Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File:                     CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier:          T1fr1zn8SwJABEkNzGvVxTMim+hF8Yjt8Dv/nS4o/78=
Subject key identifier:   81:CF:A6:F8:08:A0:C9:D1:2F:24:F4:F5:EC:93:89:55:D0:28:3B:F9
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer:       /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial:       01962FAB7C6D05F9B3D1FC4E098CFEEA49DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number:          1127
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: TjQMFcL8v56Ishgmq8N3z4PJCKNVltDePBUNRByI1uk=)
                          2: c_W11dB19ZdeKd0Hkukk0DBHzss.roa (hash: IfJHrCf86EMC8/UaqV8PdsGmuBe2nBvxRntFhIs50zk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7c:6d:05:f9:b3:d1:fc:4e:09:8c:fe:ea:49:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=81cfa6f808a0c9d12f24f4f5ec938955d0283bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:83:cf:7c:57:1f:1a:49:ac:0e:67:f0:92:
                    8c:91:6d:47:6f:70:d7:d7:7b:1c:12:b2:5a:92:26:
                    bc:6e:d5:1a:ed:ff:86:bc:74:97:77:07:6b:b4:01:
                    1b:a6:46:b4:91:b9:8d:3b:74:94:35:ab:33:bf:17:
                    19:00:90:03:ae:7f:ed:b3:ff:1e:5e:f8:5d:5e:56:
                    b5:dd:ce:c6:da:ed:40:ec:d0:2f:1c:e0:c2:d9:fa:
                    39:a8:55:72:ed:63:b9:d8:78:07:48:fa:02:11:0a:
                    47:81:93:9d:91:3d:ed:dd:54:6f:40:8b:24:dd:35:
                    6d:54:fb:84:8f:09:a6:c1:a1:5c:18:aa:04:41:bb:
                    83:17:83:07:e7:2d:6a:d2:cb:3c:96:d2:f9:93:cd:
                    f2:b5:b4:39:a9:1e:22:72:76:e6:9e:8e:0c:33:59:
                    5f:3f:b7:53:11:0e:6e:e3:8d:19:97:cb:4f:51:e7:
                    84:da:47:e1:db:48:60:50:4f:2e:00:37:1e:d3:13:
                    9b:a2:b2:00:03:8d:cc:a7:51:78:e9:dd:12:a6:7a:
                    ec:02:e0:2f:14:ab:b3:5a:9c:64:f7:1a:96:bc:05:
                    fb:80:22:61:b5:44:d9:ad:de:cb:3c:bc:2c:56:9e:
                    b9:cc:9b:ff:8b:a4:63:69:6a:fe:4a:90:b7:de:68:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CF:A6:F8:08:A0:C9:D1:2F:24:F4:F5:EC:93:89:55:D0:28:3B:F9
            X509v3 Authority Key Identifier:
                keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:14:44:80:09:43:5c:a8:97:aa:50:6b:05:b8:c5:7d:85:e5:
         ea:4f:7e:83:27:03:57:08:e2:ee:67:7a:29:76:0e:c2:8d:1a:
         3c:1d:c7:cd:e4:72:eb:03:f1:4b:c2:27:6c:98:ec:d3:59:7f:
         0e:ae:08:9d:13:ef:4e:1c:b6:c0:da:26:12:a3:a5:1f:d2:cb:
         be:9f:c6:23:81:c5:61:73:fa:4d:b7:f0:d8:b4:fa:54:be:65:
         f9:84:5b:63:07:1c:89:cd:7d:f1:da:cd:7d:2e:b5:ca:c8:48:
         7d:d6:5f:e4:52:42:7c:47:53:ac:c7:c4:19:33:72:68:4c:d3:
         3c:17:86:63:c4:f4:9a:9a:e3:1e:9e:5b:37:90:9d:ef:a9:5e:
         f2:a8:ff:3d:1d:7f:0b:9f:4d:20:e8:94:17:6a:fd:51:4e:90:
         b5:1b:b6:a8:84:9d:07:de:af:c2:8b:b5:32:a3:04:7a:89:c4:
         98:fb:4c:ad:4e:ba:47:97:40:aa:35:21:61:b2:94:f7:bf:fd:
         45:e8:e3:e9:0d:dd:ce:92:67:46:a7:31:53:bc:db:da:35:b8:
         6e:8f:a9:ec:48:c3:0c:76:34:d8:ee:1d:b3:6c:02:a2:70:81:
         da:11:98:5f:3e:dd:a0:ae:8a:8d:9d:8a:58:68:c0:7a:bc:42:
         58:ce:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----