Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
File:                     TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json)
Hash identifier:          oLi+sz+O1C6tjSU1bSjLsz3Ymlax9qi3r24gFkct7qE=
Subject key identifier:   CC:1B:C6:18:27:93:DE:B6:83:62:70:A0:BC:12:51:DD:83:22:BE:68
Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
Certificate issuer:       /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Certificate serial:       01962E989CCE8F8FB50BA837AD52A074A4FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
Manifest number:          082C
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: UARx4WJxXTak2UuN2nnU1qDaLOJJHdDtW593qClcvsI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9c:ce:8f:8f:b5:0b:a8:37:ad:52:a0:74:a4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=cc1bc6182793deb6836270a0bc1251dd8322be68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:98:4f:87:4d:a3:3d:3c:09:e5:b2:37:73:
                    8e:55:e0:b0:31:13:db:c9:33:cb:74:09:b7:78:97:
                    e3:7c:f3:fc:c0:2e:b4:dc:65:83:d2:35:b3:ed:22:
                    45:2b:53:dc:0c:af:6d:e5:fc:d0:ca:c3:c3:3d:50:
                    b0:8d:bb:fc:a3:4f:ee:96:ed:40:e5:36:c7:10:2c:
                    fb:ad:1a:71:bd:1f:60:6e:d9:57:3b:db:cc:fe:92:
                    80:8e:e7:19:6c:0f:c2:fb:f6:2b:ac:e2:c8:c1:b6:
                    bd:e2:91:e1:f4:3d:7c:7b:54:8f:e9:04:90:37:de:
                    28:b8:25:ca:f1:4f:59:ef:f1:d1:04:9f:e5:52:e8:
                    09:b3:aa:1e:17:5b:b9:52:fe:a2:41:a8:79:e4:fa:
                    37:24:68:ec:83:6f:72:12:d3:4c:af:33:fa:63:8b:
                    5b:24:b6:5a:61:14:48:ee:7f:47:8f:fa:67:77:d3:
                    67:ed:69:76:55:36:05:c9:84:61:97:3b:5e:62:b8:
                    66:48:b9:00:0b:2f:c0:61:00:e9:88:23:63:83:cb:
                    86:cb:5b:66:4b:25:08:1a:e5:05:de:8a:d8:58:90:
                    87:66:f5:06:a9:6a:98:c8:0a:ed:5c:fd:c5:12:04:
                    ac:c1:17:cc:26:0c:d0:74:06:2c:66:37:7e:8c:1c:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1B:C6:18:27:93:DE:B6:83:62:70:A0:BC:12:51:DD:83:22:BE:68
            X509v3 Authority Key Identifier:
                keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8e:98:b1:89:65:2c:5f:e3:d4:90:8b:54:f9:ee:f4:47:f4:
         4a:72:fb:bd:da:75:dc:f1:16:8e:49:12:ac:5e:fd:93:df:91:
         14:16:eb:36:ae:3b:ce:59:0d:63:63:63:b9:3a:fb:5a:e2:84:
         2e:6d:27:eb:c6:89:46:36:70:ef:10:38:5a:e1:7b:12:46:50:
         a6:ef:92:c8:2a:93:6b:d3:01:ee:88:0c:c9:94:c2:ce:7b:6b:
         f2:ca:a7:aa:b2:44:39:e9:9b:8c:1e:34:c4:42:7b:7c:34:20:
         6f:af:07:3e:10:65:77:1b:b3:42:f4:68:f4:d1:7c:b0:dd:ce:
         47:bc:ab:a5:b4:c6:53:71:55:76:01:76:c9:a7:6a:8f:ba:06:
         d0:a3:de:dd:7a:ea:f0:7c:b8:fb:aa:b2:59:00:8e:1b:40:6e:
         20:94:cb:1a:a7:ab:aa:7a:19:1d:a4:f6:e7:4b:50:17:56:35:
         7a:5e:af:5d:a9:8e:82:2c:eb:67:17:da:db:bd:79:54:d3:f5:
         59:6e:a4:9a:8c:f3:e7:8b:05:2c:6a:e2:7b:10:e0:d1:fc:d7:
         b8:71:e0:f8:2b:c4:2d:1e:41:81:97:57:f4:12:88:7e:b5:e1:
         5d:ef:29:b7:4a:9c:45:38:7c:ee:62:aa:ac:66:db:e4:6f:1d:
         0e:48:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----