Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File:                     RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier:          9PlpOPM28DMcWAaaH5+ItFovZ4JXjBUqmsZsfjKajkk=
Subject key identifier:   E4:29:38:B6:06:57:A9:47:17:74:6D:60:87:FE:05:B9:1C:7E:E3:C5
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer:       /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial:       01962E61E0C04C0BE84277F4C0812B14D72F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: c6G7xkJKl9QpcEjSi2o4OTrbjAxfKizsRP5/4tMKk50=)
                          2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e0:c0:4c:0b:e8:42:77:f4:c0:81:2b:14:d7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=e42938b60657a94717746d6087fe05b91c7ee3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:03:fe:70:a3:d6:0f:d4:c6:41:60:3c:9d:
                    b3:61:d5:79:f3:91:38:99:c7:0e:5d:ab:42:a1:99:
                    9c:43:07:21:d7:a6:4b:8c:c9:f2:61:3f:17:eb:3b:
                    ea:33:b6:24:88:99:1e:e7:00:5b:0b:f9:2f:1c:ce:
                    3f:17:db:4f:e6:83:c3:62:38:1e:2e:62:db:ed:c7:
                    34:12:0c:f1:cf:6f:7d:8b:8d:93:dd:63:ce:cd:1a:
                    6a:fd:36:84:8b:53:11:81:58:70:45:4d:35:1c:ab:
                    19:d1:0a:9a:82:03:06:6f:93:7e:8c:b2:94:77:d7:
                    12:ed:08:fd:5d:c6:fc:09:19:ca:99:37:6c:95:7e:
                    1e:2d:c7:4d:4b:0c:5a:bd:88:c5:41:59:92:cc:91:
                    37:f9:f2:ec:24:95:e6:f0:df:84:19:73:ab:ac:fb:
                    67:09:3d:02:19:62:20:eb:ec:f4:d5:8c:76:e2:68:
                    51:73:86:cb:08:26:b3:ba:02:f0:7a:ca:c4:fb:6a:
                    d7:d9:3c:bc:12:41:4c:3a:10:83:69:59:9e:20:9f:
                    a9:bc:2e:52:3b:e9:f2:26:86:1f:61:bf:f7:12:b7:
                    33:9e:e1:ec:3b:dd:db:e9:0e:f1:f3:f1:e8:48:82:
                    24:31:04:71:9e:71:c9:12:49:1a:ad:b4:db:e5:28:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:29:38:B6:06:57:A9:47:17:74:6D:60:87:FE:05:B9:1C:7E:E3:C5
            X509v3 Authority Key Identifier:
                keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:62:bf:d8:c9:b2:eb:7b:e0:94:80:ac:5b:2e:35:5c:a3:7e:
         4d:6c:11:19:4d:5c:3d:b9:e4:7d:9f:95:a4:ef:86:54:54:df:
         85:64:09:8a:a2:3a:ed:6e:df:26:1f:75:41:8a:46:3b:75:d3:
         2f:16:77:64:d7:8b:75:f5:e1:22:f8:92:73:58:07:01:50:a2:
         e0:79:ea:22:ad:9d:e1:5e:3e:98:c9:46:d1:99:d7:dc:ca:d8:
         1e:c1:86:90:0d:75:46:14:24:72:cd:cb:a1:ba:d5:bd:46:9d:
         98:27:20:43:43:38:c9:67:67:a7:e7:65:22:d3:c1:c5:41:ba:
         ea:dd:6a:ae:ce:57:6b:4d:fd:5e:b0:a1:75:3b:fb:44:f7:53:
         db:54:63:c5:60:41:84:1f:08:a6:57:21:e9:14:79:16:30:40:
         48:7f:01:89:f4:d8:59:4e:ae:0f:81:ab:35:42:d2:49:d4:fb:
         30:c8:39:66:5a:f7:fd:f6:85:0e:fb:b2:a0:9b:4f:41:e0:7a:
         04:eb:d7:fd:fd:a2:12:80:ea:25:3f:41:ae:2f:fd:93:cb:bd:
         95:bf:ce:eb:24:8a:f9:a6:31:d5:bd:ef:b8:a6:27:c8:cf:eb:
         81:d3:98:16:41:33:99:0a:f1:f5:24:2e:db:9c:63:7e:a1:a1:
         ee:a2:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----