Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File:                     Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier:          uv22/Nn7WuM7Qr7iO0Ml8KTKM4mPOtxc2JXF2Gj7tKs=
Subject key identifier:   79:98:64:D5:4F:6B:78:39:37:C6:86:C5:A5:0B:D4:DE:25:54:0B:5D
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer:       /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial:       01962F7439255EC5B10C44225464C26FCAF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number:          108E
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: gzdMPyIqWho2XoWoruYSPrSjNiQGHjgYTkoqu42JicA=)
                          2: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (hash: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:39:25:5e:c5:b1:0c:44:22:54:64:c2:6f:ca:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=799864d54f6b783937c686c5a50bd4de25540b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:2b:28:69:6d:2f:69:15:e6:02:82:f9:88:
                    70:56:d3:6e:c7:a0:b9:59:45:2a:2a:b4:96:3d:51:
                    3f:f9:2b:e2:c6:a0:e3:5e:84:4a:41:83:22:06:7c:
                    4c:ea:3a:66:30:06:50:5b:6e:30:46:ce:d3:32:b8:
                    ee:b4:1b:c6:1f:1c:f4:3f:c9:ef:c9:91:ea:46:39:
                    a1:a9:cd:02:dc:14:83:36:59:01:75:42:5f:ca:b1:
                    1e:b7:17:59:b5:24:cb:16:f8:10:e1:2f:c1:ff:07:
                    27:54:8e:6d:c0:86:d3:59:78:8d:6a:c7:08:3e:29:
                    8f:76:a4:d0:5a:94:43:76:8c:f5:74:54:f9:e3:e6:
                    90:35:1f:2f:de:df:54:f1:a0:49:52:6b:6f:ca:e3:
                    13:3e:50:c7:19:99:6d:2c:fd:99:b5:91:7a:af:09:
                    08:61:92:f1:77:df:09:1b:8f:53:d5:2e:ae:df:4a:
                    3b:07:46:88:97:77:cf:ef:16:ab:f5:af:b9:bd:d1:
                    eb:e7:d2:f5:b1:8d:f1:45:cb:0a:8e:f1:e1:1f:cb:
                    39:7e:89:57:08:3e:14:7c:77:97:3f:40:6b:2f:ac:
                    0b:fe:10:6e:12:1a:e0:75:ab:4c:d5:c4:56:aa:df:
                    01:b9:4d:24:48:18:d5:a6:96:ca:8a:b8:7b:b1:7c:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:98:64:D5:4F:6B:78:39:37:C6:86:C5:A5:0B:D4:DE:25:54:0B:5D
            X509v3 Authority Key Identifier:
                keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f9:7e:d8:8c:ab:ca:96:40:36:cc:74:2a:b0:40:af:f5:30:
         6b:3c:f2:d9:a1:17:e9:9c:5e:95:e3:5d:d8:55:ba:05:8f:48:
         c5:85:0a:6f:a2:1e:6e:83:f9:ea:d2:8b:c7:ac:52:62:30:cb:
         3a:8b:9d:8f:d6:4d:0c:59:72:27:83:ce:97:29:9e:52:d4:e9:
         79:5f:9d:85:98:ae:47:b0:3b:be:97:e3:df:4a:ff:5c:e9:e0:
         c3:86:5c:1d:06:3a:f2:90:31:de:68:5b:d8:2f:5c:1f:92:c6:
         95:91:b0:de:b6:88:af:8d:58:fc:a3:94:16:cf:af:4e:c3:71:
         df:75:06:dd:b9:5d:ee:fb:8d:78:1b:1a:3e:72:43:36:63:8d:
         60:d3:81:81:72:66:85:fc:25:6f:1c:68:8e:81:7b:3e:03:6f:
         f2:d4:dc:e9:c8:a1:96:cc:d0:3b:49:a6:3a:a3:a5:a7:be:88:
         84:f0:2e:84:b7:85:c2:f2:a7:a4:3b:c2:75:a7:3c:69:3c:e9:
         78:c6:2d:fa:4f:e6:26:9b:aa:29:38:4e:f7:96:55:b2:a6:f7:
         ee:97:b3:28:be:a6:a7:ae:45:fe:6d:48:72:35:71:81:55:c1:
         74:19:72:69:1b:b0:8d:6d:2f:45:70:81:45:91:14:44:6f:30:
         3a:08:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----