Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File:                     zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier:          FGPnEaKcmYZ0guyTIVFa6+q2Vp8mWGdT5giLrPlpxLo=
Subject key identifier:   A4:0C:0A:A5:60:A2:EE:79:57:39:F8:F3:42:F1:7B:B8:54:F7:C7:D1
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer:       /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial:       01962F3D44FFBC7291AC015ABED73A7FA323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number:          95
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa (hash: ARirtfJZlvrV6Gh7ZW/gDyQsG60JpK7a/eIqEIlcaSo=)
                          2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: SMq5j0Y2I8qUb6InfdRWNh9r5F8Te7btsRgawf1DSjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:ff:bc:72:91:ac:01:5a:be:d7:3a:7f:a3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=a40c0aa560a2ee795739f8f342f17bb854f7c7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:36:ab:04:46:91:97:46:db:d2:5a:65:2a:
                    9e:e1:23:03:c7:a9:2b:73:3a:30:63:9f:55:e5:dd:
                    a9:f1:82:37:d9:94:61:eb:10:26:d8:85:f2:d0:a5:
                    14:43:cd:b3:82:7d:30:e0:5f:0a:57:28:08:4e:78:
                    58:08:b7:c0:e1:d0:26:23:7e:6a:fd:ee:85:06:d9:
                    d1:48:bb:9d:22:3a:8a:c9:d3:75:b9:0d:f0:a1:d4:
                    ab:4f:af:84:fb:45:f1:c9:17:fe:3b:96:a4:69:a3:
                    60:d9:dc:5a:7f:67:9d:6b:03:e5:80:32:84:20:c2:
                    ca:fe:40:21:14:ec:c6:99:52:b8:7d:b4:64:80:2c:
                    39:33:df:65:20:d0:97:d6:58:b7:94:66:1d:c2:31:
                    22:11:6e:77:97:f5:e7:20:04:c0:e9:b8:10:ba:a8:
                    70:a4:dd:fa:a9:be:51:84:6e:1a:8e:d8:6b:9a:b4:
                    63:56:ce:7c:9e:33:78:05:ae:7d:2b:83:e7:c6:9d:
                    29:f6:3e:e5:e9:3a:e2:c5:8d:59:0c:c4:bc:eb:14:
                    ff:4c:28:5a:ab:ae:d7:95:c5:f4:ee:ac:de:d5:02:
                    4b:2f:9c:37:7c:55:79:8a:b0:07:bb:c6:28:be:cc:
                    9f:90:db:08:f3:16:fd:74:8c:ba:b8:32:12:b7:6f:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0C:0A:A5:60:A2:EE:79:57:39:F8:F3:42:F1:7B:B8:54:F7:C7:D1
            X509v3 Authority Key Identifier:
                keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:05:7f:34:b9:ba:05:30:89:ee:f6:a1:84:ae:f5:9c:8e:
         cb:da:9b:4c:b5:06:c2:8b:0f:91:c6:e7:07:5d:fa:69:23:44:
         18:fe:b5:3e:7e:77:12:f8:cc:92:51:ec:0a:e6:09:a6:8d:33:
         c8:c6:8c:69:04:32:2b:35:32:f8:d5:2c:30:c7:4c:24:26:6c:
         88:9f:bd:93:08:36:17:bc:e3:cb:86:3e:15:86:31:11:7f:62:
         f4:f8:1c:bb:1d:ca:8f:3d:9e:c9:ce:3b:f0:28:db:40:13:dc:
         4d:84:38:98:8a:12:32:57:28:37:3b:44:1f:cf:61:d8:e7:c0:
         36:a3:cc:ab:8a:c4:bc:63:5c:e1:72:b5:0a:23:7b:12:9a:98:
         4a:2a:dc:38:82:a1:c0:45:81:bc:81:0e:de:36:65:7c:fb:bd:
         3a:04:84:96:c1:b1:81:e6:dd:7c:7f:1e:66:46:b9:50:39:75:
         8b:1a:7f:70:7f:36:23:88:4e:cb:0e:dd:e7:f5:4f:69:ad:69:
         02:bd:59:44:42:19:58:0a:42:34:ce:6a:44:9d:6a:e6:70:33:
         af:0e:ec:ad:74:7d:16:c3:09:fc:ba:f4:80:79:60:3e:75:63:
         ca:b1:35:ea:f7:43:d7:b0:08:8d:b6:a1:8b:6e:c0:8a:0b:2d:
         d1:a3:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----