Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File:                     zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier:          dPv74AlJpfD7ZaGSWLNQiW8KoVpFB7T4qTq5219gNg4=
Subject key identifier:   A8:AD:20:64:5B:5F:A9:AD:2C:36:BA:58:60:75:1B:0F:6E:4F:CB:4C
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer:       /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial:       01962E9905F6618A42A38C77AFB2BE73122B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number:          FD
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=)
                          2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: WDW165s+th5Be2t3qISZwFh4dzM9zEklAZvc7KyNszc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:05:f6:61:8a:42:a3:8c:77:af:b2:be:73:12:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=a8ad20645b5fa9ad2c36ba5860751b0f6e4fcb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:9f:18:4d:e5:d8:ba:cf:ae:af:22:3d:59:
                    19:26:b8:62:7e:32:16:4c:6c:c5:8c:c7:07:b5:52:
                    ae:db:97:65:ff:8d:01:92:b7:fc:74:cb:ce:02:6a:
                    b4:8d:0a:bb:9f:7c:f1:3d:f7:47:da:83:82:34:3b:
                    c1:13:b4:cb:c0:31:b0:21:f1:d1:6f:3f:f1:13:63:
                    87:a9:e4:ba:bf:4b:1d:fb:01:ec:e0:36:44:23:33:
                    bd:89:30:ed:57:82:b6:21:1b:a6:16:97:94:a8:ea:
                    6e:ff:76:48:a0:4b:9a:75:02:f5:8e:4d:cc:ad:1a:
                    db:28:31:3e:f7:02:1f:14:36:9f:94:8d:81:a1:f8:
                    cc:fb:15:99:5b:02:62:d7:c0:13:0b:a0:30:da:83:
                    0d:d4:95:13:29:3d:a0:16:c0:c1:94:33:66:5a:24:
                    d2:75:6b:9b:75:82:72:22:e8:4c:0f:42:cc:bc:47:
                    c5:e5:28:e7:07:ab:18:5b:47:b5:35:1c:3d:29:89:
                    a4:8d:6b:d6:48:46:ae:4a:87:d0:a6:8e:2c:44:86:
                    47:91:0d:5e:4e:dd:da:94:43:dd:cf:37:f2:da:30:
                    be:7a:3e:fa:2b:9b:32:42:f0:a3:ec:56:fa:31:cd:
                    f0:d7:19:92:d8:5f:54:42:ea:9d:09:8b:5f:53:3c:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AD:20:64:5B:5F:A9:AD:2C:36:BA:58:60:75:1B:0F:6E:4F:CB:4C
            X509v3 Authority Key Identifier:
                keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:18:c3:46:82:c0:39:0e:d7:ca:e0:a7:94:10:cc:aa:37:33:
         f9:e1:8b:93:84:c9:a3:d7:4e:4b:da:63:5b:3d:90:fe:32:e1:
         a5:0b:82:41:de:51:53:2e:df:64:2c:6f:a4:d4:08:32:f1:07:
         97:ca:b1:b3:51:0a:5b:e2:cc:0b:0b:2b:e1:fb:ef:fa:9b:67:
         3f:41:0d:3d:ff:c6:ae:d7:b3:bc:7d:1f:66:cf:18:a7:f7:86:
         1f:44:74:92:27:1e:ac:34:98:87:44:e5:84:f9:a6:e4:c9:cf:
         cb:89:2d:c1:e9:ac:f6:85:cb:6b:eb:7d:4b:ff:b0:34:db:cc:
         da:22:74:b3:ed:13:1b:4e:65:ab:48:14:d6:b7:b4:69:83:28:
         e6:3c:87:81:9d:f3:12:f0:dd:a1:5d:e6:17:de:98:37:18:49:
         aa:8b:6a:4e:f3:84:b1:7b:ce:bc:f6:55:3c:5b:db:68:6c:63:
         7b:4d:a9:20:99:12:23:d9:ed:f6:d3:57:77:09:98:b3:a9:e1:
         59:c1:2d:1b:55:c3:77:66:8d:56:04:ce:90:45:27:4c:9b:4d:
         3d:e3:50:ec:b8:fc:a2:c5:4f:52:b7:e4:8b:fe:66:a1:28:f9:
         6b:45:4e:fd:53:20:ed:96:82:b5:91:bf:17:bc:54:3a:39:08:
         8b:b5:74:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----