Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File:                     zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier:          n0ns8EM0OmxgMigWvvdUMNOsPOGmQP91A43CfWbvlX8=
Subject key identifier:   01:BA:3C:2D:45:6F:99:DA:19:17:3C:17:99:6C:E9:DC:5A:B3:EE:DB
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer:       /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial:       01962FAB06E6603034330709DA1EBB91DBF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 15:00:59 +0000
Files and hashes:         1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
                          2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
                          3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: pTytvBFQIvjPf8raF6fHech7cKz2kd/Yx/gF5aYuCaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:06:e6:60:30:34:33:07:09:da:1e:bb:91:db:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
        Validity
            Not Before: Apr 13 15:00:59 2025 GMT
            Not After : Apr 14 15:00:59 2025 GMT
        Subject: CN=01ba3c2d456f99da19173c17996ce9dc5ab3eedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:68:47:c9:d4:86:dc:f7:6a:6a:ff:dd:f9:
                    09:38:c2:86:3d:a6:d0:9d:a0:95:9d:13:05:a8:4d:
                    7e:74:04:03:a6:69:73:ff:8d:e2:0a:5d:59:40:6b:
                    ba:ff:15:18:c5:eb:e8:37:a6:f9:5c:87:57:3a:51:
                    f2:d4:51:ab:0e:ff:8b:d3:04:9a:d0:c7:ef:15:55:
                    e6:5d:1f:88:61:51:3b:69:e2:7f:fd:65:8c:7a:bb:
                    fa:1b:d4:7f:b0:5b:6e:92:28:83:3c:5a:12:3a:2d:
                    d5:bd:7d:dd:92:b1:7c:06:71:06:70:3e:ee:63:70:
                    5d:52:57:74:13:70:a9:4b:58:2e:28:40:12:46:b1:
                    ea:71:b1:2b:f5:c1:c1:72:6f:ec:eb:1a:2e:4d:01:
                    a1:03:59:56:f4:ec:a3:8b:67:06:a2:9b:f0:99:fa:
                    e7:1a:00:33:bc:3b:8a:35:20:98:78:f4:05:64:17:
                    cb:ff:fc:5c:cc:08:dd:58:d7:2d:35:fb:6e:c1:79:
                    0d:b1:c7:ac:d4:dd:ef:d2:85:f2:d0:e5:44:b4:3a:
                    27:f4:21:06:18:18:3e:ef:19:1a:2e:30:0e:8a:fc:
                    03:c7:f4:81:50:7a:75:0b:d1:6e:41:f1:82:f6:c0:
                    07:8a:1b:1d:b0:6e:c6:cd:27:65:0d:2c:a4:2d:b0:
                    f2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BA:3C:2D:45:6F:99:DA:19:17:3C:17:99:6C:E9:DC:5A:B3:EE:DB
            X509v3 Authority Key Identifier:
                keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6a:69:16:97:21:01:1b:02:f6:79:9f:af:63:1b:e6:7f:71:
         42:7a:3c:61:8e:9c:5b:4f:3a:97:5e:d0:dd:01:bd:c3:13:4b:
         d3:47:70:a8:5b:4b:b7:74:dd:79:66:43:e2:47:49:3a:d2:70:
         10:78:9a:37:b1:da:da:c8:4e:a5:c3:62:c1:3f:45:e4:09:a6:
         3d:39:3f:88:12:40:ce:bb:b4:77:03:57:86:e7:b3:38:b9:0d:
         82:b8:0c:f2:e9:04:b9:d6:12:ce:ce:a1:11:db:1a:43:f5:da:
         78:1b:e4:00:9b:26:73:46:1c:38:26:83:85:e3:7b:48:11:1d:
         f8:5f:7f:32:45:9c:71:c5:68:2f:ec:af:99:62:b9:8d:9d:f5:
         59:76:b8:5c:ef:3a:b0:ff:31:37:ed:c2:86:ca:fb:3a:61:1b:
         73:92:f9:53:d8:f9:05:f5:f4:80:d0:2f:64:9b:e5:f8:a5:8f:
         e4:e9:bb:ef:33:ca:9d:0b:94:c1:03:ab:ce:e8:f8:f6:36:33:
         62:7e:53:f5:0e:08:a9:54:fc:43:41:78:4e:15:01:04:52:81:
         de:18:0c:04:20:ad:fa:f8:85:47:d2:4d:3d:6c:e2:fd:19:e4:
         77:8c:1f:0a:1d:91:ad:30:68:38:39:38:84:56:aa:71:17:49:
         f0:2c:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----