Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File:                     RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier:          mG4+uxqOmAPv5yEgSlesWUBkvIAQy+GjdKSaTjh3QqU=
Subject key identifier:   DB:EC:69:DD:67:8E:D3:D4:5B:9D:DE:48:FD:1B:42:3C:61:80:33:7F
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer:       /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial:       01962F06DBCDC4447860CC66B7C31595D67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: 0DdDL9I2st3YTPwh9K67mDQHfGMLkpZzwU0KtB7hYsU=)
                          2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
                          3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:db:cd:c4:44:78:60:cc:66:b7:c3:15:95:d6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=dbec69dd678ed3d45b9dde48fd1b423c6180337f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:60:88:de:ba:1a:9c:49:ab:4b:d4:60:62:
                    25:0b:08:ee:20:c8:1e:c3:d7:a9:a5:99:ea:da:91:
                    10:51:f2:1e:5f:02:a9:39:cf:79:6b:27:f2:e6:c3:
                    1a:92:52:45:ec:31:3a:40:8f:09:1f:08:cb:c1:17:
                    1a:2e:c5:97:35:08:ba:18:5d:9f:41:4b:43:9e:4d:
                    a0:32:ba:37:48:d6:8b:d2:06:e7:0b:19:22:a9:3e:
                    86:55:15:40:46:2c:a1:3d:47:5d:64:a9:26:61:ca:
                    e0:ff:74:77:59:75:ef:e0:2b:2a:31:4f:d4:2d:74:
                    0d:88:8d:85:aa:9e:c5:52:2c:b9:66:db:67:c8:96:
                    6a:ee:3b:3f:c4:f6:c3:55:f6:21:d8:34:79:e4:cc:
                    ab:9f:33:15:3d:9d:de:8b:6e:26:64:c6:96:ba:94:
                    04:fc:55:6d:46:70:07:72:46:1c:d1:62:45:87:79:
                    c1:b7:c6:f5:9a:9a:40:1f:9a:86:69:bf:67:93:52:
                    aa:85:84:93:31:9e:e7:5b:8b:ce:09:be:48:7e:3d:
                    d6:09:15:14:9c:d9:f6:74:a8:e3:80:3b:2d:27:89:
                    4c:1c:e4:7e:87:75:de:94:7e:51:9e:63:f9:5d:b4:
                    21:2a:bf:bd:74:f4:c9:e9:7d:2a:87:66:51:c1:8f:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EC:69:DD:67:8E:D3:D4:5B:9D:DE:48:FD:1B:42:3C:61:80:33:7F
            X509v3 Authority Key Identifier:
                keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:00:ce:47:30:e7:99:95:e7:3f:5f:7b:0b:68:31:23:37:18:
         ca:bf:7a:5d:2f:fb:83:51:74:8e:6f:ca:34:7b:14:63:67:ce:
         58:17:1c:bf:f9:9a:4f:8a:25:13:64:1e:98:6c:9b:b8:79:7c:
         d9:9d:47:63:d3:88:07:81:ec:b7:62:4a:23:67:f4:24:0d:f7:
         76:de:68:62:4b:2a:49:01:e7:94:98:21:37:5c:19:12:dc:59:
         8e:be:da:c7:84:97:90:b5:fe:a2:96:bb:e4:b6:d6:cf:97:cc:
         e4:c0:d8:a1:54:b4:43:6b:c6:e1:2c:57:5f:19:c1:a2:5a:40:
         8b:17:13:c0:6d:31:29:11:0a:a1:99:79:31:48:90:a6:a3:28:
         78:a7:6a:2b:81:cd:f8:1c:e1:bd:93:20:f3:40:d9:05:ae:b0:
         4a:80:76:b9:d4:d3:ec:50:53:6d:a3:99:23:98:f1:9a:86:73:
         8d:79:28:b2:f5:a5:c6:16:89:5e:4e:19:c6:d1:20:3e:0d:06:
         eb:43:82:24:4d:d7:b9:c0:7b:93:a1:9f:a4:27:93:50:c5:48:
         64:51:5d:40:47:fb:44:a5:a6:e7:c8:58:02:3c:c8:f5:fe:46:
         31:db:67:37:48:f5:03:30:6d:c7:5f:62:44:0d:28:99:f2:c9:
         e0:7a:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----