Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File:                     RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier:          4Bz7DfO5O1hr568fXjAsJ6963+oOccqROAYFpXFdc3E=
Subject key identifier:   BD:49:8E:7C:66:D7:AF:6C:E8:9A:95:60:0B:FA:65:5B:9A:F9:EB:17
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer:       /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial:       01962E98CAA6C0369DD743BC6EC04F793124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: qHtqt52fXlzAYaIh0n65eD8bBMFQaoVx02g+QYa8QQQ=)
                          2: xOrZrnnNO1wW9p4s49S_LuX8hPc.roa (hash: hZIiC9kkNV8eJaOx5V1jcu1tdvVz3yuRCZDhua0CV0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ca:a6:c0:36:9d:d7:43:bc:6e:c0:4f:79:31:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=bd498e7c66d7af6ce89a95600bfa655b9af9eb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:d3:30:36:80:d1:bf:6d:0d:91:09:ba:62:
                    f2:73:9e:fc:a4:85:a4:c8:be:47:65:e6:f7:f3:f3:
                    26:49:7c:32:93:13:4c:d1:4e:13:7f:d8:87:22:1e:
                    00:c1:ff:60:c9:eb:c5:52:40:08:ee:44:57:f1:b0:
                    cd:4f:78:92:25:3e:75:0e:61:4d:ae:13:55:3c:76:
                    b6:80:83:c3:7a:d3:03:04:d3:61:0f:d2:94:65:7d:
                    21:6d:72:84:2c:ff:7f:a6:27:81:58:6c:48:c9:f3:
                    22:1d:d7:a5:bd:d6:ec:ca:a4:87:94:f8:be:1b:81:
                    c9:e3:11:db:e8:14:78:ff:0e:5d:fe:99:f7:04:a6:
                    c6:7b:13:5b:50:cd:87:4d:28:3c:0a:fa:3e:66:21:
                    44:d1:8c:23:a4:c9:33:75:38:0e:2d:d7:f4:e3:91:
                    e7:65:f3:14:3f:77:8d:15:33:d6:55:97:9f:0e:41:
                    dd:93:e1:24:d2:d3:0f:8c:37:ab:d6:f0:41:48:37:
                    69:7a:8b:52:2f:a4:07:8e:fb:8c:ba:f3:41:dc:4d:
                    e3:cd:28:3a:bb:ed:fa:4d:15:46:f9:5e:1c:e5:35:
                    13:ba:34:7f:76:50:30:d1:cc:33:de:ae:00:ea:ad:
                    29:d6:db:68:c7:75:fe:ab:ec:78:a5:cb:3c:3f:c9:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:49:8E:7C:66:D7:AF:6C:E8:9A:95:60:0B:FA:65:5B:9A:F9:EB:17
            X509v3 Authority Key Identifier:
                keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:04:0b:78:cc:79:20:ae:97:42:d4:f7:d3:eb:1c:67:a8:24:
         d4:6c:ac:95:63:66:56:4e:2c:96:21:c7:34:07:45:fd:f3:f7:
         5a:55:42:34:8b:e5:3b:80:43:8f:43:28:a9:2c:35:2e:7a:49:
         30:b8:8c:05:f8:ad:b2:14:9f:32:ed:1b:ce:6f:f9:8b:23:16:
         ba:7b:51:8a:f0:5b:d1:1e:0e:46:ef:da:15:42:a9:bb:c2:c8:
         79:07:ba:32:87:6e:b3:77:10:88:f6:fb:d3:43:96:1f:dc:db:
         c3:97:0f:4a:f3:d4:2c:cf:46:ee:8c:cf:6c:28:e4:b4:f4:a0:
         f2:45:cc:e6:cf:4c:db:77:bb:c2:4c:cb:1a:51:6a:d0:d8:69:
         c1:6b:ce:5a:85:cb:f7:f1:13:0c:47:25:d5:d1:cc:79:ca:ca:
         a9:49:28:6a:16:7b:e8:79:14:4f:e6:d8:6b:71:69:50:90:eb:
         63:59:3d:6e:73:5c:c0:5f:e3:5d:85:53:08:7c:27:36:ca:e2:
         49:e3:c7:15:9e:61:68:c1:a0:29:34:c5:20:de:dd:b1:d1:38:
         29:0b:6f:b2:8e:c4:d8:21:4a:ad:1a:d6:5f:e0:cb:a6:9f:50:
         e4:42:1c:75:8e:0e:70:d0:9f:b3:60:0b:d1:ec:6b:b4:72:09:
         c9:47:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----