Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File:                     TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier:          JFTF7wJSnvi+Hj6LmzbHO0WqWlMY7Wj+QT3A1jTv52I=
Subject key identifier:   76:45:8F:2E:24:E2:37:9C:73:1D:DC:58:A6:70:3F:0E:0A:BC:2E:97
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer:       /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial:       0195E15913D23F42AFB8465DFC7CFE13BAF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 10:01:06 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:06 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:06 +0000
Files and hashes:         1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
                          2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
                          3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: 0eBL0ay39kfATYsGpb2WN+jQ7u4kggjnCIcMT8eCbFE=)
                          4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:13:d2:3f:42:af:b8:46:5d:fc:7c:fe:13:ba:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
        Validity
            Not Before: Mar 29 10:01:06 2025 GMT
            Not After : Mar 30 10:01:06 2025 GMT
        Subject: CN=76458f2e24e2379c731ddc58a6703f0e0abc2e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:62:d1:8e:2f:d3:24:1a:79:18:16:36:5e:
                    8d:b3:ea:8e:a7:e7:18:f4:18:f1:02:76:76:ab:d1:
                    b5:cb:0d:55:7b:91:b0:39:a9:fc:f7:60:cb:69:00:
                    36:10:fc:19:1a:02:d2:74:8a:f8:18:e3:af:da:41:
                    19:fb:aa:32:91:aa:96:a3:72:7a:58:da:8d:8d:16:
                    ed:fe:4a:dd:c4:d6:4d:e7:f8:84:cb:a5:41:80:df:
                    a6:37:65:97:6d:73:07:e2:68:a8:31:ae:76:f4:2a:
                    6e:ee:5f:04:06:5a:43:7e:79:51:46:ee:0e:18:20:
                    ee:52:de:32:18:e0:cb:b1:e2:f5:20:b0:96:17:fa:
                    6b:73:be:90:83:45:a5:ae:b6:be:80:d0:9c:31:17:
                    03:40:1e:6c:c2:9b:59:ba:b3:9d:2c:64:e3:ee:f6:
                    0a:57:da:37:7e:2a:87:11:c0:f8:e1:5e:37:36:c2:
                    24:32:92:54:f0:e4:34:a5:4b:87:d3:b0:3c:8c:59:
                    a4:fe:5f:15:42:bc:f7:b6:b9:cc:f9:e4:20:73:e6:
                    64:fb:4b:0c:a6:29:95:7b:a1:df:f7:c7:ac:03:bf:
                    2d:4e:3d:37:44:3b:c2:29:25:f2:01:63:a0:39:2f:
                    0f:e4:d3:25:f0:64:f5:df:d2:1a:ab:2e:a3:94:b4:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:45:8F:2E:24:E2:37:9C:73:1D:DC:58:A6:70:3F:0E:0A:BC:2E:97
            X509v3 Authority Key Identifier:
                keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:75:39:5f:b8:7f:21:91:23:3c:5f:5f:e5:8b:b7:ec:fb:1c:
         bb:cd:65:0a:af:42:83:24:2c:29:dc:e8:3a:42:17:5f:2b:a0:
         24:2f:e5:d6:87:7c:42:de:22:12:ba:de:de:7f:49:e9:32:1c:
         e5:c6:c9:6c:20:45:27:83:5b:96:a1:0f:cb:97:2f:5c:f3:3d:
         30:19:72:6c:3e:75:58:f4:1d:85:1b:e0:d2:06:54:e2:5e:d6:
         17:08:f1:44:8f:88:37:1b:5c:bc:44:6b:9f:fd:07:b3:35:a0:
         d1:fd:7b:18:10:42:69:af:0e:eb:ac:4e:26:ff:4b:ba:b4:eb:
         95:27:9a:d0:ec:9c:cc:0d:a1:eb:a4:fa:6a:40:0a:48:0c:c4:
         4e:51:11:ee:1d:13:cb:c9:d1:1c:b5:b7:a6:f6:d1:70:91:95:
         3b:27:36:77:4a:51:47:ec:02:29:3d:d6:e8:e1:59:29:ce:4a:
         6a:6b:7a:62:0e:f6:2e:5c:66:b3:3f:f3:b5:c1:65:b9:0f:3e:
         cc:57:63:93:7b:9a:51:2c:be:22:69:76:b2:92:b9:01:85:0f:
         72:17:09:0a:fe:93:13:3a:b3:3d:3a:c3:3b:46:8b:4d:c4:55:
         1a:1b:a4:a0:5f:b6:b9:62:5d:04:ee:9c:36:62:03:fe:7a:fa:
         ae:25:a0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----