Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
File:                     zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft (raw, json)
Hash identifier:          5X/PV4dy8FR/TnRB0usZ8I5+zeZ/g1W/HvE4rFuOwj8=
Subject key identifier:   69:42:99:CD:49:4B:B2:DB:94:1A:59:D2:4F:5B:D3:30:32:6A:F8:2E
Authority key identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
Certificate issuer:       /CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Certificate serial:       01962F7433AB96A433D2EB5A9DF87AFB918D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
Manifest number:          0D9E
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: JUuxGv_Lm_wDAeQKgUpF0b2dN-E.roa (hash: LxGPc9DuVZu7AFf7wSLnWbscOl013tf3bR9ibnxaHEM=)
                          2: zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl (hash: XMRnpQmlvnJHWzScq/hGLjU28jRxB16+cTkFjqCD42M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:33:ab:96:a4:33:d2:eb:5a:9d:f8:7a:fb:91:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=694299cd494bb2db941a59d24f5bd330326af82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:8e:ca:ca:f3:4b:57:78:7c:86:1c:fa:b3:
                    25:f2:02:e2:10:c3:88:30:3a:02:84:b6:b4:a3:34:
                    a7:bf:4a:92:bd:2e:f0:31:f9:19:cb:23:4b:2b:24:
                    e5:66:6b:71:48:6f:d0:f1:fa:1c:f2:4a:28:8d:fc:
                    08:2a:cb:c1:00:ab:b6:09:cd:6e:8f:c1:77:10:98:
                    f2:46:7e:9f:cb:4b:6d:f0:90:f1:53:b5:6b:a4:79:
                    5a:93:2b:8d:c8:a9:bc:1b:14:a3:83:9a:24:8a:bc:
                    dd:3a:d3:ce:bb:a2:65:cb:c1:c8:98:ae:91:79:c4:
                    67:9c:0a:fc:15:6e:08:20:97:a3:76:b3:34:31:65:
                    a5:b1:d4:64:d6:eb:24:1a:d4:95:f8:94:9d:c4:8c:
                    96:c7:64:84:ea:42:cb:31:38:8e:01:3d:58:b1:ac:
                    9f:5b:bf:28:51:cb:3e:ee:2e:fe:40:04:94:9e:d4:
                    b2:1d:59:3e:5e:80:8a:cf:75:04:b4:19:00:4a:00:
                    9e:16:36:5d:05:92:f3:d0:8e:b6:d5:be:48:d3:ae:
                    64:5c:b0:a8:46:7a:35:71:05:10:05:a9:73:51:af:
                    70:09:ed:fb:8f:14:4b:db:fc:1f:84:a4:31:3c:3d:
                    03:69:b7:eb:0c:d5:37:d0:9e:3e:fc:a0:6e:1e:dd:
                    db:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:42:99:CD:49:4B:B2:DB:94:1A:59:D2:4F:5B:D3:30:32:6A:F8:2E
            X509v3 Authority Key Identifier:
                keyid:CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9e:3c:60:ca:63:d9:77:7b:2a:45:a0:29:64:ae:68:7a:96:
         d2:b3:4e:b8:2f:f3:b7:c9:38:eb:48:27:25:74:d6:18:f3:4f:
         10:4c:47:36:b9:b8:5e:de:5e:1f:45:2d:9c:a4:74:a8:e2:1e:
         15:e0:50:bf:c6:d4:80:ce:26:95:bc:69:43:96:cb:27:f6:92:
         5b:83:e2:66:60:0e:e5:a0:ec:36:ee:85:3a:2a:c7:37:d5:e7:
         1e:10:b2:f9:cb:15:7d:5e:e7:d2:28:c8:c6:31:60:17:60:95:
         e9:d3:96:e7:3b:73:d3:9f:dc:b4:ea:de:0e:a6:23:70:df:bc:
         91:94:05:8c:68:5a:19:2f:b7:8d:97:67:a4:18:84:b3:e1:e1:
         64:5b:c6:86:ee:0b:0a:52:e6:f3:2b:e4:6d:e5:05:78:2a:36:
         73:10:a0:bc:f8:64:8b:7c:73:0d:26:c0:ec:d8:c7:63:99:7e:
         d3:2b:b3:46:3e:db:76:5e:39:bd:ac:d6:7b:6c:66:2a:9a:c4:
         ad:da:fe:e7:8f:0f:e2:49:59:85:c5:41:79:b2:6b:ba:59:63:
         b6:b2:e1:ce:06:2a:0e:ea:d1:53:6f:b9:00:8e:76:a5:c8:af:
         03:58:e9:b8:46:8e:d7:4a:40:39:68:b4:0a:6c:2a:ea:f2:05:
         ce:53:dc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----