Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File:                     Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier:          d7DXDp1V8vwzAaxy5RFf1IrtUfnX8vA0sGchii2DlvQ=
Subject key identifier:   3A:F7:9A:10:09:D1:96:DC:FA:09:33:62:EB:11:EB:69:C1:99:87:E7
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer:       /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial:       01962ECF808EEFF32D2E224D6C16D51C7032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number:          09F9
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: f56TlB2MqvHPwhMTIuu2DYDJGoNK8iF502SuoQmTo08=)
                          2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
                          3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:80:8e:ef:f3:2d:2e:22:4d:6c:16:d5:1c:70:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=3af79a1009d196dcfa093362eb11eb69c19987e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:be:f1:1c:ea:59:11:2c:26:17:9d:2c:8a:
                    11:2a:c3:a7:fa:f1:9e:16:4e:c8:ca:1b:97:c2:9b:
                    ca:4a:e5:6d:7b:b1:b5:19:1a:dc:a9:8e:45:9f:ae:
                    ab:23:ce:8b:6b:34:97:44:8f:6e:31:ab:9e:0f:04:
                    af:01:e8:f7:ed:d3:23:fb:61:27:ae:b4:4e:0c:bf:
                    3b:37:18:b0:aa:06:23:5a:f9:89:f7:11:5d:8e:55:
                    5f:53:41:48:64:46:c9:d2:5f:e2:2c:3d:bf:d0:96:
                    79:b7:e2:6d:14:20:f2:f7:57:f0:55:fa:8d:b3:63:
                    e7:98:ad:5b:3b:a1:d1:52:ac:d7:7b:3d:13:07:72:
                    3f:72:9e:89:9e:d9:a0:b3:bb:61:52:c1:6d:d5:26:
                    52:5c:e9:82:3f:89:af:dc:5a:2e:81:1b:b7:d7:fd:
                    41:86:93:e7:7a:dd:66:67:6f:13:cb:66:8a:42:b6:
                    8e:e5:bd:e1:cc:8f:5d:f1:f1:11:c1:58:53:e3:a1:
                    08:e4:76:97:26:bd:98:bc:8a:56:2c:69:de:12:8e:
                    d5:e7:b5:94:85:e1:2a:ee:56:0f:f9:5d:79:c1:9f:
                    2c:13:ad:97:36:f4:53:4d:8b:79:ac:95:a6:63:d7:
                    c7:a2:27:9e:43:6b:28:c1:31:b6:f2:d7:51:a8:ce:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F7:9A:10:09:D1:96:DC:FA:09:33:62:EB:11:EB:69:C1:99:87:E7
            X509v3 Authority Key Identifier:
                keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:26:ce:9b:7b:30:7a:f2:0d:47:3a:1e:41:4d:0e:c8:84:73:
         8f:37:57:80:89:e4:e7:15:59:5c:8a:9e:bc:61:f7:33:3e:d2:
         b7:6f:d5:69:5c:0e:62:f4:15:d2:62:71:ba:78:06:11:08:fd:
         25:67:38:6b:87:2e:e5:32:ec:1d:ad:d6:86:b2:c3:9e:2d:0b:
         9f:22:7a:19:c0:6d:d8:48:2e:44:ab:aa:12:07:d0:5f:3e:2f:
         36:b0:af:9f:c1:0c:59:bf:79:47:3c:f0:99:56:41:cc:e2:40:
         45:c5:20:47:4f:1f:42:8b:ab:3a:0d:a6:3a:e9:4d:12:ed:8b:
         98:eb:a9:90:16:ce:d1:67:11:4c:c9:dc:e8:48:b3:f7:48:0d:
         fc:4e:e7:22:ee:5c:dd:45:07:08:de:99:30:6c:de:07:cc:07:
         1f:03:fe:20:21:3d:a3:4f:ab:c4:fa:f9:87:c8:8d:91:b2:df:
         1b:c8:e3:da:14:a8:3a:18:99:28:31:33:51:1b:dd:4c:4e:3b:
         d9:63:72:64:3d:28:57:4e:f5:97:6c:7b:17:f9:e2:05:ca:2e:
         cc:8d:5c:d1:4d:f1:74:28:67:5f:58:71:72:57:50:d2:ec:0e:
         8a:73:12:02:9f:bb:cc:ee:7b:72:cb:da:00:7f:66:33:1f:90:
         6b:62:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----