Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
File:                     zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json)
Hash identifier:          F3vjt3CjausiilcxgQ5283UiqHN+U0PlqEQVQZcVKNw=
Subject key identifier:   CB:58:18:B2:4C:34:6C:5F:B7:74:1C:7B:21:F7:50:59:F6:FE:2C:96
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Certificate issuer:       /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial:       01962F07288A3091B1AD927411004EEB7C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
Manifest number:          04D1
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: iNl8zzcvZmRuhD2YQb8-W7H81eQ.roa (hash: FTzN6CpidpBuW4DXl4df5sOP/k12RBOaqn9tZczA5b0=)
                          2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: peL6TWLZc/F4EgwJe08vOVBbfQrFhep2NdJNUlrwvfE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:28:8a:30:91:b1:ad:92:74:11:00:4e:eb:7c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=cb5818b24c346c5fb7741c7b21f75059f6fe2c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:2d:25:c5:04:30:5e:cb:16:57:41:14:40:
                    bb:40:bc:87:c0:d0:91:84:4e:2c:ba:9b:09:63:af:
                    c0:8b:aa:1a:26:c7:0a:02:84:b9:c6:7a:e6:d3:c9:
                    53:e7:4a:5b:7b:00:ad:1d:8d:4f:83:4a:0b:59:93:
                    97:4c:de:b4:f4:6a:7d:d7:22:b6:7e:d4:1c:63:f7:
                    7f:62:de:0c:54:06:4d:e9:01:4e:64:1e:bf:0a:42:
                    d7:99:af:26:56:1c:4b:2b:4e:a4:77:cf:d2:ed:aa:
                    9c:f7:73:63:c7:d5:ba:bd:23:67:d4:b7:0a:15:ad:
                    4e:9c:8c:4f:aa:b5:f4:da:02:51:02:09:65:d8:f3:
                    c9:ce:64:9e:fc:36:55:db:61:fc:86:f9:c2:bf:21:
                    14:1b:55:9c:40:52:8b:6b:13:3d:cf:47:53:5a:57:
                    38:03:0b:c9:7d:9c:b5:23:90:d6:f0:6c:2c:ec:61:
                    8d:cc:83:6f:c1:dd:13:28:8f:db:b8:6c:83:15:21:
                    3c:d4:b9:b8:d1:59:05:38:dd:0e:09:16:14:0e:17:
                    43:74:92:31:d8:86:85:ee:58:65:f5:20:34:cb:d4:
                    a0:3a:d1:de:18:96:64:fe:53:43:22:c2:e9:1a:c7:
                    29:72:33:09:95:2c:90:87:11:46:63:be:da:41:b4:
                    df:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:18:B2:4C:34:6C:5F:B7:74:1C:7B:21:F7:50:59:F6:FE:2C:96
            X509v3 Authority Key Identifier:
                keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:31:45:2f:45:71:e0:53:f1:ba:1f:41:bc:1f:53:75:ae:4f:
         aa:53:d6:fc:94:d1:30:7a:cb:15:3f:40:51:d3:6d:02:eb:a9:
         2b:e3:4b:51:bf:74:b7:b0:c3:be:fa:70:91:aa:0e:63:6a:f8:
         28:dc:6a:4f:4a:df:ba:db:3b:8a:b3:36:dd:e0:38:5f:bd:97:
         63:1e:32:8e:86:54:e8:3e:47:86:19:0e:58:2c:40:35:19:f5:
         f6:75:20:36:a4:36:8b:6a:51:dd:d9:39:3d:17:50:bd:5c:4d:
         11:11:21:a3:6d:b8:a8:16:a9:23:29:85:40:c3:cf:67:de:63:
         34:dd:28:b1:8a:88:83:a5:c9:c2:e0:b4:d8:3a:58:56:5e:09:
         e0:b0:75:32:e0:29:76:d8:cb:8c:79:90:f4:73:08:43:19:c0:
         0d:73:af:b1:6d:85:b5:53:0e:b0:86:44:a0:b7:50:2c:96:c6:
         37:69:5f:69:56:00:7b:64:ee:ef:e0:f1:09:4a:a1:8b:5b:34:
         2f:1b:ba:d6:58:6c:06:31:57:46:91:4b:fa:b0:0c:88:37:69:
         29:b5:67:7c:6d:73:f8:b5:20:07:f1:e2:18:04:a9:ee:d4:2b:
         c9:6b:db:6b:66:a3:88:f5:76:1b:b7:67:5f:ea:bf:ea:4e:07:
         cf:e5:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----