f:8e:76:12:
                    e5:65:22:8b:a2:2a:f6:60:3d:f1:0d:07:af:3d:63:
                    06:6b:a7:ce:67:12:d7:4d:6c:da:07:1a:7a:43:d1:
                    df:25:93:a4:f6:85:13:69:78:a3:f2:1c:20:b9:ea:
                    d8:c9:1a:a2:0d:4e:86:31:ea:75:40:a6:62:b1:d4:
                    48:41:45:18:05:34:df:fe:d6:66:d7:f9:fd:28:77:
                    f6:3e:eb:71:86:5f:2c:b2:76:ff:d9:a1:6b:52:d3:
                    a4:31:a1:f0:66:80:ea:5c:c3:bd:52:6b:09:42:16:
                    91:21:72:e0:37:39:8e:22:8b:e6:4f:5c:17:3f:70:
                    11:b5:b9:8f:f7:36:fd:d2:cf:a6:69:e1:b7:00:2f:
                    64:3c:c1:52:c7:ca:17:e5:f7:1a:e8:6c:4a:25:93:
                    64:a1:12:b3:44:b0:e7:9c:63:9a:68:a9:cb:df:24:
                    45:af:02:49:d1:df:84:4c:db:4c:cd:e1:1d:d1:ae:
                    5d:c4:03:5f:49:79:a5:ee:ce:f9:c0:0e:ea:ea:d2:
                    6b:ab:dd:6e:c1:7a:f8:49:9e:66:02:7f:2a:fe:62:
                    9c:b8:1b:1c:ef:82:24:6a:9d:7d:24:e3:84:b0:08:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EA:8B:68:4B:3A:B2:2E:85:A9:01:C7:B9:D8:B6:B4:CD:3E:10:89
            X509v3 Authority Key Identifier:
                keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ef:41:a0:35:1d:83:36:5d:ac:39:27:91:25:d2:dc:ba:53:
         2a:a5:8a:f6:be:80:0b:64:20:6b:49:fb:d2:3c:e3:41:00:0a:
         23:f3:45:64:ab:1c:34:9b:da:8e:69:ac:81:a8:de:9a:e7:e4:
         7b:b4:48:49:c3:62:b8:60:cf:5c:08:92:0b:15:74:5d:a0:8f:
         7e:b7:11:2c:ae:d2:97:24:16:9a:df:37:9b:82:64:77:28:ef:
         e9:4f:ac:2b:4d:e9:20:17:cf:6d:04:5a:bf:b0:cd:31:a8:74:
         e1:3a:f7:1e:32:2e:e6:dc:77:a1:8e:d6:63:45:b9:ce:e8:de:
         cc:44:f4:4a:1f:0e:64:b7:7a:fa:10:e1:67:e7:f0:bc:3e:63:
         25:4a:c2:72:57:93:93:a9:fe:09:1c:e6:0b:b2:b7:ea:71:ce:
         86:7c:f4:36:0a:6f:ef:7b:05:51:31:ff:87:0b:b1:5a:9f:fa:
         77:bc:2d:e0:06:6f:4d:b3:35:2a:62:7c:47:f6:5f:72:de:5e:
         08:25:b4:e3:0d:70:f9:87:17:ad:b5:33:db:3b:70:66:d9:97:
         7a:df:d7:13:e6:66:b9:37:eb:b3:92:37:70:8f:3c:5f:e9:17:
         2e:02:99:7f:f8:e7:69:af:f5:34:b6:8b:8f:ef:88:1f:67:4b:
         39:41:0e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----