Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File:                     1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier:          j1GMVF6FWoE6XVfgfNKrDBmO4m4lYFYW+S6zhlJ82Ds=
Subject key identifier:   B8:EE:9D:A1:01:7F:CB:C0:A8:28:21:5A:76:BC:FB:3D:45:58:E7:ED
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer:       /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial:       01962ECF5241E526165018E5678354D6E6E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: HzrxKmTUJfwjGMtLiuBBOC+5xR2FuGhXyKg5suzmdp8=)
                          2: v5B9bil7tlbUN50h6GDN8m6sKFE.roa (hash: 47YbpbDGbrGPtLvV/Gf30olGqwG6mqrNB3XSB3G5VQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:52:41:e5:26:16:50:18:e5:67:83:54:d6:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=b8ee9da1017fcbc0a828215a76bcfb3d4558e7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:01:e5:3d:dc:57:24:bb:3a:21:fd:80:6c:
                    24:df:ff:0e:44:13:f6:a4:d0:de:72:ee:97:02:85:
                    8e:8d:69:0d:53:a6:9b:45:1d:69:99:d1:3b:1b:bf:
                    ef:50:a1:82:6c:6c:0f:3a:29:a2:c1:68:5f:a8:13:
                    ee:c7:68:24:8a:a0:4f:80:5e:c7:07:b6:d1:b3:ea:
                    17:47:32:6b:06:ab:3a:5e:0f:b4:81:61:50:77:21:
                    14:cb:e8:3f:35:5d:bc:3f:ab:2a:33:47:d6:a8:75:
                    e7:74:d8:af:66:63:5b:bc:4a:94:ac:e4:d2:96:e3:
                    74:54:84:33:23:43:de:a7:65:bc:67:4a:3a:6e:d5:
                    ff:4d:07:0e:3f:1c:b5:43:1d:95:49:d0:72:77:29:
                    cb:22:79:b8:01:9c:ea:3c:b8:68:7e:31:78:5d:4c:
                    ef:41:4e:49:52:1c:84:46:64:5d:5f:cb:96:d4:67:
                    1c:19:23:74:63:45:7f:c6:01:80:e1:6b:1a:50:65:
                    2c:9e:7e:cf:f1:84:42:e6:ad:7a:5d:d2:91:45:98:
                    1e:91:e8:0f:34:68:3a:88:fb:8f:93:ec:6c:dd:4a:
                    4d:8d:dd:ba:0c:ec:f2:6d:e4:b5:f2:9e:4b:8a:ca:
                    bb:7b:8a:f5:cf:a7:5e:a2:01:7a:e7:d7:fe:f0:66:
                    60:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EE:9D:A1:01:7F:CB:C0:A8:28:21:5A:76:BC:FB:3D:45:58:E7:ED
            X509v3 Authority Key Identifier:
                keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:a5:f6:3a:df:69:0d:aa:6a:80:ec:fc:ae:fc:1e:da:c5:83:
         3b:c9:9e:84:6a:fb:c6:ac:20:98:c6:3a:86:de:5c:f9:ee:70:
         a2:df:11:dc:08:7b:18:d4:2e:a5:30:c2:bd:7d:e1:33:4d:e2:
         b5:f6:e0:cb:90:80:96:ea:2e:b7:f4:f7:3d:f6:4a:5c:9d:c9:
         94:b5:2b:1a:3e:1d:86:ff:34:34:2b:d9:87:68:34:55:89:ed:
         2c:08:bc:02:cd:59:0d:99:9b:ea:ef:d6:d1:cd:e9:57:4b:1f:
         2d:a0:06:8e:d2:65:64:42:57:96:d7:b4:05:be:e2:d3:02:fb:
         11:51:41:49:d7:8f:5e:8d:a1:b5:e9:55:a5:df:8c:e9:76:ff:
         e2:aa:db:de:ae:ed:1e:a0:77:7b:b7:7c:c0:89:b1:72:74:10:
         e8:51:30:d0:47:8e:cc:c7:8b:5b:92:5e:52:6f:ee:fd:44:0a:
         a4:94:3c:bc:ec:60:91:6a:16:19:f0:9b:c3:0f:55:62:bd:10:
         9e:e1:a8:27:74:0f:e6:58:95:a5:a9:a9:7a:c5:ee:fe:a9:d9:
         fd:94:99:26:51:c5:87:82:6f:e8:5f:fe:45:a3:3a:c2:c4:86:
         1c:40:09:12:48:7d:2f:4b:38:ac:51:48:d2:c9:be:88:f7:2a:
         db:cd:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----