Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File:                     ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier:          IaxJT63XOnVxZDaILGfMcvy8qK4tqtNqodUXOSHyPVg=
Subject key identifier:   B2:16:78:2F:2C:D3:63:60:A6:49:A0:C6:E9:45:FD:B5:F5:3D:2A:96
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer:       /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial:       01962FAB61D4017498768CD0A8A0EED562CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=)
                          2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: Pwo9g8Lq4oynJqrjQWfLxpLS1v3CorLQ7SsjrtxUhw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:61:d4:01:74:98:76:8c:d0:a8:a0:ee:d5:62:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=b216782f2cd36360a649a0c6e945fdb5f53d2a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:ef:11:7a:23:4a:57:e2:2b:25:66:30:7a:
                    ab:3a:0e:65:d1:da:71:5d:96:8d:94:f5:4f:6a:1a:
                    19:16:e9:cd:05:64:4a:a4:74:b0:b8:81:5b:dd:a3:
                    89:9f:1a:26:72:5d:09:bd:07:d7:c4:0a:5a:38:2e:
                    05:8f:03:e5:fe:b3:15:8c:8f:4a:34:b7:5e:09:d1:
                    41:a8:e5:de:6d:35:a5:15:ba:14:e6:6d:30:b4:fa:
                    67:39:4f:3a:c8:b9:30:d0:54:cd:72:b6:ac:45:21:
                    e1:ab:9c:ec:b8:29:a8:46:bc:d2:98:14:ae:ad:53:
                    8c:35:24:69:b4:e3:2b:d4:17:c3:c4:51:e7:5d:56:
                    3b:17:8c:3c:f9:fd:72:d6:a0:e5:44:6a:45:cd:ed:
                    99:bf:c5:99:d4:f9:0b:02:8e:3c:a2:12:4d:16:ba:
                    0c:3c:9d:93:09:de:f1:b5:e0:92:0d:ed:ec:de:63:
                    2c:62:13:b0:a2:f6:73:d9:db:38:2c:d9:53:03:21:
                    ac:8d:0d:a8:3e:0f:8e:49:ee:cc:c4:e2:6a:11:cd:
                    ef:1e:d9:46:55:2b:1c:5b:31:dc:44:a4:47:bb:be:
                    94:15:c5:7c:28:0a:a3:80:b0:c8:b1:48:90:e0:8a:
                    23:bb:74:fc:ad:c7:62:36:ff:36:5e:3e:ce:3b:79:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:16:78:2F:2C:D3:63:60:A6:49:A0:C6:E9:45:FD:B5:F5:3D:2A:96
            X509v3 Authority Key Identifier:
                keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:05:41:9c:97:be:a3:5c:07:99:7a:a8:3f:70:32:0e:8d:7f:
         1a:ee:fb:53:a7:cb:48:91:ae:66:0f:b4:09:1f:85:fd:31:56:
         f2:01:da:53:ea:26:d4:90:b6:7c:ad:a8:e7:29:42:0b:a9:6e:
         f6:7f:1f:6e:67:9c:c8:23:d5:69:15:17:cb:83:40:43:86:80:
         c2:96:93:2c:21:c5:fc:12:be:cb:c5:f0:e4:1c:94:32:1b:87:
         18:9b:84:67:e1:f0:18:8e:59:b9:80:60:ed:35:22:37:c3:df:
         c7:01:3b:c4:cf:52:b9:73:f8:93:df:4e:2a:34:d0:b6:64:c5:
         ac:7a:bf:c6:06:99:61:5b:8a:a8:85:ca:6d:d6:92:4a:19:b3:
         35:de:a3:f0:f3:32:79:20:b7:26:3c:36:6f:12:27:40:07:b0:
         b2:d4:c7:f8:e2:b4:75:44:80:29:43:36:49:43:51:90:5d:e5:
         06:5d:31:b6:9a:97:41:5d:32:91:1e:40:4c:0d:13:6c:18:05:
         63:53:90:69:32:e3:c3:40:7f:1a:a9:7e:85:90:ce:a7:54:cb:
         74:e1:66:cc:63:9b:58:a8:66:99:3b:a5:85:ee:9c:16:36:85:
         2b:41:c5:54:dd:30:ba:87:a8:49:a0:bb:43:98:00:17:9c:6f:
         88:f9:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----