Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
File:                     zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json)
Hash identifier:          nOh1wXm96EWDH/Upe1QauLAzX37DaajVlCoU8M8PtOU=
Subject key identifier:   2A:97:4A:E3:35:EB:07:B7:47:8A:87:1C:81:73:B2:F2:54:B5:9E:D1
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Certificate issuer:       /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial:       01962F3DABB21233F915437612F7F76624BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
Manifest number:          1504
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=)
                          2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=)
                          3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=)
                          4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=)
                          5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=)
                          6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=)
                          7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=)
                          8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=)
                          9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=)
                          10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=)
                          11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=)
                          12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=)
                          13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=)
                          14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=)
                          15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=)
                          16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=)
                          17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=)
                          18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=)
                          19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: C9RzS5B6eP64mHDdnlYBXIgHpdS1nSazXaFYkfcqmk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ab:b2:12:33:f9:15:43:76:12:f7:f7:66:24:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=2a974ae335eb07b7478a871c8173b2f254b59ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:44:c9:91:f2:c0:53:60:41:de:29:c7:fb:
                    de:eb:3c:f5:a2:38:21:0d:23:41:b9:42:89:84:b2:
                    8d:2f:61:de:91:16:11:00:59:67:2a:42:1f:5d:35:
                    ce:2e:0c:61:3c:41:ab:f5:d6:4e:fc:e9:52:ea:8d:
                    1d:32:69:53:d3:63:73:29:7c:da:c9:23:2c:0a:4a:
                    34:23:12:bd:c2:8a:75:a0:30:de:15:42:43:13:ce:
                    95:03:7a:23:12:9e:9b:f1:be:2b:36:30:6f:2d:47:
                    8f:de:e5:5b:75:74:9b:08:03:0f:c6:b1:53:07:66:
                    74:ee:c4:08:31:91:82:37:08:3c:5d:68:c1:fd:0e:
                    84:5f:e7:8a:9a:d2:65:1b:3d:b3:b2:5c:38:28:31:
                    9d:75:85:e4:1c:c7:f8:42:98:5a:7b:b1:df:57:02:
                    c0:72:bf:87:d2:24:b4:c2:39:2e:de:96:e6:82:91:
                    b3:0e:f2:d5:f8:d8:a4:e4:4b:f6:e2:9a:3f:e1:da:
                    e4:7d:b0:b1:63:2e:47:a0:a5:3e:4c:8c:71:d4:b8:
                    52:60:1b:c7:97:c8:d1:fa:69:5c:b4:42:01:2c:f5:
                    6b:4b:0a:1c:24:be:17:77:48:a8:64:27:9c:4b:f8:
                    03:ae:46:f0:1b:2e:f2:16:9a:61:8d:23:ec:ac:5b:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:97:4A:E3:35:EB:07:B7:47:8A:87:1C:81:73:B2:F2:54:B5:9E:D1
            X509v3 Authority Key Identifier:
                keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:23:36:51:ab:52:53:95:70:37:01:00:85:e3:fb:72:51:2c:
         b7:63:ea:32:c9:78:8b:cc:e7:ef:13:43:d9:ba:db:4d:43:46:
         f0:d6:9a:59:f8:83:e9:d2:c8:fd:ef:76:9d:de:df:1e:a7:b1:
         51:bb:f4:ea:ae:1a:a7:cd:4f:62:0e:7b:5a:91:76:12:77:cc:
         11:1e:88:5b:1c:14:3f:6f:be:e8:f8:be:35:1a:bb:4f:cb:31:
         71:bb:53:fd:75:0a:62:48:0a:7e:a3:92:dc:66:04:29:70:f5:
         ea:5c:a3:55:93:16:43:e8:63:00:0f:a1:74:bf:04:d9:f6:24:
         65:9c:e6:f6:09:8c:1b:6c:88:9a:e1:9e:11:5c:48:d2:54:84:
         8e:75:f7:d6:24:fe:50:58:8d:ff:62:a6:20:fb:28:15:5b:73:
         4f:4b:74:10:01:07:f8:3a:ad:8a:26:a7:d5:a7:c0:b4:31:40:
         8f:a6:63:39:b9:bc:91:2d:b5:d1:01:c3:12:72:4b:79:ae:c9:
         59:bd:c4:e2:ef:eb:76:cd:06:dd:52:0c:1c:8b:70:87:f7:85:
         b2:4c:23:f0:24:09:35:90:fe:30:46:38:72:cb:16:62:12:d7:
         8d:00:d5:86:a6:90:db:e6:cc:95:39:9d:0d:37:5f:87:4d:ca:
         18:b2:8b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----