Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File:                     zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier:          APwM8OdVv5p5GCjxyBkRSfO0RB3cuFk7zb4gxd8VQO8=
Subject key identifier:   7B:18:43:75:83:15:B3:0D:1A:AC:4E:EA:1E:80:3E:65:B1:C6:B5:96
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer:       /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial:       01962E990853C46A618B759D2DB344DC8800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number:          11EC
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: vHQRV0jRUXExLLAYBdY2ODpzWoo.roa (hash: 7UhAMCr3OjHllJdnfdmjdJInrKVauXU3M4e5nn0fWuA=)
                          2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: UcDna62664VmDD0LoSaROf/v3KJRPp/qaizJP+ZmdcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:08:53:c4:6a:61:8b:75:9d:2d:b3:44:dc:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=7b1843758315b30d1aac4eea1e803e65b1c6b596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:c6:69:d7:4f:8d:02:13:00:76:5a:81:7c:
                    c6:eb:ce:3b:5b:f5:2c:2d:d4:f4:91:5e:96:48:ab:
                    0e:6e:b9:3a:81:58:e5:d0:9e:0d:4a:fa:a9:28:7f:
                    df:89:27:a3:46:31:d9:de:53:ff:ba:65:ca:96:16:
                    6a:f7:59:d8:90:06:0e:94:71:7d:52:d3:83:06:f0:
                    f9:7f:5f:02:04:43:32:d0:29:2e:e8:44:83:ff:72:
                    30:70:0e:c9:a4:40:12:f9:e1:39:bf:db:22:f8:d3:
                    b4:9c:77:b0:bf:d7:61:83:f5:da:07:60:d0:14:93:
                    30:5d:cf:af:e6:19:0c:0c:c3:f4:90:12:d6:7e:99:
                    fb:51:6c:50:bd:06:8a:09:0f:1b:0c:39:87:e8:d9:
                    b4:a8:5d:fe:5d:68:10:bb:c7:78:48:1a:00:ae:e6:
                    4b:f2:cd:bc:0e:db:36:d2:03:a7:00:b0:4a:85:26:
                    50:07:fa:1a:07:b5:af:a2:7a:1b:9e:23:6a:d4:28:
                    0b:df:69:9d:ad:63:34:29:cc:50:28:6a:bf:3c:8d:
                    e0:8c:56:55:9a:7c:0e:7e:c0:3f:73:c5:6c:7c:df:
                    9d:d6:2a:8a:3f:ac:d5:98:bc:a0:fe:7c:f9:0b:98:
                    fd:23:86:e9:be:cf:d4:6f:f1:1d:93:81:41:15:35:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:18:43:75:83:15:B3:0D:1A:AC:4E:EA:1E:80:3E:65:B1:C6:B5:96
            X509v3 Authority Key Identifier:
                keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:e0:08:da:50:42:8c:d1:08:dc:2a:6b:e6:e0:8e:5e:fc:
         a2:2b:3c:e8:5c:55:99:fd:5b:41:b4:3d:ca:ed:48:b6:61:61:
         af:7d:67:51:03:12:6e:54:17:98:b5:0b:0e:25:58:cf:9a:fd:
         97:2c:47:be:00:b9:f6:b3:7d:92:0e:39:52:12:1d:af:41:f1:
         89:38:eb:12:57:41:e1:45:02:da:20:5d:e1:01:72:fc:88:f5:
         a4:63:6d:7b:dc:f7:a6:97:c8:67:a1:aa:5f:f8:48:5a:be:f8:
         65:36:b0:f0:65:6d:1c:9d:dd:61:9e:e4:8a:e8:6a:3f:22:56:
         0e:a8:95:be:9d:78:15:67:f4:db:cc:a5:6e:22:59:2d:0b:bc:
         4c:65:ce:61:f9:f5:30:6a:e4:16:19:24:38:9d:26:8d:12:2a:
         36:1f:f9:04:99:7f:6c:cd:1b:59:04:88:20:da:47:ee:b5:fb:
         07:de:73:9e:c3:2f:4c:9f:53:0b:b5:62:4b:9c:51:73:d7:bb:
         20:14:dd:08:ee:1d:f9:30:ad:a7:f5:20:ed:ad:f1:24:2d:70:
         d3:4d:ce:92:21:b5:23:59:cf:a5:12:9c:bc:bb:5d:4c:22:91:
         c9:e0:8a:bd:09:6d:44:68:f0:77:2d:4a:9c:f5:69:6e:74:c8:
         a9:c4:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----