Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File:                     Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier:          3P1EM+IzPpKaeagN457NDvs9Th1vL1HNKxiQHJpax14=
Subject key identifier:   FB:E9:F6:05:D9:55:33:2D:64:EB:65:9B:20:76:72:E6:10:1A:C1:70
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer:       /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial:       01962DF3BBF93E733CD7A12FB70657A1D461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number:          11D7
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: zI9JVzsJUHQKZ6mgptzITBvgOWUN5VcI+XZ8jFgxt6A=)
                          2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
                          3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bb:f9:3e:73:3c:d7:a1:2f:b7:06:57:a1:d4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=fbe9f605d955332d64eb659b207672e6101ac170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6e:64:54:7c:c0:2f:bc:67:ad:75:6c:81:56:
                    5f:b3:bd:e6:4d:f8:c5:49:2d:3c:1d:4d:92:d3:69:
                    ab:ac:c1:06:06:21:70:df:2a:2d:89:d0:88:48:88:
                    09:a2:46:25:27:5f:d8:32:a8:42:a5:b3:d6:54:78:
                    ea:8b:c1:89:9d:f7:73:58:19:69:c9:7c:87:9f:e3:
                    21:96:69:ce:09:8d:52:2f:7e:37:bb:df:9a:0b:9a:
                    24:4c:48:33:19:dc:7f:8d:cf:2a:2e:42:67:55:07:
                    c7:b7:05:ba:54:22:48:a9:91:6b:cd:e1:3d:62:e7:
                    43:5a:fb:9b:2c:5e:0e:a0:5e:76:cd:2a:f1:24:5f:
                    41:00:06:11:28:65:31:ef:3e:97:0f:ad:e4:0b:cd:
                    ef:f8:12:5b:dc:36:7c:1c:60:bf:46:9f:66:eb:97:
                    19:b9:89:79:98:48:8e:6b:77:c6:bb:8c:95:72:d8:
                    e5:2b:d3:e3:6c:b2:bf:35:3a:79:f1:e9:20:77:49:
                    49:ca:76:ef:38:e9:e6:b5:9a:b6:b8:24:ea:23:38:
                    0d:ac:ea:80:87:91:fe:89:89:a9:e3:d3:be:07:a2:
                    a5:c0:ba:08:12:5f:41:ad:df:ea:1e:cd:4b:7b:7c:
                    68:89:64:40:02:d1:c5:79:6e:17:47:bf:37:7e:74:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E9:F6:05:D9:55:33:2D:64:EB:65:9B:20:76:72:E6:10:1A:C1:70
            X509v3 Authority Key Identifier:
                keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bd:4d:9e:be:64:e2:99:73:dc:16:dc:be:d5:eb:32:2e:7b:
         f6:fe:1a:c9:cb:38:65:2c:e8:f5:fe:0e:f1:d5:eb:e5:3d:f6:
         57:48:bc:f3:fd:4b:e5:72:80:19:3c:d7:a4:d7:5a:60:3e:85:
         94:a7:dd:f5:5e:d1:4c:94:ce:2d:34:3d:14:b5:ba:79:3c:d9:
         0e:1a:7e:4c:62:ef:68:5f:19:b2:88:71:3f:c6:34:e3:82:38:
         06:cd:b2:0a:8c:79:86:60:68:31:ec:1b:b3:15:7e:cf:19:c5:
         eb:9f:7a:e6:c5:14:7e:eb:c7:3e:f3:1c:8a:61:51:c8:b2:e8:
         d4:b2:24:74:82:c4:f4:d9:87:2c:f5:7e:15:83:d8:01:5c:df:
         2c:75:c4:cc:d5:62:84:07:a8:1e:ba:c3:ad:af:18:10:82:5f:
         85:ba:ec:36:f8:30:fe:24:aa:c9:29:cc:0d:1f:b5:e6:cf:7d:
         89:73:b1:17:a7:d8:cd:7d:e8:c4:b8:4d:c8:0b:dc:bf:b8:21:
         9a:54:13:b1:7b:36:91:2d:8a:a2:3d:5b:2d:17:1e:01:2a:d0:
         0b:95:e6:6d:36:db:d8:c7:b9:ff:ea:b7:3b:4d:98:b6:21:45:
         75:af:06:44:86:48:63:c8:f7:46:c8:c9:e1:74:4c:e0:56:9e:
         97:87:cf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----