Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File:                     zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier:          a7RjuCORl5Dw8kyflNJLfLSjGQQH84JsQ6y/wJiqy5M=
Subject key identifier:   DE:78:CE:D4:B1:FA:64:10:91:FF:BC:43:B8:84:48:3F:BA:10:AC:06
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer:       /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial:       01962F74C688BA3EE8FFA7DDC750A558DE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: 4LK6RGBLui-aEbPRtqPLVkSUW60.roa (hash: HKFxqJUpJsHV+sptJ97e+oKZWNhWHZ0wI/MLAzbhfC8=)
                          2: 7SnZ2wdTAHyiVcyhnIAGtBdWwvY.roa (hash: KOo8uRmX/xugX/zDKxM39qWHbAMQmIcpriUpdt/0wYA=)
                          3: PAAVgOudpAsUIfqhJcqm8oy8JDE.roa (hash: ymqqiqdeF4cim2K3zQCPb5b7mDDQ30DVocSbeg0Ahjc=)
                          4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: 0JohTGLBPj/nsWHUc87ejZszF1CHuhXcRTyIKRHuilg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c6:88:ba:3e:e8:ff:a7:dd:c7:50:a5:58:de:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=de78ced4b1fa641091ffbc43b884483fba10ac06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:61:92:49:9a:f2:2f:04:e2:6b:ac:0d:1f:a0:
                    33:6e:57:c7:79:ce:56:ed:bb:c4:db:22:f0:40:da:
                    a3:a4:7d:20:cd:b7:38:28:c0:5c:81:9a:53:23:18:
                    e9:b0:34:bf:69:74:bf:12:e2:65:a2:cf:c2:14:16:
                    56:cb:43:c9:66:10:dd:2e:ec:e3:38:ec:4a:24:19:
                    76:9c:fb:1b:43:0f:49:b5:ee:6c:8f:52:ef:de:15:
                    07:4f:86:8b:d3:46:ce:9a:1b:ef:74:e1:f7:83:bb:
                    54:46:27:62:e5:c0:9b:bc:54:80:97:d9:9d:28:7b:
                    94:46:6b:30:04:7f:31:c7:1a:47:a3:b7:b0:be:e2:
                    6f:6d:58:6f:a3:2d:0f:a9:29:45:a7:69:01:eb:7f:
                    0e:ef:18:af:f6:5a:d5:5f:b4:5a:b0:eb:0d:4f:f6:
                    6b:f5:59:78:aa:99:39:76:cb:66:ce:72:93:8f:24:
                    ce:64:2a:46:be:4e:04:f9:c6:76:85:f0:be:f8:c9:
                    d6:d9:32:ea:02:a8:6d:9c:08:da:3e:00:35:4e:71:
                    ed:44:65:32:35:ac:cf:0c:90:ea:21:62:0c:86:74:
                    df:20:72:79:fe:68:b7:a8:66:9b:01:f9:91:70:9b:
                    8e:cf:b0:36:81:92:83:fe:17:a1:b2:d8:e8:a7:13:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:78:CE:D4:B1:FA:64:10:91:FF:BC:43:B8:84:48:3F:BA:10:AC:06
            X509v3 Authority Key Identifier:
                keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4e:a5:b0:01:73:89:ee:bc:93:60:92:93:28:f4:29:1d:8d:
         b7:b2:b6:8c:ab:8e:ea:75:21:3f:b6:00:16:ae:cd:8b:e8:ab:
         e7:40:72:a2:cd:0d:06:db:eb:87:21:5d:88:a6:9a:c2:f8:61:
         b0:c8:4e:b2:c9:4e:5c:5f:52:35:79:6a:f9:8a:06:a0:bb:4c:
         4e:6a:c1:8e:22:78:13:28:65:96:c1:2b:4d:f8:f0:9f:45:dc:
         e4:b4:17:63:76:5e:73:66:a6:06:ee:91:e8:33:15:84:ca:23:
         3b:de:d6:af:24:ac:5e:e3:40:48:47:2b:c8:12:c4:89:0b:77:
         9f:38:97:d5:4d:b6:6d:a7:96:f8:fa:9a:5b:f5:ec:91:b4:7f:
         a4:55:e2:03:f1:e7:ed:9c:3d:5f:1a:b3:3f:fa:7c:94:7e:c6:
         e7:78:2b:35:8f:7c:8b:05:1c:5a:ed:9b:9d:b7:62:46:bf:a0:
         58:2b:0a:44:61:bf:21:87:4d:16:f8:0f:2a:df:7a:be:19:bb:
         06:3c:fa:b5:9d:b6:51:f2:1b:65:34:5c:26:84:6b:56:e7:be:
         a8:20:3d:72:11:32:fa:45:69:fa:8d:68:99:04:7d:e9:a2:4c:
         bc:29:19:c4:2a:3b:b0:08:9b:ab:bf:c5:98:fa:38:11:c7:3d:
         ad:a9:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----