Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File:                     A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier:          AcUCwUSd2fvw04ja4S7WmF+W/Oi/r17YwbrZ2g9wV9Y=
Subject key identifier:   B8:52:A0:AD:8C:FB:74:6C:2A:46:3A:7F:B0:CD:25:7B:7E:63:48:42
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer:       /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial:       01962ECFB6A6C1E1DD15FA02DE14E5134E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: Bdb36LXj5I8dCTSQoZ53APYnrxnJlCWWVYo1HLtquww=)
                          2: zrwokDU3FhdB7_q1CXdcMR9bnVs.roa (hash: GD4RouuFMqAMeF041Js/nVB0Sr40yt7mYWnED87KOPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b6:a6:c1:e1:dd:15:fa:02:de:14:e5:13:4e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=b852a0ad8cfb746c2a463a7fb0cd257b7e634842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:80:b9:7e:76:35:d0:2b:c1:03:e0:36:8c:
                    f1:bb:fe:1b:40:4d:61:5d:1c:2c:4d:2b:50:5a:8f:
                    53:eb:02:4d:67:11:7f:7a:3a:f9:3a:b9:58:02:bb:
                    8f:f6:6c:9a:c1:55:ea:2d:2e:79:75:57:2d:1a:e0:
                    08:b0:0e:4f:6f:04:d5:95:2d:6f:56:9f:39:c2:4b:
                    09:31:84:60:6f:de:4d:b8:e3:89:83:b9:a6:f8:d0:
                    54:1f:f4:44:bc:93:69:5b:61:d3:4c:1f:db:f9:95:
                    38:10:6a:de:6f:ea:dd:74:6b:bf:c5:a8:2a:e7:95:
                    d9:2c:b4:37:0f:30:5e:c8:25:ef:0b:d1:49:fe:df:
                    75:5c:ea:bd:bf:48:23:4c:dc:c1:c4:d7:e7:a3:3f:
                    ae:24:88:9d:59:33:76:00:d1:6e:e4:81:ed:7f:e2:
                    0c:92:56:75:45:4a:29:8a:4b:a0:d1:41:1f:9a:a8:
                    1c:7e:0b:f9:a0:30:31:83:a4:35:de:ab:16:e8:ff:
                    f2:9c:9c:71:31:84:ac:0a:8a:c0:6c:95:10:7e:be:
                    77:3d:c3:54:ab:8a:de:f3:39:e4:94:35:3e:0f:c5:
                    79:77:32:b6:8a:e6:81:70:88:80:d2:a7:56:67:e5:
                    71:6e:e6:0a:f9:1b:6c:bb:18:5a:10:f9:bc:7a:3a:
                    e0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:52:A0:AD:8C:FB:74:6C:2A:46:3A:7F:B0:CD:25:7B:7E:63:48:42
            X509v3 Authority Key Identifier:
                keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:54:7c:a1:68:39:57:09:5c:4e:0e:8d:d2:88:7f:aa:41:
         58:69:42:c0:cb:76:64:8d:b1:bc:81:88:19:e0:45:64:b7:fb:
         55:ba:fe:03:a3:12:66:29:16:bb:94:81:ea:9e:4f:38:27:55:
         c9:e3:a3:14:a0:95:4f:aa:02:29:ea:4d:d0:d7:31:6e:a0:a3:
         d7:66:b8:e8:12:0e:29:55:d9:50:a5:9e:ca:79:65:98:5e:fe:
         6f:ca:82:66:7e:75:62:ab:7f:d9:45:cc:25:17:a4:cf:2f:67:
         6e:7a:06:88:0d:bf:c9:aa:e3:50:9e:1c:e1:d1:bb:d8:dc:e0:
         d8:1e:e9:e1:0f:ad:65:6c:95:88:d3:1f:33:eb:f1:97:46:a0:
         53:d3:02:2f:18:ff:19:3a:2a:93:4d:c4:ca:0d:db:a8:98:b6:
         27:9b:77:e1:88:b4:78:52:87:98:92:35:f7:f0:7e:60:87:9b:
         38:49:f4:e9:de:ca:da:be:d4:fe:0b:19:aa:70:e6:90:68:38:
         50:ff:35:c9:72:bf:97:80:e5:cb:06:cf:c6:62:38:d1:b4:6a:
         8b:04:1e:bc:5c:52:8e:70:8b:fe:84:8b:59:d1:3d:5c:79:ff:
         08:10:fd:6c:61:38:a0:20:22:01:be:d1:b8:66:cd:c8:48:32:
         5b:b0:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----