Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File:                     Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier:          V6mDWEE84v1ZW5i6DMHIJWRjVIzlT2cyVyfLw1a6jKo=
Subject key identifier:   64:F5:7A:5F:8D:99:63:AA:69:68:F6:7E:F7:5A:E0:D5:4F:4F:73:94
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer:       /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial:       01962E999751538953DA55DA18E8E8CE9AAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number:          080C
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
                          2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: W+wWWXnpGPeC5M5eybx+Ou02CxG84MskmnxA3i35gqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:97:51:53:89:53:da:55:da:18:e8:e8:ce:9a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=64f57a5f8d9963aa6968f67ef75ae0d54f4f7394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:e8:9c:ba:e0:8b:d8:0e:a0:67:ae:63:ca:
                    a0:1f:c0:cb:1f:cc:ef:2d:56:d8:99:1a:94:aa:b7:
                    0f:2b:66:d9:73:7c:1e:d4:fa:5e:42:e4:ee:1d:14:
                    1b:4b:9e:09:6d:2b:6b:f8:67:56:cb:3e:cc:f0:68:
                    ab:ea:76:a3:b9:11:ac:6b:ba:be:51:21:f2:88:58:
                    9f:27:6e:e7:25:92:52:42:d1:10:27:ae:2a:9c:cf:
                    c8:0d:a0:0d:41:06:7d:d7:93:1c:eb:46:45:8e:2b:
                    2e:99:9a:ed:4f:9e:8c:99:af:19:e5:e3:01:90:29:
                    64:09:d3:27:ee:d7:49:45:89:2e:fd:7c:3f:02:d7:
                    7b:77:59:eb:5c:ec:70:2b:6c:67:ee:dd:39:71:43:
                    6c:ac:7f:03:93:3d:fc:6a:a5:17:18:5d:4c:f1:3f:
                    78:47:c8:56:61:33:06:0c:f2:73:61:d4:46:b1:c4:
                    1c:4e:61:20:47:59:4e:56:4e:8d:65:c2:32:84:0d:
                    9c:de:dc:61:b8:8b:60:6d:71:86:d3:5e:14:47:07:
                    b6:a6:c9:ac:66:55:bf:90:22:fe:2a:57:a6:dc:66:
                    8a:71:19:d1:d6:2c:ef:cd:eb:c9:99:64:ff:1f:ab:
                    25:2b:89:91:d3:24:bb:f4:7d:e5:d7:e8:78:a5:8f:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F5:7A:5F:8D:99:63:AA:69:68:F6:7E:F7:5A:E0:D5:4F:4F:73:94
            X509v3 Authority Key Identifier:
                keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5c:f8:b1:74:3e:43:91:37:5f:2b:8e:e1:a3:e2:4e:d2:52:
         df:2a:35:3d:eb:f2:39:22:48:03:08:49:9d:11:76:05:d5:33:
         4f:eb:19:21:9d:99:d9:f1:f0:5e:ed:2d:4b:25:71:a1:cf:38:
         1f:93:95:62:92:06:b7:0c:ae:81:c4:08:6c:09:a8:65:f1:bd:
         95:e9:c5:5a:f8:29:4d:d2:b5:01:31:ee:ac:35:54:98:25:5a:
         c2:9a:10:48:b4:f7:91:80:e6:28:26:f8:76:b2:05:3c:d7:a0:
         d7:b0:e5:95:3f:13:df:93:66:e7:81:ef:80:60:8b:4f:c9:e5:
         a2:e4:eb:6f:71:9e:04:26:10:4a:d8:db:9c:d1:f2:67:14:48:
         e1:48:25:6e:6f:36:16:05:f7:a0:66:1a:69:b5:ad:d8:3c:60:
         bd:10:2a:7a:5b:4c:81:57:cb:3b:e9:b8:29:17:d8:e2:1e:bb:
         63:0c:17:b6:20:6d:0b:71:7f:07:13:93:48:36:84:73:c0:5a:
         5c:b2:69:44:69:29:ee:b3:8c:0d:9a:f5:4c:4d:b7:87:37:1c:
         47:09:ea:1d:4d:d7:d3:c1:0e:7d:2c:b1:af:a8:37:26:3d:b4:
         7a:69:b8:d4:45:e4:cb:27:64:a5:6c:7b:8b:04:69:4d:46:be:
         92:d0:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----