Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
File:                     TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json)
Hash identifier:          69P77AECRO+5YRxOROM+dzcNXJmHPNuDK72ifWSdHHw=
Subject key identifier:   55:41:82:86:F7:E1:CD:CF:CA:2A:4C:A7:AB:11:93:E1:81:3B:DB:08
Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
Certificate issuer:       /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Certificate serial:       01962E996405DB1EAC46340A478B2EF9DC4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
Manifest number:          0284
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: M1M7HuPtGiosGSo4FBz1zc0zdo4.roa (hash: NcnqoCTtbPhCjxo06sSrzfv3k+hjFXX2MJeaGNHx2bI=)
                          2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: Afv4IMKERVh2+kD3WEaxPpBPvUnDwpS9J97h417BPmw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:64:05:db:1e:ac:46:34:0a:47:8b:2e:f9:dc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=55418286f7e1cdcfca2a4ca7ab1193e1813bdb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:aa:c6:37:13:ec:f9:d9:13:8a:f0:44:97:
                    8f:d1:4a:0f:fe:03:39:a0:70:77:e5:24:40:89:f6:
                    4c:2a:70:c3:78:bf:41:81:e6:c5:db:4d:45:69:be:
                    37:1b:54:3f:32:53:3d:cf:18:9c:bc:cc:88:15:e6:
                    14:bc:77:65:27:1a:76:6d:78:0d:1d:40:58:41:0e:
                    71:24:06:2b:a1:dd:53:2c:54:99:24:2d:f2:3b:f4:
                    cc:57:f5:9c:02:68:44:e8:6a:83:8d:c4:66:3e:d4:
                    0d:7d:86:43:7d:7d:26:7e:c4:8a:34:a7:9b:8e:bb:
                    f2:8f:92:e8:35:d9:b7:ac:c1:9a:54:f9:7a:66:a6:
                    3c:0a:94:83:8e:46:c0:51:e4:50:4b:1d:0b:70:02:
                    6e:b7:d4:9f:21:08:25:3d:2e:08:97:d5:cd:55:21:
                    03:a9:80:a0:6f:ce:3c:05:c4:32:37:10:3e:90:97:
                    ca:c7:8d:50:65:92:b6:54:f1:cc:cb:81:4d:a2:16:
                    0b:de:b0:1a:10:4d:d9:71:54:13:e1:c5:3b:86:f4:
                    90:15:e1:df:0f:8f:06:ba:7a:63:0d:2b:57:1a:89:
                    71:b0:f0:2f:7e:3f:4d:d0:a1:96:49:32:28:f4:d5:
                    76:4c:4c:cd:15:12:42:99:86:41:f0:c8:7b:3a:ca:
                    1e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:41:82:86:F7:E1:CD:CF:CA:2A:4C:A7:AB:11:93:E1:81:3B:DB:08
            X509v3 Authority Key Identifier:
                keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:01:f9:a3:a5:10:75:5d:c7:43:21:bc:4b:f5:12:a2:ef:5f:
         b6:5f:12:ed:a6:38:75:a6:12:62:a9:3e:54:8e:2a:14:c8:67:
         8b:03:30:b4:17:61:62:a4:f3:d0:de:8f:d9:80:16:76:10:f5:
         55:6e:95:61:98:46:a1:5f:6e:be:ac:c6:f7:aa:af:3a:c6:72:
         b0:69:c6:e3:08:52:7a:55:da:97:26:4b:b8:df:63:63:fa:f9:
         3b:6b:40:2a:2c:d8:cb:14:43:cf:27:4a:58:b9:87:5b:1f:41:
         24:3b:90:59:e9:63:cc:f4:89:be:bf:17:72:b1:c5:93:08:f9:
         1f:06:b8:bb:a3:4a:d0:ed:89:b6:58:4e:c2:c0:7f:77:d0:93:
         c8:6b:e0:67:d1:a4:00:a6:b0:91:71:9a:26:9b:e4:74:1e:b8:
         f1:f4:18:57:77:a3:a9:d8:09:e5:5d:19:a4:4b:bd:7f:ff:a5:
         33:3f:10:26:3b:92:3f:77:48:dc:41:77:43:cb:37:f3:18:dd:
         09:87:d1:61:37:68:fd:18:23:b2:6b:da:b2:0b:48:35:31:15:
         48:33:71:7f:a8:ed:40:48:e7:c4:5a:99:c0:4d:6b:03:0f:fd:
         f2:40:5d:1b:07:95:ac:ce:ef:8f:9b:5b:6e:59:0a:3d:a5:d3:
         aa:83:ab:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----