Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File:                     zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier:          SeoysiA2qlIsDjdBi5ynVwWePnT5eK3XLZizoSjYAjw=
Subject key identifier:   8F:55:47:99:96:75:A3:0E:13:FC:7C:B8:59:B7:D7:20:2C:72:87:9D
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer:       /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial:       01962DF3C66E2E7BB088F1F9B04E2E55D02C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number:          0F52
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: f5XMhdDv4boUrAlP04hly_uT_DY.roa (hash: eL7YWqbohX8ob6HoNr2HS/CxgsCuHhS0bMMR1aWHqbs=)
                          2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: WWZILgPh8dm8gWeANItguTQg3XZZLPEdCXsDIk40gkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c6:6e:2e:7b:b0:88:f1:f9:b0:4e:2e:55:d0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=8f5547999675a30e13fc7cb859b7d7202c72879d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8b:88:33:25:47:d9:fc:7f:36:ac:c9:f1:5c:
                    0a:ab:8f:1e:19:9e:5c:24:0c:b7:ad:0e:ce:14:bc:
                    76:78:45:2d:a6:5b:62:dc:18:7e:79:3e:a7:f6:27:
                    77:79:29:f8:05:7b:bc:46:3b:ec:a6:a2:4b:3f:86:
                    ca:17:2c:1e:33:3c:5b:03:a2:ec:7a:3b:aa:45:80:
                    7e:36:9c:c7:3a:73:15:ac:26:15:14:66:1a:2b:59:
                    60:63:78:eb:2f:c1:6b:23:88:2d:8f:94:f7:af:27:
                    a2:ae:48:72:dc:22:18:8c:2b:c3:a8:ac:d1:30:51:
                    d0:39:81:9f:fa:6f:31:47:a4:2f:4e:b3:9e:08:3d:
                    bf:00:3a:c6:d6:6d:af:1b:77:b9:84:c1:1d:fa:88:
                    1b:af:88:c1:45:47:8c:fc:78:6f:be:5f:87:27:a1:
                    90:c7:54:78:57:29:10:4a:a2:76:e7:d8:f2:5f:cd:
                    32:a2:82:6b:fb:90:1b:8d:37:2f:c6:a6:5b:3e:c8:
                    79:f4:30:04:d2:2a:6c:a2:f3:55:9a:81:ac:66:16:
                    77:28:b5:b4:44:28:b2:ae:1a:af:a3:03:80:e9:38:
                    c0:87:bc:7c:70:98:d8:2c:e2:21:dd:84:33:55:ea:
                    f5:ce:9d:fc:12:f7:5e:f9:ad:31:81:70:65:01:35:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:55:47:99:96:75:A3:0E:13:FC:7C:B8:59:B7:D7:20:2C:72:87:9D
            X509v3 Authority Key Identifier:
                keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:13:22:ca:39:11:ec:5c:d3:e1:04:9c:f7:97:69:95:a7:68:
         d0:33:c6:b6:ca:87:5f:1d:09:57:45:27:71:58:3c:b3:1f:33:
         11:d8:ed:24:d6:56:dd:80:e5:be:94:2f:1c:46:06:d7:91:95:
         af:b5:0e:92:45:7c:87:0f:5a:6a:ee:8e:4d:12:56:ed:7b:80:
         53:ca:fc:84:3b:b9:dc:7c:65:7e:8d:75:3b:d9:5d:9a:d8:30:
         27:4d:7e:49:a5:57:1f:af:51:bd:2b:3c:4e:8f:7d:07:a3:26:
         72:37:99:42:b7:21:26:c5:65:40:e9:24:8a:fb:09:1f:e5:9e:
         f8:63:e8:e2:2d:77:a2:d2:d2:48:23:bc:df:05:eb:d7:4e:c0:
         f7:94:07:39:62:d4:7e:86:c0:41:ce:cd:b3:64:e8:12:08:59:
         e5:3e:ad:8a:60:00:3e:4a:a6:be:4f:5b:c1:4e:6d:c8:24:e8:
         57:21:8a:78:f6:08:ca:cb:2a:78:07:5d:c6:03:e4:7d:36:b3:
         63:63:d1:3a:94:93:f0:66:d2:9d:00:5c:18:2a:60:74:01:32:
         87:3f:95:51:e1:89:4a:dc:d9:3f:c9:80:ab:3c:24:66:9d:ac:
         fc:fb:9d:ff:ca:bb:80:04:30:f4:aa:e3:df:7e:6b:0b:da:5f:
         c1:09:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----