Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File:                     zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier:          t0CXbj/CfeiNEr35pnKtsLJLVjHRvG4cge7dXqk5rLs=
Subject key identifier:   7C:E8:F1:8E:3C:20:EC:D4:CE:B8:02:15:30:CC:5D:46:BD:39:BD:40
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer:       /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial:       01962DF438F9760B8837F80BCE820FDD735A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (hash: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=)
                          2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: +YvNBTYMOnWZhyotEkIUlLHtZ8tjsgXQkPiIpV2ZMv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:38:f9:76:0b:88:37:f8:0b:ce:82:0f:dd:73:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=7ce8f18e3c20ecd4ceb8021530cc5d46bd39bd40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:e3:93:3b:fb:f1:33:63:6c:44:4b:13:03:
                    2d:98:2e:79:fb:b0:be:b0:cc:b5:52:c9:c7:73:34:
                    e5:8e:6c:25:57:a6:0b:43:9a:5d:dc:be:aa:19:73:
                    84:14:f4:e0:5e:05:01:23:ca:95:1d:27:e3:28:6c:
                    e7:06:43:73:4b:56:bd:9f:d4:de:a2:ef:f4:53:c3:
                    ef:98:84:cc:80:63:dc:44:a9:04:97:c9:ca:c0:3a:
                    da:65:0c:82:13:63:c1:00:2e:ac:05:e2:04:5c:3d:
                    5a:92:be:f5:12:59:06:a9:92:9a:70:88:58:34:1e:
                    04:e7:23:ba:4b:2c:e0:c6:78:f9:14:55:56:4f:5b:
                    8b:d7:a8:35:0d:b2:45:50:58:00:fb:fb:70:4f:23:
                    5e:48:6d:3b:46:6c:5c:3d:1d:9f:00:24:40:8c:4d:
                    53:b0:c1:94:06:c4:c6:64:00:02:6a:49:e9:b3:2f:
                    ac:57:7f:9c:d7:d1:9c:cc:eb:02:64:35:9f:c8:bf:
                    42:64:b4:c5:82:57:96:eb:22:52:c2:22:7a:79:e7:
                    a3:21:75:04:da:c2:21:a9:1f:4f:6b:f9:8f:ab:e6:
                    99:b2:f9:f7:51:71:65:48:a1:35:e2:df:74:b7:60:
                    9b:cb:aa:4b:a8:a4:7b:f0:63:31:fa:2b:4e:e3:6f:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E8:F1:8E:3C:20:EC:D4:CE:B8:02:15:30:CC:5D:46:BD:39:BD:40
            X509v3 Authority Key Identifier:
                keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:76:79:d7:26:ae:44:96:3f:81:97:58:c7:1e:e6:59:6c:8c:
         21:25:6a:ee:75:66:97:26:e3:79:5d:19:3c:81:4c:df:c7:5b:
         14:02:79:f6:ba:27:b5:55:58:85:4f:8d:3e:97:b9:1c:97:1a:
         0c:e8:1f:53:d9:6d:30:b9:37:22:1e:c2:74:c4:87:53:99:b3:
         ac:bc:fa:4b:fe:f7:59:1e:26:94:17:55:54:2f:cc:ec:a1:6b:
         1d:1a:0b:b0:dd:ee:10:35:89:83:c3:1a:9f:f1:08:09:8e:47:
         67:8e:a4:3c:ae:62:b0:1c:b9:7d:05:ed:c0:ee:8c:28:e0:f4:
         5d:f9:a4:7f:5b:fc:40:7a:89:9d:04:ec:31:49:03:32:e3:65:
         67:0b:b0:d5:c9:0a:17:7b:e5:2b:67:81:7c:5b:e7:88:52:50:
         78:6e:8c:26:56:8a:a1:34:47:0a:82:1b:bf:b3:f9:5b:96:46:
         57:78:14:4f:92:c5:37:dc:ab:4b:f5:8b:7d:d2:a3:2f:4b:aa:
         a2:83:de:6b:8f:52:29:04:52:18:47:c4:c6:c7:13:98:5a:c6:
         7e:cc:30:2a:c1:9e:85:77:b0:56:e8:cb:c4:95:09:a0:20:c2:
         30:0b:c7:41:aa:e1:dd:7e:a9:cf:87:f0:97:45:86:a3:bc:7b:
         9b:75:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----