Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
File:                     ZdqE27TGoS08m44ht3MEVooD21A.mft (raw, json)
Hash identifier:          X0fnd203agHkLxeXSHJTZxFxYzp7/V/J5c+vd1FsPt8=
Subject key identifier:   A7:38:07:AA:C3:E0:79:BB:32:D8:E4:ED:86:F0:28:BD:6A:94:1B:FC
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Certificate issuer:       /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial:       01962E989B7D94F80B5761670E46CFEC1AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: ZdqE27TGoS08m44ht3MEVooD21A.crl (hash: MfxzBpGt4DZB+5B2VtCsZvH229FzBEZ+OkX5iit7Q+I=)
                          2: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (hash: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9b:7d:94:f8:0b:57:61:67:0e:46:cf:ec:1a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=a73807aac3e079bb32d8e4ed86f028bd6a941bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:83:24:c5:15:c4:80:0c:a2:bc:c9:17:e0:
                    45:7f:c1:c8:e0:40:e4:ed:82:2a:bc:ad:08:39:1a:
                    8e:3f:64:c6:84:e9:32:dd:03:15:93:e5:2d:85:c3:
                    65:fb:8b:85:d5:93:fe:1b:8c:d1:05:32:77:d0:e2:
                    6b:b4:dc:af:f2:60:bf:6a:6d:3c:8f:cf:0b:db:be:
                    e7:43:a0:fe:10:6a:f6:93:34:40:b9:5e:53:fa:60:
                    f5:40:0e:be:d8:bc:af:22:a4:d1:ec:80:49:61:79:
                    4f:15:b3:0c:68:7b:5d:61:f9:94:73:c8:4a:2d:f1:
                    c3:55:59:5e:89:4e:17:53:ad:36:6f:cd:1c:23:0f:
                    63:b5:9a:44:5f:78:ae:d2:f6:fe:e3:c4:ca:65:d1:
                    fe:bd:4d:c4:96:27:db:6d:6a:2f:01:4f:41:46:8f:
                    48:8c:56:8a:45:39:85:52:23:f7:fa:e4:e2:b9:f4:
                    64:86:99:61:f9:15:44:5b:71:c9:bf:ed:36:3b:e7:
                    22:c5:66:ec:bf:68:7d:04:df:a6:6c:01:e8:83:be:
                    98:aa:96:48:bf:cd:13:bf:cf:90:84:b1:60:d2:0c:
                    43:f4:70:ac:bd:cc:e5:39:23:82:67:f2:11:07:33:
                    ea:09:cf:f0:a9:a9:76:f4:0f:fe:77:5e:9a:ac:cf:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:38:07:AA:C3:E0:79:BB:32:D8:E4:ED:86:F0:28:BD:6A:94:1B:FC
            X509v3 Authority Key Identifier:
                keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ce:0e:d3:7d:27:d7:31:72:a1:d2:f0:e6:43:b0:4e:3b:e8:
         ef:16:dc:11:ce:e5:cc:2f:6d:56:05:14:14:46:6d:9e:a5:77:
         00:f3:56:5c:01:f8:a9:d9:24:b6:bb:5e:cf:77:54:84:b2:a4:
         8e:6b:bf:41:84:49:90:ce:79:aa:04:cf:2b:66:68:76:7a:a9:
         0e:11:5b:34:d3:86:c0:67:87:1d:6c:11:16:a2:b1:c3:bb:59:
         f2:38:d1:1d:74:37:65:db:5d:30:42:2d:76:1c:62:1c:af:35:
         60:8e:ea:e5:f9:08:19:b6:21:00:2f:59:e3:71:57:d0:1b:ff:
         32:ed:5a:5d:02:d6:e7:7a:ef:1e:c1:7b:e6:40:15:ce:82:91:
         37:54:bd:09:ea:bb:ae:ea:99:2d:84:48:33:dd:07:4b:03:87:
         fa:16:d8:4d:12:5c:84:6c:35:cf:e4:f7:0b:d4:f4:4b:6f:df:
         be:c5:9b:41:fc:93:56:01:0f:21:2c:bc:3c:7d:a4:50:dd:ad:
         43:19:e1:f8:12:3c:fa:f9:1a:3c:9a:ea:17:c0:22:ed:0a:9b:
         17:5a:67:e1:2c:b3:9f:4d:01:7a:da:2f:b6:9b:af:db:0a:97:
         06:c5:b4:f0:83:64:1a:82:75:55:f0:b0:09:2e:a2:fa:3a:bc:
         33:e5:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----