Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File:                     ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier:          yTEWZG2zZbHCTFqkUJj685WYyUUqOHYOWvYQ6K8jHRg=
Subject key identifier:   04:1B:C4:A3:54:54:6C:2A:15:8A:BA:2B:2B:26:C4:4A:50:23:47:15
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer:       /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial:       01962FAB25649D4F108D7A0A7FCC68407F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number:          02D2
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
                          2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: 0Vz8IuwmP+vT9yP+L1jo770QyvalZvvxlXRAHzRaD+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:25:64:9d:4f:10:8d:7a:0a:7f:cc:68:40:7f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=041bc4a354546c2a158aba2b2b26c44a50234715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:a6:c4:8f:08:65:4c:c3:62:14:0f:65:3f:
                    63:9d:40:c1:30:88:b4:68:57:71:73:00:10:b8:a0:
                    0a:71:ab:a8:74:70:8b:48:21:7d:ad:ae:7b:43:60:
                    d5:8c:22:50:9b:e9:b7:ff:23:42:dd:9d:99:a1:73:
                    37:60:22:b6:a2:7b:9a:64:fb:e0:8f:af:14:90:ba:
                    ff:00:c7:10:9d:00:29:82:be:e2:9f:94:da:44:a7:
                    bd:5b:b5:9e:34:1d:96:09:7f:eb:84:ec:42:95:9a:
                    d4:ae:06:46:04:b2:7e:84:21:01:8e:82:49:fb:65:
                    62:7e:a1:fa:86:08:03:1b:19:e1:8b:9e:a5:2a:51:
                    43:ca:a9:a1:47:da:55:7b:a4:73:79:5e:ec:f5:a0:
                    e7:d2:db:3b:59:33:4d:48:8a:c4:09:2a:c4:a5:70:
                    09:3e:c0:2b:eb:3c:78:e3:0a:b3:30:06:98:92:6a:
                    93:43:4e:24:b1:37:da:16:e4:fd:52:32:4e:7a:81:
                    58:3c:d2:d6:eb:30:bf:15:bc:24:01:b2:2d:ac:ec:
                    6b:1c:a9:de:84:ff:c0:09:90:02:44:41:61:2e:18:
                    45:e1:6e:e1:3d:cc:c3:b1:10:2e:52:72:a2:81:ea:
                    53:3f:a6:de:b6:ac:f3:83:d6:05:e3:3b:ff:c6:94:
                    fc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1B:C4:A3:54:54:6C:2A:15:8A:BA:2B:2B:26:C4:4A:50:23:47:15
            X509v3 Authority Key Identifier:
                keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:4f:3f:48:bf:24:ef:eb:ea:37:cc:96:62:38:a6:51:48:
         64:78:e5:7a:2a:58:63:9b:d5:7a:e7:94:91:94:df:af:69:e8:
         54:ec:47:df:c9:4d:53:24:54:c2:67:a3:80:12:39:21:f8:0e:
         b4:22:9a:9a:33:f4:aa:e4:7c:86:b0:1e:3d:f2:a2:e6:c9:b3:
         5d:9c:53:22:61:0d:47:a1:a3:3b:dd:18:6e:de:ed:72:5a:8a:
         92:95:2c:f7:41:13:04:c3:22:62:3e:a3:0b:6d:d3:fc:9f:68:
         df:0f:55:d7:81:92:d4:c2:77:b7:ed:e6:46:e6:d6:48:b7:09:
         4e:c6:9d:08:59:36:00:e0:a1:c4:f4:a9:cd:38:6d:73:40:be:
         c0:80:11:0b:a8:21:df:35:7a:6c:e3:33:ac:6b:54:c8:2a:32:
         26:d5:c7:9f:08:e8:30:4a:be:52:40:4a:f9:35:82:b2:68:f8:
         fa:c3:92:1b:84:c1:8a:4d:f9:06:f4:c1:bf:37:c1:6e:61:16:
         61:53:66:7c:18:52:1d:f8:05:56:33:40:3c:73:59:bc:97:34:
         fe:84:29:ca:92:94:7b:e7:2c:1e:1c:62:e5:8d:f6:95:fa:9d:
         38:1a:fb:aa:e1:de:11:65:83:3b:54:ae:5e:74:08:a1:e3:2d:
         63:78:26:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----