Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
File:                     zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json)
Hash identifier:          ED5rNqJc5Yvr1M8i6Fp9JAgbFRE6Ty1ZNOhc5nXWanU=
Subject key identifier:   46:45:8F:A5:86:83:52:47:8F:A8:0F:F9:22:0F:90:A6:DD:90:06:53
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Certificate issuer:       /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial:       01962F0740EF47CF96F9D83FFE92EFD52F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
Manifest number:          0D3A
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=)
                          2: 6w6GslstW7dP-hGd9Y6a0xOTJ1Q.roa (hash: c/YkJLvVjnK6oPthfFlSxGHPywR+uY+AcXy43DN7bDA=)
                          3: 9pK-UIM-H6tNfktNjnY3n3eplHo.roa (hash: uVmuFNCMVIRszRB0UyxXgi1VNyC51j94Uds90LHBjSU=)
                          4: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=)
                          5: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=)
                          6: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=)
                          7: bel6Fk2PBFF8iK4X4dPcB_YL-p8.roa (hash: whSoMvRfcwg1zlxaNwdPk6EU1wdOECDElkdNcqQV/CE=)
                          8: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=)
                          9: hBKsbi06dqWQsHOJ9T-z_RIbUjA.roa (hash: uWUX6xGjuFBVk0pdcf+5Gpk/beOEbACzQvY2ZU/EXNs=)
                          10: jNNBKwU2mAjLQ1w3Ok95aTQxyPw.roa (hash: r1u8fTThBA818KHS3KubsjlhZxB1UdV+hCt2v0ZIYsY=)
                          11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=)
                          12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=)
                          13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: wfq5vdPiQIlm4YMWrdhzRPJOYe3aeIzISIpUp+akXQI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:40:ef:47:cf:96:f9:d8:3f:fe:92:ef:d5:2f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=46458fa5868352478fa80ff9220f90a6dd900653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:1f:ab:e8:aa:78:f2:cb:60:34:3f:b3:1f:
                    69:c6:59:64:5b:b5:2c:24:3b:c1:dd:47:3d:94:cb:
                    61:75:cd:6c:b2:8f:de:4b:eb:e7:a3:31:5e:4d:b1:
                    2c:f2:8c:2a:b6:0f:d8:6d:e8:26:82:09:62:0f:22:
                    1d:79:84:98:14:46:f8:b3:5b:d7:ba:25:e1:b8:27:
                    72:81:e3:9d:5c:3a:d0:5b:db:78:32:1e:3c:bb:67:
                    9f:f3:bf:e1:a1:f0:85:99:65:b3:4d:4f:88:a5:d0:
                    8f:9e:ec:39:7a:d0:59:a7:ed:2e:95:20:39:1d:89:
                    36:ba:b7:92:f0:24:8e:ba:fe:9b:b3:02:3c:33:dd:
                    d5:88:c2:aa:98:27:0d:dc:67:5c:4a:23:7e:7c:4a:
                    6e:8e:d1:7e:84:3b:0b:0d:33:ed:c9:2e:13:5f:97:
                    7e:b8:be:ae:5c:31:09:b6:64:3a:15:e8:a2:f0:23:
                    cb:33:08:28:0b:4b:1b:26:dd:61:e1:7d:19:04:72:
                    31:3b:0f:6c:bc:71:51:1f:6c:d9:58:20:30:e8:7a:
                    fa:bc:2d:21:e1:47:8e:c5:b1:22:8f:05:4d:81:33:
                    a8:c4:91:bd:0a:0a:40:b3:a9:8d:85:8f:8e:e9:0f:
                    90:2a:46:38:29:28:2f:6c:7a:9f:ac:a7:9d:79:08:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:45:8F:A5:86:83:52:47:8F:A8:0F:F9:22:0F:90:A6:DD:90:06:53
            X509v3 Authority Key Identifier:
                keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:03:ef:6e:68:bf:9b:bb:c9:fd:54:32:5c:71:58:e2:72:
         8f:e8:5d:40:f2:45:41:cd:66:6a:2f:44:f2:76:ad:03:70:ff:
         ee:63:69:d0:90:2a:b2:3f:a1:2d:be:13:75:59:69:4e:7f:e9:
         fe:06:53:01:af:32:a0:99:34:58:7a:fe:c3:21:ae:63:ae:d4:
         8c:40:36:dc:8b:7c:5c:ea:7b:73:e2:ca:95:89:8e:f1:2f:71:
         41:e6:d4:67:c1:0b:a3:c5:78:0d:1a:58:8f:f7:e7:c9:2a:67:
         f9:1a:e6:71:4c:a0:3f:c7:22:f8:85:46:71:be:06:12:9f:d0:
         17:2c:16:de:9e:c8:87:13:b9:76:c5:e8:b4:2f:2e:7b:c4:72:
         d6:7d:ea:fd:78:cb:63:63:b0:99:72:cc:6c:25:29:59:39:2a:
         31:9b:21:dd:c6:af:cc:a1:b0:a0:67:df:f9:37:67:d2:61:b7:
         66:32:70:1d:c5:25:c3:c0:d0:20:78:e1:50:f8:46:29:d8:4b:
         90:71:96:e7:0f:6b:47:a6:3a:da:ba:56:32:cc:05:62:1b:59:
         29:e7:ff:23:3c:8e:58:cf:56:12:73:64:2c:01:73:9c:92:b7:
         aa:9e:3a:34:67:26:97:ed:5b:d4:d0:bc:63:3c:bf:c1:a0:7d:
         42:cc:7f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----