Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
File:                     zXPyONls9npe_Aw3R2_TBgKa9VI.mft (raw, json)
Hash identifier:          lDNjJGQx+k3XE//1k9vqKq8av70tj3GDqfNdmoIrk3I=
Subject key identifier:   48:60:3F:D2:00:C7:E8:4F:BA:8C:AE:D9:08:F5:58:F6:7A:56:E4:34
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Certificate issuer:       /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial:       01962FAB43F87623FBD1C8C4839EE50960CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: 1IglzTgNxvlQxtZzdqvHXP8KoF8.roa (hash: ONhCC/oPBTKCApZ6GbcEqvO3nMk4C52NzJJDkv5+JsI=)
                          2: rkFFxagKsCZzL6ha1afROc46-i4.roa (hash: X8v0BqEuUtbA/N/cHBtFm11dCr+R+u6qXiVNMBQlsf4=)
                          3: zXPyONls9npe_Aw3R2_TBgKa9VI.crl (hash: auIpf/lpR3Tf5GYFV4ptg8ljJvNzvBNQVAilhRKR9+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:43:f8:76:23:fb:d1:c8:c4:83:9e:e5:09:60:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=48603fd200c7e84fba8caed908f558f67a56e434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:d3:cb:fd:67:bf:16:9a:2c:3f:ba:ec:4e:
                    36:c5:30:9e:11:36:fe:68:69:f3:72:28:78:04:b8:
                    28:9e:e8:d8:d7:df:48:ff:e7:b0:2a:f4:99:68:dd:
                    f2:6e:32:f2:42:4a:66:9e:83:cf:fd:86:15:a4:3c:
                    9a:3a:0c:0b:ad:f1:39:c8:77:69:e7:4d:7f:5a:21:
                    78:ba:8d:95:11:c1:96:c0:06:e5:be:5a:4e:5c:4c:
                    93:ea:a8:ae:cd:b4:1f:49:84:f6:09:c0:a1:e4:50:
                    2a:89:2e:12:f9:8a:6c:04:2d:12:e0:6f:1e:e6:74:
                    da:5c:d4:ca:68:12:e4:c3:19:02:3a:98:76:44:69:
                    43:fe:da:8d:be:d5:41:e5:6a:89:c8:48:6e:23:fc:
                    7d:e0:c9:ce:66:dd:d6:9f:55:f7:e5:42:78:ec:bb:
                    f8:a7:15:30:21:9d:0c:33:9c:01:11:63:ff:20:c0:
                    b9:de:e2:e4:af:2d:a7:f8:67:cf:6d:a9:ce:31:17:
                    d2:68:f7:dd:5b:ca:e4:91:9f:8b:c4:e5:f5:4c:87:
                    b2:8a:9d:2d:a1:b3:e4:cc:08:34:20:f1:68:06:41:
                    0c:29:df:20:2a:8b:c3:d0:83:f8:99:c8:a1:fd:70:
                    5b:3d:2d:ee:1a:01:c5:5b:fb:55:24:81:c1:3f:87:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:60:3F:D2:00:C7:E8:4F:BA:8C:AE:D9:08:F5:58:F6:7A:56:E4:34
            X509v3 Authority Key Identifier:
                keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:03:19:bc:8e:eb:2d:0e:ac:8a:71:75:4a:91:b1:d3:67:dd:
         11:55:3d:bc:ba:b6:0f:ae:de:af:ab:c7:8a:51:8f:34:9a:ec:
         67:64:f2:b5:80:80:23:ec:e3:76:e5:ae:e6:6a:ab:e7:c9:a5:
         c5:67:f0:c3:c2:c6:80:84:7d:fa:26:6b:82:d4:52:28:5d:4c:
         c2:85:87:65:55:3f:87:81:19:36:f3:dd:59:3b:ce:ee:9e:b0:
         be:31:0d:79:3d:7c:57:25:37:07:da:a4:62:45:b6:ee:d3:2b:
         2d:3d:4d:d8:29:f1:23:a9:fc:af:a7:8c:56:8e:0c:ac:8b:f2:
         8c:46:bd:af:3a:c0:51:f4:18:20:a2:e0:e1:d2:15:e3:14:22:
         ae:1a:95:64:48:4b:cd:f9:8a:c1:45:c8:83:a0:38:55:14:cc:
         1d:68:d0:74:7d:27:bb:9f:f9:dc:59:05:c1:57:cd:dd:ed:ed:
         0d:b5:b1:84:b1:4c:ba:cd:f3:d3:87:5e:9a:79:b2:04:af:8a:
         71:1f:38:58:2b:4e:72:48:43:11:61:63:bf:0d:a9:4a:20:69:
         d8:50:02:03:af:a6:70:ae:ac:e8:36:b5:5e:fa:7f:a9:b3:ef:
         74:82:20:e8:d9:85:3b:92:bb:b1:19:3c:d4:6f:f3:f4:18:6b:
         22:c9:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----