Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File:                     zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier:          BcJCFmIEqSCo++YYSW9C+aPYuVmB2u2z+r3V86iC9Iw=
Subject key identifier:   30:75:99:2D:39:7B:18:63:64:DE:98:73:C0:60:A8:2C:AF:C4:C4:55
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer:       /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial:       01962E99AB65E1EA428DA66C5973F65C0A90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=)
                          2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: ZR0BQWHGxeoCDFUsB5XUcZ4CrmYSZ64uly5iFOfLvxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ab:65:e1:ea:42:8d:a6:6c:59:73:f6:5c:0a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=3075992d397b186364de9873c060a82cafc4c455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:4e:c3:f9:c7:83:0a:00:61:60:0b:8b:7f:
                    ef:27:bd:c7:cc:d7:9f:37:f6:82:a3:65:b0:6b:67:
                    85:ca:63:62:b0:63:49:9f:de:55:97:e8:7a:50:cd:
                    76:b6:37:02:ab:3f:66:42:c5:4b:1c:b4:e4:2e:db:
                    fe:ca:4c:55:c3:63:64:d1:c8:0f:75:6e:99:3b:1f:
                    6c:61:f8:86:2d:ee:c0:2e:77:3a:62:36:2b:5c:a0:
                    fc:23:9a:a7:b7:fa:bd:79:c2:e2:3c:73:23:06:f5:
                    1d:64:96:57:f1:dc:e1:a8:7e:1f:5d:5f:1b:25:f0:
                    2f:a3:3e:b3:90:7e:39:79:76:5b:f8:78:b9:2a:11:
                    c0:e9:f8:e7:48:6e:a6:f5:6c:85:46:cd:73:32:79:
                    8d:d8:8d:3d:fc:0c:74:de:fc:ed:75:d0:f5:43:08:
                    39:fe:f2:4a:c0:7f:03:2e:fd:d8:d5:ba:af:c7:60:
                    6b:ad:4f:40:72:44:ab:84:02:81:5a:aa:1a:ca:66:
                    ae:38:83:d4:fc:dd:a9:f3:6a:0a:dd:da:13:de:ac:
                    57:f0:e2:5b:f3:b6:88:08:78:e5:aa:2d:63:db:25:
                    ea:45:f7:de:bf:a7:cb:b6:79:83:b6:82:b5:2f:3f:
                    a3:57:fe:ba:33:60:68:a7:a0:cb:4c:72:e5:77:4a:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:75:99:2D:39:7B:18:63:64:DE:98:73:C0:60:A8:2C:AF:C4:C4:55
            X509v3 Authority Key Identifier:
                keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0a:e2:f6:31:eb:02:23:7e:7d:52:b0:db:8a:ab:6b:a3:71:
         c2:2c:17:0c:cb:59:6e:ac:29:60:6a:ed:6e:0f:95:83:af:a0:
         d2:54:a7:16:f0:eb:83:5f:0a:46:97:a8:98:d9:41:88:57:80:
         8f:18:d0:d8:ef:10:8f:a2:62:d9:0d:99:46:bd:98:2f:1b:10:
         29:e0:a8:11:43:ef:86:22:75:de:b2:a4:ec:72:9e:90:e7:da:
         2d:34:20:04:38:dc:04:54:4c:ba:14:c7:64:24:24:92:03:44:
         df:32:6e:a0:0b:f6:85:2e:f1:6c:42:7d:8c:57:a6:23:32:d5:
         e3:d0:f7:64:9e:dd:86:2f:9a:26:fb:c7:51:e9:4c:e6:66:42:
         a8:07:35:df:8b:1f:18:31:e3:12:e6:2d:e1:54:85:2c:f9:30:
         52:88:86:fb:28:62:9b:aa:f0:31:f4:d0:d9:e1:e0:f4:c1:94:
         91:b7:73:ec:98:d7:7c:68:34:4b:99:91:54:fb:c4:07:90:77:
         48:3d:1e:c9:44:ab:b7:be:58:b0:d2:43:44:57:70:ff:1b:9b:
         9d:ad:f5:71:a2:a1:8f:2e:ed:0b:66:5c:47:1d:7a:ac:73:ab:
         bc:20:93:c4:5b:70:8d:57:1b:8f:83:24:6e:18:c8:4a:b4:6a:
         86:1a:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----