Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File:                     ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier:          xBGG+P8lNp9TTX61YWkLE+o3ZeDSe/wXKHSMs87LvqM=
Subject key identifier:   EE:1C:18:2C:CB:81:AB:86:1B:E2:0E:3B:0B:85:1D:30:C4:36:C0:3D
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer:       /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial:       01962F3D4C2539D15519E787CA86DF42CA68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number:          0C6D
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=)
                          2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: prQJ0MLu+mXG1ymX37AqvXMOhJt7SSntOws3yx7O4Bs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4c:25:39:d1:55:19:e7:87:ca:86:df:42:ca:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=ee1c182ccb81ab861be20e3b0b851d30c436c03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:df:38:8c:cd:fa:fb:0a:f7:82:c1:6b:88:
                    d9:f5:1b:e6:1e:67:89:32:17:95:1b:c7:b4:b3:69:
                    e1:52:6b:06:8d:8c:cc:32:7b:43:96:7b:07:80:7e:
                    bb:c1:1c:05:94:87:d3:1d:aa:7a:b1:5f:0a:30:70:
                    06:72:de:3c:95:9c:25:98:0f:77:33:33:68:f5:8a:
                    64:1b:e9:cb:56:c1:61:5a:a4:db:2c:4f:3a:64:f4:
                    be:18:4a:8c:28:60:c6:da:e9:be:25:1c:4b:13:6a:
                    d0:b1:0d:3b:c2:dc:74:30:f4:b1:aa:4d:62:14:bf:
                    4f:15:e4:06:88:9b:be:15:2b:1b:47:a3:95:a7:4a:
                    a7:31:44:2f:85:1b:4f:7f:56:a4:27:11:b4:01:ce:
                    b2:d4:48:36:09:69:a1:c8:00:de:9f:26:61:e3:97:
                    4e:36:2a:0b:11:b3:6b:77:f1:51:a9:52:57:fd:3a:
                    6c:29:07:ef:02:c8:42:52:6e:9a:92:43:7d:9a:5b:
                    85:87:e8:4f:d3:86:ac:62:08:de:e1:82:e2:a1:03:
                    14:71:7c:35:10:1c:4c:ee:88:bb:de:d1:1a:a9:99:
                    ba:52:04:41:c3:08:c5:30:54:47:d6:9a:00:85:8f:
                    11:e7:4d:2a:88:c4:76:c2:0d:a5:2b:2b:cb:16:4d:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1C:18:2C:CB:81:AB:86:1B:E2:0E:3B:0B:85:1D:30:C4:36:C0:3D
            X509v3 Authority Key Identifier:
                keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:81:dd:56:48:8f:87:84:f8:e2:a8:2e:c4:ce:90:da:6e:bf:
         ab:eb:e3:bf:91:37:70:80:15:62:71:7f:bc:10:f2:7e:61:97:
         f9:07:e6:e3:da:ae:a5:34:24:78:f4:a5:0e:81:09:1a:74:3c:
         b4:90:1a:8c:87:ac:cf:b4:53:36:e4:ad:60:a9:48:ab:f5:a6:
         41:82:17:60:d5:ac:44:04:60:b3:58:ae:7a:8a:45:90:2b:73:
         b3:de:fa:f2:11:51:cf:2e:85:d7:8f:e4:4f:d6:30:a8:e5:9c:
         58:65:e8:16:5e:02:0a:08:3d:f8:71:c5:67:b1:4c:15:d5:97:
         58:eb:bd:1d:75:af:12:0c:ab:75:04:b2:ea:0d:a9:0c:ed:b7:
         94:f9:11:5c:37:63:50:88:94:82:1c:39:2b:8d:85:ed:9c:d1:
         70:b9:a4:17:4c:3b:45:c8:f1:1b:83:d3:9f:bc:9e:e9:86:6c:
         48:0f:c4:3c:32:d4:6d:00:76:f7:73:d2:9c:04:84:e2:09:28:
         9d:b3:f1:15:7a:e5:3f:9e:74:6e:b9:e8:f7:ec:6b:c7:5f:f4:
         e9:30:cb:64:1f:20:5a:1a:1b:a2:c8:5f:41:71:85:9e:56:82:
         29:b0:d2:b2:25:10:90:d0:ab:5d:42:b5:a0:00:b4:30:e6:01:
         05:45:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----