Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
File:                     zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json)
Hash identifier:          ANorlP++Ayw2yN4y+T1ne12CAzph2lV+pEWdidMZnqs=
Subject key identifier:   8E:AA:19:E1:91:22:F0:8B:6C:73:55:97:15:1B:D7:91:99:9B:27:18
Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
Certificate issuer:       /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Certificate serial:       01962ECFD5881DF04D6EB164339909DEF618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
Manifest number:          0A86
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 0_tGmdVdpjc2L8zUWyzyW9iPObU.roa (hash: bn84kxibGx4/EOPh2OY0dkRz9RK07gMRfVN7WrprjOg=)
                          2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: d64+NqOaL+S+0+F6FYPJvV+IyAgpYNhEEx2o9icVnTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d5:88:1d:f0:4d:6e:b1:64:33:99:09:de:f6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=8eaa19e19122f08b6c735597151bd791999b2718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:7a:48:d1:9a:1f:5b:eb:17:bf:4c:eb:fc:
                    ff:01:c7:50:c6:82:ce:cd:2b:64:3e:24:2f:e4:10:
                    2f:5a:d7:2b:f4:71:d9:53:c1:09:af:c5:de:ee:69:
                    94:11:df:0b:08:65:46:25:ba:8b:c6:b7:27:68:75:
                    cb:51:db:bc:11:c1:7e:df:cd:89:d0:19:a0:0d:66:
                    e4:40:6b:3c:41:7b:1e:2c:b9:d3:5d:38:03:fc:cb:
                    ea:48:41:bf:b7:48:ee:c6:6f:fa:bd:93:6a:fa:d4:
                    7e:62:18:86:fe:17:d0:60:f5:d4:e0:69:ef:20:ae:
                    84:dc:9e:b2:2f:85:4a:b6:06:0b:5a:0c:19:10:30:
                    82:14:ee:4b:c5:3f:5c:23:45:e8:7b:7f:ab:37:69:
                    95:98:e8:d6:c5:76:9e:30:8a:c1:76:95:2a:1b:68:
                    c4:47:b6:a5:96:c7:8d:b5:5f:af:c9:f0:53:05:a0:
                    b3:27:b9:60:76:5d:5c:3d:3e:05:83:0d:6a:c9:1c:
                    2c:24:db:c6:5f:c8:c0:f2:77:50:e1:25:1a:26:ce:
                    2e:ca:50:2f:b4:63:3f:a4:2f:4b:eb:4a:1c:d0:75:
                    ee:b4:9d:4a:3a:66:1d:40:d1:c1:ea:0d:4d:ad:49:
                    4a:fa:22:91:3d:d7:2f:e2:e2:53:f3:bd:80:f2:3d:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AA:19:E1:91:22:F0:8B:6C:73:55:97:15:1B:D7:91:99:9B:27:18
            X509v3 Authority Key Identifier:
                keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:07:6d:39:56:93:07:e3:62:3d:1a:fb:07:4c:5a:6e:7d:21:
         82:f5:91:04:ae:cb:8b:33:e5:08:fd:71:08:aa:02:cd:d7:a8:
         36:75:db:03:f6:8c:6b:cc:07:34:56:ed:88:cd:a1:6a:c2:5e:
         5a:d8:54:36:b8:70:02:28:7e:09:47:8b:07:79:e9:e4:ac:83:
         bd:88:31:82:e6:56:43:28:84:ce:25:4f:bd:e9:1f:0b:ba:c5:
         09:f3:58:44:c9:8a:71:aa:2a:51:ce:ce:d1:8d:b1:df:d5:6c:
         28:b2:51:30:52:b1:dd:8d:78:b7:f7:aa:21:42:e1:13:b2:3b:
         ab:bd:47:e2:d2:17:18:1a:36:14:01:67:16:b3:c1:ba:84:69:
         45:5d:fd:c8:cb:c4:0f:c7:3c:9e:d6:bc:c4:22:e2:29:b9:dc:
         d4:01:c1:29:cd:83:a6:40:0e:ab:90:16:7c:be:df:f7:40:99:
         b8:a8:48:a6:54:92:18:cd:68:05:fa:10:92:40:69:9b:f6:e0:
         29:0b:54:b6:50:91:3e:fd:94:16:4c:64:4e:c3:e0:9a:6e:8f:
         01:88:8d:6e:8a:40:d6:64:a8:41:a7:ad:41:bc:48:2b:d5:94:
         0e:53:39:89:5d:7c:f4:0e:8b:cc:d3:56:2a:96:d3:5d:65:30:
         bb:28:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----