Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File:                     zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier:          839WIq4/RFHRKflGrO82dmCdR7EzVSxhdsfWNOfHKzE=
Subject key identifier:   12:7D:6B:DF:99:46:CF:CF:C0:3C:08:43:19:B8:4D:90:2B:46:CF:F7
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer:       /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial:       01962FAB2986D74BEBDFF4DE62241C691702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number:          0273
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
                          2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: Yke4UNxGh+y7HkhaB16sWsU83k6o3HYrt7h3M/YvQfw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:29:86:d7:4b:eb:df:f4:de:62:24:1c:69:17:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=127d6bdf9946cfcfc03c084319b84d902b46cff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:11:74:cf:9e:e0:02:92:ca:d4:17:c5:ad:
                    ff:e2:d5:1e:b8:e0:d0:27:f7:14:28:ed:9e:b7:b1:
                    e9:d1:69:c3:4e:94:d3:ad:f3:9b:3d:39:60:7c:da:
                    16:1d:fa:36:d8:6b:75:71:7f:4c:e7:02:b8:56:c5:
                    af:bf:24:58:d6:92:b8:99:1c:18:d3:18:67:64:39:
                    94:1d:f7:b2:e5:93:8a:05:ea:f6:6f:2c:2e:1d:69:
                    11:e2:93:f5:f2:ac:6b:4f:8f:cb:dc:18:2f:65:f0:
                    21:81:c1:0c:49:ea:89:cb:e5:0d:da:0d:2e:91:ce:
                    ac:97:2b:40:12:84:b9:85:94:db:9a:cd:5e:e5:50:
                    39:bf:9a:14:71:86:86:59:01:aa:b6:db:8e:5a:0d:
                    ec:81:4c:0f:79:e4:b3:85:32:2a:41:6d:cb:be:29:
                    c3:16:fd:ed:80:10:ae:ee:57:e5:76:db:16:f5:18:
                    96:3b:02:2d:66:f6:9a:0d:3c:20:4c:12:69:e8:3d:
                    f1:03:d7:42:49:6a:8b:25:01:75:8e:44:eb:c5:9c:
                    bb:9a:53:95:01:fb:df:66:39:a8:01:79:f7:87:10:
                    79:8a:fa:95:89:78:d8:61:3e:ad:4c:3b:f2:5b:0c:
                    b6:fe:a6:f0:14:dd:b6:aa:e7:f4:49:79:78:b4:fe:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7D:6B:DF:99:46:CF:CF:C0:3C:08:43:19:B8:4D:90:2B:46:CF:F7
            X509v3 Authority Key Identifier:
                keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:98:cd:3a:92:4f:e2:eb:37:92:27:3f:30:92:c7:09:56:18:
         01:27:d0:3d:37:0c:67:a4:a3:6a:45:8d:76:94:32:d4:b4:99:
         1e:ce:a9:40:32:04:68:c4:9f:4a:c6:9b:f9:0d:38:8f:6e:76:
         9e:a9:fb:cc:c3:3e:90:d2:71:ed:4b:de:a9:a9:58:af:73:e6:
         e6:94:70:54:78:d7:62:58:0f:b7:f6:7c:a0:ca:3c:85:01:d5:
         b9:d1:ca:00:3a:21:e0:b1:83:10:e0:22:e9:d4:55:5d:1d:63:
         8a:e7:ba:86:fb:04:2c:bb:3e:00:4c:e6:b7:82:fb:85:f4:03:
         98:db:13:07:22:7d:1f:69:2e:a4:2d:36:fb:bc:91:98:f7:2e:
         06:7c:2b:77:48:d5:34:54:12:a2:99:c8:c6:a7:76:4a:a7:0d:
         7a:a2:e4:67:45:ba:41:5c:81:96:59:be:86:41:d9:35:ee:8a:
         38:c9:65:83:92:5d:4a:62:87:86:13:fa:54:51:94:a8:ab:20:
         f7:d0:22:04:a9:5d:b2:bd:07:fe:11:5a:b7:8c:ce:c6:f7:4e:
         c3:e9:6f:af:4f:7f:e0:93:c2:b8:cd:37:e7:71:30:85:a9:27:
         b8:b7:91:53:92:59:d1:fe:c1:f9:41:e8:87:83:38:91:7f:f8:
         ce:9b:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----