Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File:                     pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier:          quQ/VyZcTNhL140DI7vX0/c2gTNEhoVPFpAGhKWt3Ts=
Subject key identifier:   9F:0D:2C:C5:87:C2:B0:13:17:36:77:3A:1B:04:3C:AC:5D:D1:9B:47
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer:       /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial:       01962E9875DAB46A1BF8ECFD8ACA84D75BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number:          0653
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: 9riy8eriG5z0FiFicOlvgzelxKcDS/FOZyQKUlAIfPQ=)
                          2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:75:da:b4:6a:1b:f8:ec:fd:8a:ca:84:d7:5b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=9f0d2cc587c2b0131736773a1b043cac5dd19b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1b:c0:2f:eb:45:ff:bf:9d:26:89:46:c6:f3:
                    ea:46:f8:9d:23:a5:2e:55:74:87:80:0c:2a:a2:59:
                    bd:8b:f5:da:e4:19:e7:f9:71:45:83:c3:bd:bd:28:
                    7e:46:e6:f2:96:e1:b1:5e:ae:52:eb:4e:02:ca:40:
                    2c:3a:b7:82:02:53:9c:3d:ad:20:86:22:ad:97:0d:
                    28:2a:82:f6:8b:69:db:69:8c:57:39:d2:3e:cd:68:
                    02:6b:11:cc:9b:1c:1f:ec:b6:f9:6a:58:e5:d3:38:
                    48:c6:15:0b:29:c7:fa:b3:03:90:0f:85:fb:e0:90:
                    7e:9e:61:ac:db:a6:2c:d9:b6:bd:a5:8e:9a:42:5d:
                    8b:19:69:75:d3:22:1f:07:d5:9d:6d:8b:13:a2:50:
                    7d:f2:fb:01:94:40:5b:65:ed:53:94:90:f2:74:86:
                    c9:fe:7c:81:b2:80:49:cb:b3:db:56:e1:0c:28:1e:
                    9b:ec:aa:79:23:8d:4d:fe:b4:31:74:38:8c:cf:a3:
                    04:52:47:9e:57:47:10:1b:66:c3:8a:69:ee:97:6f:
                    54:4a:68:89:8a:44:d4:0b:90:af:30:d0:af:e3:88:
                    09:b3:96:be:03:bc:64:e9:a6:50:12:8c:c1:cd:3c:
                    14:f7:b9:c1:07:a7:51:01:b7:7a:de:ee:f8:70:3f:
                    e5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0D:2C:C5:87:C2:B0:13:17:36:77:3A:1B:04:3C:AC:5D:D1:9B:47
            X509v3 Authority Key Identifier:
                keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ef:9d:e2:a7:4e:3f:a2:c9:bc:c6:f4:9b:5f:c4:31:d7:9f:
         93:9f:90:2b:59:75:3f:8e:f5:8d:2c:fb:33:6c:9d:1a:fd:e5:
         57:93:20:f4:55:3d:f4:14:01:d0:5e:b3:8f:9c:50:bd:d2:24:
         e6:5c:b3:2b:7f:99:cd:f5:c8:a8:5e:c5:68:7f:10:d0:64:18:
         1f:84:d9:66:72:92:33:56:c9:4c:bc:f5:1a:7c:92:06:28:b3:
         5e:b3:f7:5e:c3:45:a2:9a:62:5d:d6:46:87:ce:04:07:dc:dc:
         0f:3b:72:ba:5b:c9:ec:71:94:22:f2:ca:f4:b7:de:d9:24:d4:
         c2:69:77:3e:5d:8f:43:df:58:f5:05:6e:02:2b:dc:23:3e:9d:
         93:ce:66:85:8c:7e:88:dc:0d:ad:55:5b:18:ba:b5:2a:cc:d8:
         97:5e:6d:98:a5:75:92:e9:dd:12:cd:5f:38:7a:02:e6:16:d4:
         67:ae:16:c8:ee:6d:9a:de:d1:5e:bb:c8:e5:d5:4a:39:bc:fd:
         3f:fd:d6:3f:76:1d:63:ca:dd:df:72:1c:ed:e5:09:54:05:e5:
         b6:c7:b8:03:39:33:6f:58:f9:30:89:3d:cd:6c:f3:0a:b2:9a:
         22:bf:f3:34:37:8a:94:bc:c4:3a:32:12:d5:6d:34:d7:eb:67:
         f6:27:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----