Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File:                     CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier:          mRvay5ZQNT5QZ33EYwB0wapRzUyXUTN2bys9c6TM+OI=
Subject key identifier:   AF:B1:48:54:12:EE:E2:9B:E6:C0:B4:8A:87:5F:67:C7:32:17:94:E5
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer:       /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial:       01962DF3A55AB7586771214974A63BC826F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number:          0272
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: AZt7Se6557jhGabESg2f7LNf6s4.roa (hash: 1ba1sNNM9lYSgyXFdL1/tvNcApCQY3MX2LcXuVatgJo=)
                          2: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: VjeREgxoLquwZ4dtMZD/m40rely/r2crEQsS7HByHTg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a5:5a:b7:58:67:71:21:49:74:a6:3b:c8:26:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=afb1485412eee29be6c0b48a875f67c7321794e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:61:15:ce:78:3d:b3:d6:23:e5:39:f9:ff:
                    c3:15:70:19:74:28:86:92:c5:dc:e3:16:21:14:bc:
                    f8:0b:e0:19:20:d7:79:28:9f:5f:db:5d:f8:b4:74:
                    9d:d1:a4:77:c3:02:be:53:d6:3c:99:46:b7:83:97:
                    df:50:ae:5c:98:b7:05:4f:46:5e:9d:ff:2a:05:e2:
                    78:81:31:fb:d6:55:21:87:c3:6e:94:88:70:29:f8:
                    c9:50:83:4b:c8:5e:54:83:7a:fe:b1:46:a2:b5:4a:
                    77:51:b4:ea:cd:1b:5b:21:a3:f5:0f:d9:59:29:b2:
                    66:e6:95:e2:e1:7c:6e:f5:61:d4:71:63:d9:79:0d:
                    82:a3:cc:10:b9:df:34:41:06:4a:7b:9a:85:bd:ac:
                    88:44:27:c8:b6:70:f0:14:c7:d3:2d:63:da:da:d7:
                    6f:da:b3:11:dc:3f:a5:75:e0:09:d2:ae:d3:22:e0:
                    59:83:a0:7c:56:b7:55:be:65:5e:0c:36:18:46:ba:
                    6f:b2:3a:25:a5:05:ca:22:c7:03:cd:43:9b:aa:58:
                    ff:fb:a1:ad:28:2b:a3:0e:ae:f7:1e:92:fc:42:ec:
                    16:ec:1c:d4:e3:40:a2:c3:7e:56:5c:8a:2d:ca:82:
                    c0:3e:c2:d0:a5:49:e4:15:d9:14:2d:f5:bc:d4:42:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B1:48:54:12:EE:E2:9B:E6:C0:B4:8A:87:5F:67:C7:32:17:94:E5
            X509v3 Authority Key Identifier:
                keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:b8:9c:96:45:85:40:ca:38:f7:ab:c1:22:14:d2:10:a1:
         45:bb:89:57:c5:82:8a:41:0b:2d:db:75:49:f9:e7:6f:b4:ef:
         74:26:39:81:eb:27:f5:eb:47:9e:06:08:f5:19:97:1d:f8:3c:
         56:8d:b1:d6:02:66:bb:61:54:39:6a:fc:b5:7a:b0:e0:aa:06:
         bf:f3:0b:d7:61:9a:d3:a7:43:a6:37:0d:22:18:3d:65:3d:bc:
         89:65:54:2a:0a:8f:ab:7a:ba:44:54:9d:79:81:5e:36:d3:65:
         3b:e4:34:24:55:11:fd:b1:e6:19:3e:ca:18:d9:7f:5a:2c:c1:
         b0:17:a6:b4:4d:0e:43:ba:36:6f:3b:0a:88:85:ec:9f:67:fc:
         3b:d5:6f:40:b4:c6:11:5b:92:bb:f9:b1:ec:12:45:5d:4d:b5:
         00:38:b4:6a:ea:ce:07:b1:e9:58:28:30:41:ec:c7:66:22:a8:
         b8:ea:48:42:78:e2:dc:4b:50:f2:92:f8:d6:ea:3d:6d:45:8f:
         17:6f:c5:0a:87:97:9d:90:66:52:d6:db:16:df:15:50:9b:ec:
         55:13:72:99:0b:cc:ab:99:5b:16:de:31:a9:eb:1b:fb:9d:e3:
         6c:d5:39:6b:a3:00:6a:8c:60:b6:f0:6b:ab:6c:10:95:dc:1c:
         8b:4a:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----