Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File:                     TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier:          IlRQTTN5U/zT9GwX1xGKVAJix7MWnieit90TrYHKAYs=
Subject key identifier:   AF:44:6A:53:31:D3:69:88:52:8F:13:11:42:F2:35:E7:AF:B5:A4:00
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer:       /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial:       01962E2B1ED94A4CBD1D22EF97FE99054C9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number:          0172
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: /5Kw1Zoztt32O31QQqijS5UCSwQhQ8YSkBcpzwbI6hE=)
                          2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=)
                          3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1e:d9:4a:4c:bd:1d:22:ef:97:fe:99:05:4c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=af446a5331d36988528f131142f235e7afb5a400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8c:27:5f:6c:98:95:1b:0e:8c:1c:b0:84:15:
                    3a:e7:69:f9:89:68:94:f2:69:9d:92:0f:36:8f:2a:
                    5c:19:b3:4b:5b:c0:9f:c7:96:fb:49:54:38:4c:fa:
                    c4:2a:d9:76:62:fb:5f:04:b5:fe:d6:bd:1f:b9:0e:
                    42:98:8a:63:fb:38:f7:10:89:75:8b:ba:95:56:12:
                    2a:c2:68:fb:a2:eb:41:16:29:58:b6:71:d2:03:74:
                    83:75:03:61:29:84:e7:bf:ea:66:70:e6:f2:fc:9d:
                    43:ad:88:13:48:2d:43:b7:92:02:a0:6f:fa:f3:86:
                    48:15:19:3e:dc:23:d3:ad:f4:ae:ba:3e:e4:49:b0:
                    bb:31:c5:29:26:0e:59:62:02:1c:d2:95:20:c4:6e:
                    4f:f1:b6:43:c3:08:3d:f4:63:1a:95:fc:bb:a8:0e:
                    45:a9:70:6d:51:a4:f8:39:4f:2d:94:e3:a2:6c:27:
                    9c:9c:35:c3:e8:f8:a7:fc:c9:79:10:95:e3:9a:06:
                    8a:b8:c5:75:17:43:e6:6b:87:58:1b:1a:27:3f:66:
                    b8:19:be:88:a0:b9:db:58:71:14:42:10:8f:f1:79:
                    69:15:c8:18:ce:bf:20:f6:57:04:56:e2:24:2d:ca:
                    92:33:bc:7e:e0:a8:44:b7:33:c9:4a:7d:1b:d8:96:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:44:6A:53:31:D3:69:88:52:8F:13:11:42:F2:35:E7:AF:B5:A4:00
            X509v3 Authority Key Identifier:
                keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:71:1b:bb:26:71:98:c3:e4:4b:91:51:3b:3d:56:20:a1:90:
         6f:00:de:9f:e5:d2:a1:36:22:9f:05:71:8a:b4:2b:2d:da:81:
         a0:b9:d8:1c:cd:0b:7a:d1:80:c7:41:d6:07:5a:56:85:85:da:
         5f:62:f5:ac:a1:04:e3:03:42:47:96:2e:5c:4e:39:bc:2f:de:
         f7:95:b4:63:da:0a:6d:a5:2f:b1:a4:46:6e:99:d1:11:dc:f4:
         24:fc:7a:88:a6:fb:d9:1c:a2:f5:29:a1:8a:02:45:17:5a:36:
         82:e3:7a:83:d2:2a:50:21:ed:06:63:18:eb:23:6d:74:18:ce:
         3c:5c:93:79:8d:cd:c9:02:1e:5a:17:8d:92:70:05:98:d2:35:
         5e:10:11:86:b0:d0:e2:16:1f:59:89:54:25:50:97:44:5e:a5:
         65:6b:3d:25:f0:1f:ee:8d:80:53:40:2e:76:17:cc:e1:23:67:
         6e:ae:aa:43:82:3a:08:f7:5a:f4:76:c9:c7:a8:50:e4:56:70:
         60:e1:44:23:70:57:47:94:2e:ad:1a:f5:90:62:b0:48:6e:69:
         81:0a:c2:08:c3:2d:04:92:12:a0:5f:f2:6e:71:78:1b:e3:8b:
         22:42:98:bc:1a:1f:1c:0a:20:76:5c:0c:c8:91:8e:66:bd:26:
         6f:26:b3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----