Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File:                     TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier:          f/7rmIh8m2STypbQpqnYsJ2cpdEIDBce7zmTrgagvtU=
Subject key identifier:   72:CA:32:E5:54:24:2C:2B:24:5E:41:F1:81:F2:28:D4:C8:05:DD:2A
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer:       /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial:       01962ECF50EAE67171957FBFD0D4DEFBDD4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number:          09A0
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
                          2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: qHLhTgcKsqRl5DNG/aQXh9e0HW6WOpg9d4gPFWzXuWc=)
                          3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:50:ea:e6:71:71:95:7f:bf:d0:d4:de:fb:dd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=72ca32e554242c2b245e41f181f228d4c805dd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:1d:68:d7:de:98:60:cc:e5:85:c4:b0:44:
                    f2:fa:fa:3a:1f:8f:d9:e8:43:5f:f4:68:77:33:78:
                    d1:fe:6f:87:69:64:5f:c0:87:b1:6c:ae:0a:3d:e4:
                    a4:18:c1:76:40:30:4d:db:d2:16:a6:d3:1d:f8:53:
                    97:b0:83:74:ef:75:3d:c5:90:e3:80:1c:d9:0f:34:
                    a2:a6:42:07:04:9d:09:67:c6:58:95:f5:cf:92:77:
                    27:91:ba:eb:c9:60:d0:b5:15:30:dc:88:1e:c1:ae:
                    13:6f:21:be:b7:9a:f0:42:8c:a5:66:78:ab:22:9a:
                    9a:0c:02:b5:7e:8e:2c:5c:2b:55:1d:f6:56:66:27:
                    ab:e2:24:0a:7b:ca:88:e2:25:e3:1b:50:06:45:5f:
                    78:44:5d:85:75:1d:9e:80:7a:27:35:38:cf:dd:9f:
                    1a:2b:fc:78:95:38:35:03:d5:78:29:9d:a4:7d:f2:
                    28:ad:d1:34:94:47:5e:1f:9a:b6:48:41:7a:95:74:
                    96:e2:b7:d1:32:26:8c:b7:a8:fd:ea:9b:00:53:68:
                    18:8a:f0:27:ae:6c:f3:e7:4c:54:3d:68:e9:25:89:
                    9c:a7:b8:f5:87:af:51:0d:df:2b:93:b9:5d:ff:ed:
                    b1:20:8d:55:94:49:60:67:be:18:73:2d:10:c8:88:
                    e0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CA:32:E5:54:24:2C:2B:24:5E:41:F1:81:F2:28:D4:C8:05:DD:2A
            X509v3 Authority Key Identifier:
                keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:14:e5:aa:6a:92:ea:3f:20:81:61:14:5c:e2:83:b2:26:27:
         6f:f3:34:fe:66:74:ea:2c:3d:d3:53:06:c6:17:b0:c2:97:ae:
         d9:cc:cd:82:e4:5e:69:32:16:70:c9:e3:6f:87:38:86:36:a9:
         ed:c1:dd:01:0f:dd:de:f4:db:9c:36:9f:64:65:d9:93:fc:9e:
         9d:5b:56:1b:4f:d4:81:b0:b5:90:03:4b:8d:08:8b:b8:ae:4c:
         d2:8c:63:e6:f3:ae:c9:97:ad:1f:2d:b8:0c:d9:57:aa:6e:85:
         f2:39:6f:5c:f5:2e:ec:a5:b9:65:4b:76:b7:ed:91:b8:b1:42:
         29:4e:b7:8e:85:71:21:46:6b:11:74:e6:76:1e:7d:7b:d3:b4:
         7f:2f:9a:71:e5:fc:a4:9d:11:30:36:08:e6:9a:6f:63:8a:20:
         d7:08:b6:d1:d3:70:77:ba:3a:0d:e8:3e:15:ff:49:c9:a5:9a:
         c7:d0:8a:33:c2:84:98:d5:84:0c:98:75:7e:53:b8:36:57:e0:
         01:f3:8e:0b:86:54:8a:b0:01:e8:58:0e:33:b6:91:20:b1:0c:
         ec:1c:05:6d:a8:6f:f2:6c:74:08:fd:4e:ac:d7:53:27:d5:c1:
         aa:b6:ff:ae:15:69:a2:32:97:44:6f:ab:4a:77:a4:3f:13:04:
         80:8c:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----