Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
File:                     zE1IcI2lBUlZ5hilguKMFV_vET8.mft (raw, json)
Hash identifier:          YhuyDtpMo+jZ8mecm057r5WtLNyc0UeVy64ayMpq+GA=
Subject key identifier:   30:2B:1C:A2:C9:16:AA:12:AA:7E:26:CE:F1:05:96:27:3F:AC:0F:30
Authority key identifier: CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
Certificate issuer:       /CN=cc4d48708da5054959e618a582e28c155fef113f
Certificate serial:       01962FAB782AAAA2C1BDE0F7C83DDFC7D28B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
Manifest number:          0446
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: r9Ux985jnVmfKHLZzNH9_T06wzU.roa (hash: SP4ahRSwbqs6nOlIBz3rDf0O3m+DJabQsDxWQ8oLOwM=)
                          2: zE1IcI2lBUlZ5hilguKMFV_vET8.crl (hash: JEEKFwOWiW4xu2PkNiA+tx/HTro3d3y46vdyRqf7ENo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:78:2a:aa:a2:c1:bd:e0:f7:c8:3d:df:c7:d2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4d48708da5054959e618a582e28c155fef113f
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=302b1ca2c916aa12aa7e26cef10596273fac0f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:35:86:d9:6a:66:1b:e6:f0:82:72:be:4d:
                    25:f1:70:90:3e:c5:06:45:cc:40:5b:1b:e1:17:83:
                    c3:38:16:b8:34:9e:c3:94:49:51:0e:4d:35:b3:64:
                    17:b7:88:02:3d:39:75:99:47:1f:90:3e:20:5b:22:
                    a4:57:5b:5b:4f:87:62:84:90:24:d7:c2:84:f9:15:
                    98:14:e1:9e:4e:d6:ed:14:94:84:3d:f6:74:13:be:
                    43:e0:8f:58:df:5f:c7:31:00:16:18:0d:5d:47:98:
                    2f:54:4c:43:da:7a:73:9e:36:3c:30:6d:04:9a:fa:
                    0c:67:9e:03:27:a3:ca:eb:b0:cd:18:d7:82:dd:f5:
                    ac:02:e7:3e:1b:29:b3:11:17:09:e1:6d:97:c1:a2:
                    66:78:3f:43:8f:d3:7b:83:53:09:75:9b:4b:9b:a9:
                    44:50:1d:77:c7:7a:6f:4e:ed:63:bb:a7:30:2e:e6:
                    f7:0b:6d:b0:aa:b4:1e:d3:c0:27:b8:c0:2d:ab:5d:
                    de:1c:66:9c:20:df:8e:48:63:9e:e4:01:79:c3:72:
                    29:32:b8:84:bb:75:19:40:bc:63:6c:63:1e:b3:14:
                    e2:9d:d1:a7:87:b0:d9:46:4c:3e:9e:14:e6:e3:cc:
                    55:5f:ec:f3:4a:a0:58:e7:83:1b:34:87:d6:49:3f:
                    4a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2B:1C:A2:C9:16:AA:12:AA:7E:26:CE:F1:05:96:27:3F:AC:0F:30
            X509v3 Authority Key Identifier:
                keyid:CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:81:ad:fb:1f:d6:3e:c8:4f:fc:0b:79:e6:74:f7:b9:1f:
         19:62:33:bc:74:b9:05:4f:9d:92:e8:4e:cc:19:2c:ae:ee:65:
         d1:9e:04:0e:9d:32:a2:41:66:d1:48:a3:ba:32:9e:ae:7e:5b:
         ae:b8:97:9c:7c:42:4c:a8:7d:8e:83:d7:b2:31:3a:6d:78:7b:
         de:60:19:cb:c8:63:fe:0a:15:1a:6d:c4:fd:16:13:2b:c2:df:
         08:b6:c6:80:bb:92:78:5b:86:48:24:53:5b:4d:55:7e:eb:f0:
         0e:ef:7f:e2:f8:cd:60:5a:28:0b:e4:1a:26:0f:07:66:ca:c8:
         6c:b5:f0:ba:8a:3b:2a:a3:f7:82:1a:4e:13:42:f6:77:5a:77:
         af:b0:10:d7:63:b6:2d:66:27:e5:2f:ff:6e:d8:ec:18:6a:9a:
         d4:f9:7e:98:92:4c:94:3f:1a:e2:3b:de:b1:ea:25:9c:ec:a9:
         95:e5:a0:e0:70:f7:62:55:7b:b1:e0:5b:6a:5d:1e:71:c0:2b:
         93:ce:e3:fc:9e:00:0b:a2:79:86:bc:bf:fe:60:64:de:5f:87:
         31:1a:3b:36:ac:aa:56:91:c3:ec:0f:a9:45:cd:24:73:d1:de:
         74:6e:d1:90:85:8c:9b:cd:31:22:31:94:d7:83:3b:18:4e:5f:
         95:92:5f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----