Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File:                     zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier:          DA/k0QUbRjupbJ9sfC0oFp8EHLCTeZ/jXNEEr5i1miQ=
Subject key identifier:   08:37:A4:81:4C:57:7B:A6:A4:45:FD:C6:44:2F:01:D6:B8:7C:AE:FF
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer:       /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial:       01962E2AF8622C1B1B4AA55018FE50589AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number:          0D02
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: ahWZL5H1qGkfpR9r5MK6JSJk1Dc.roa (hash: WUef3WgjpaprU4IuIXYy1q31GG6Dfwy/D5/f2fp0uKs=)
                          2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: UB8TCW43Ue5ClReRcBe6OhN69ujCFzToJOskAoN/hNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f8:62:2c:1b:1b:4a:a5:50:18:fe:50:58:9a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=0837a4814c577ba6a445fdc6442f01d6b87caeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:a1:4c:2d:5f:3b:79:d2:91:23:4f:fd:33:
                    50:1f:39:d4:ab:95:e8:f3:41:51:b0:9b:30:7a:d7:
                    44:51:46:7b:cc:c3:c8:f6:cf:ab:d7:1f:82:f2:1f:
                    ec:30:47:19:5b:19:07:04:4a:78:70:0b:bc:42:e7:
                    c8:41:b5:4b:33:aa:8a:ee:0c:95:87:e7:96:0f:cd:
                    bb:37:35:42:a8:d7:51:35:8d:03:d1:07:a1:de:78:
                    e1:bc:14:9c:76:97:8d:ca:e6:2b:82:4e:46:a2:0b:
                    74:f9:23:7a:0b:53:85:91:00:61:48:0f:f4:2b:68:
                    c0:09:07:d6:65:b7:bb:f5:a4:dc:18:f2:d1:49:94:
                    74:ef:df:62:72:8f:52:20:d0:e0:99:b0:85:df:98:
                    f5:3e:e9:4c:85:47:fc:ac:e9:8d:d3:4a:bb:25:a7:
                    5e:8e:59:c8:a2:c2:2b:92:dd:20:ab:6b:f1:6b:f3:
                    5c:b9:5b:0f:16:06:01:39:fe:6a:23:22:7b:fc:2a:
                    b7:c4:e1:29:12:08:d3:9f:2e:32:eb:cd:8f:1b:55:
                    a0:2a:f6:44:ae:a7:07:54:67:cb:4e:db:8a:2f:f9:
                    34:30:a9:f2:0d:34:6c:72:1d:c5:4a:ed:5e:87:d8:
                    1b:ed:2a:45:da:48:da:cd:ee:fc:a0:4f:9a:10:08:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:37:A4:81:4C:57:7B:A6:A4:45:FD:C6:44:2F:01:D6:B8:7C:AE:FF
            X509v3 Authority Key Identifier:
                keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:aa:6f:b9:ec:45:fa:75:0c:a7:af:7e:c8:da:b4:f2:6a:a2:
         cc:95:06:58:4e:4c:b9:ea:4f:e5:4b:fd:b1:19:bc:20:79:19:
         20:bb:e9:8e:23:4c:9f:e4:ce:db:db:5f:fc:3f:8a:07:53:8d:
         86:d2:0b:2a:1d:1c:79:af:1b:60:07:85:15:c5:3e:91:92:d2:
         7a:3f:57:4b:b6:98:98:ee:84:a8:58:83:e7:21:4f:aa:c1:fe:
         9d:35:fb:8c:72:7b:53:78:ac:16:4f:40:66:dd:8b:e4:76:bb:
         2d:4d:6f:d7:9e:56:f3:5d:a0:40:18:05:53:33:78:ed:49:fc:
         f3:e8:80:58:3f:e1:ce:2a:a2:dc:db:26:a8:2d:11:6b:a3:8e:
         ea:3e:89:04:da:71:a7:a1:7c:4e:77:41:1b:2c:65:43:d1:99:
         10:ce:40:1b:ad:7b:23:45:5a:f9:3d:b2:5c:de:65:2d:30:7a:
         e8:91:f8:20:d5:27:49:13:48:c6:a0:b1:44:95:58:3d:fc:29:
         1b:09:80:f5:91:f1:23:3c:d8:5b:1d:36:43:60:d8:0f:55:26:
         1d:74:9a:49:a0:5d:ea:4d:b7:52:e3:1a:ef:f9:1f:0c:e8:5d:
         a7:46:53:b8:39:a9:a4:03:b9:f2:50:ac:58:12:7d:8e:23:e2:
         05:0f:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----