Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File:                     ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier:          QqCL0HlWLTyDjMtTudQuAK0aF4SX88prB3d3vAoWaLY=
Subject key identifier:   3A:0B:56:CC:A5:FA:58:C8:E4:7E:81:45:94:A3:88:43:56:A0:07:1A
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer:       /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial:       01962E996BFB70E9ED8F47E193A294016B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number:          0F2A
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: PfMz+CunkZhcP4fJ/UiO5NJLX1+tNisrhE3f+gIVSXs=)
                          2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6b:fb:70:e9:ed:8f:47:e1:93:a2:94:01:6b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=3a0b56cca5fa58c8e47e814594a3884356a0071a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:65:00:6c:14:7c:31:4c:a0:79:b2:c6:48:
                    1e:b4:9f:3d:ee:9f:86:98:14:c3:38:51:00:64:e2:
                    e6:6a:41:b2:d6:f2:d5:d8:2b:12:f0:df:f6:47:7a:
                    20:9b:94:79:e4:25:5a:f5:bf:5d:5b:66:fa:d1:fe:
                    a8:19:46:ad:e4:a5:5f:e2:81:05:b4:bb:d8:a0:a7:
                    d1:77:1d:70:05:c5:ed:05:b4:fe:31:79:8f:47:63:
                    fd:c3:e0:1d:d6:bd:87:8c:f2:21:98:b4:98:31:4a:
                    6b:32:0d:82:d5:bf:ab:7e:b2:4c:c1:90:bd:73:d7:
                    bf:a0:1e:38:7b:ae:25:db:ee:96:51:6a:e3:0a:ca:
                    56:6b:4c:0f:7c:eb:f2:6f:12:af:06:e2:60:0c:e6:
                    2b:98:7f:d1:30:6f:5c:30:c7:5d:f1:e6:da:16:5d:
                    bd:48:86:0e:6c:86:8c:49:f5:d5:e8:46:c4:8b:76:
                    c4:9e:a5:4c:5c:c7:8f:89:1f:99:41:a2:5a:57:99:
                    cd:ac:ef:05:03:f3:d0:42:7d:a7:91:bf:a9:81:74:
                    c7:fb:8f:57:82:d6:74:2f:4d:72:0d:ad:c7:62:9f:
                    04:ce:a7:d2:f2:4d:e2:73:3a:b9:a6:19:31:21:69:
                    86:f1:bf:69:41:c9:58:2c:03:12:57:dd:64:64:78:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0B:56:CC:A5:FA:58:C8:E4:7E:81:45:94:A3:88:43:56:A0:07:1A
            X509v3 Authority Key Identifier:
                keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:37:cb:63:80:26:bf:a6:11:73:38:19:35:1e:e6:7f:89:2c:
         c0:4d:c4:d8:a3:05:e5:ff:f7:da:6c:b6:50:e2:ac:71:91:45:
         a0:5c:f3:08:3a:c0:1d:0f:40:a1:51:4e:d4:20:3b:58:60:c4:
         d1:20:d2:81:f4:3b:cf:95:23:02:c8:b1:39:de:15:42:90:b8:
         69:27:ae:fe:04:b1:33:d0:20:bc:39:51:e6:98:e1:eb:86:7e:
         77:31:60:73:88:ed:02:a1:0a:de:9d:11:0c:6a:79:e3:74:71:
         b0:2d:81:83:2e:01:09:0c:5b:bd:a7:c7:ba:5e:41:b9:02:10:
         09:9c:3d:1d:2e:df:19:d6:93:d1:f6:e6:99:e4:ef:10:73:e5:
         4c:a2:29:9a:5c:52:cb:38:e2:d0:bf:b8:7c:7c:6f:e0:0e:15:
         53:e8:63:a9:bf:9d:c3:a0:4e:26:a9:e9:0a:11:30:8a:37:f6:
         40:05:cf:57:8e:69:21:c9:1a:e6:27:23:d7:74:30:ee:ed:2c:
         c6:f9:b6:86:18:60:e3:83:c4:32:78:da:36:93:40:7f:4e:19:
         1a:91:08:f3:e7:01:35:6a:e2:17:77:cf:a9:85:4f:da:5e:9a:
         98:e4:92:e5:91:ef:81:a3:01:9e:7f:d6:bb:7d:01:83:d5:90:
         89:81:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----