Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
File:                     mZKB6H1em4dY8kDnju9xAsQBIYk.mft (raw, json)
Hash identifier:          lUxwEpG9XXQwr1BGO4FTH9g3E6K6+ksmqc8hJ5aBtfs=
Subject key identifier:   AD:74:D9:93:03:A2:B8:27:F7:35:1F:FE:2E:2A:50:D6:A5:E8:BE:4B
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Certificate issuer:       /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial:       01962E61D935CF7E25F81A06D2CD65988129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: PF8Dfwpieuc3szZWNlM6zxbOCaw.roa (hash: eEI5JJg+vshmiZesKoh8QcSvz/GrsPF5AtTzxYWQZk4=)
                          2: mZKB6H1em4dY8kDnju9xAsQBIYk.crl (hash: 85bnFuZn5GhBWlLCp1d3/SbqXqxZS6vfH12/vFhugTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d9:35:cf:7e:25:f8:1a:06:d2:cd:65:98:81:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=ad74d99303a2b827f7351ffe2e2a50d6a5e8be4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:98:b1:33:c7:a8:21:ed:2c:64:4a:de:e0:
                    b0:87:11:61:58:95:26:76:c4:44:6e:10:1a:9f:94:
                    35:83:13:44:5e:9d:f5:3d:25:d7:e5:4c:b0:1b:2d:
                    dd:01:69:8f:b2:4a:c0:5f:3c:df:e1:be:10:1a:3d:
                    f6:93:23:d5:ae:c8:34:6f:f5:a6:e2:db:dd:44:a2:
                    c1:77:b3:d1:8b:0e:40:9f:e3:d7:5a:f2:a3:c9:b1:
                    fc:3f:36:a7:39:5b:ab:a1:7c:b4:04:fb:93:54:85:
                    d7:b4:95:90:54:18:6d:c0:f6:08:22:a5:eb:32:91:
                    ca:b7:24:2b:7b:79:74:ac:61:00:f7:80:f9:be:3f:
                    3a:9c:e1:80:cc:33:50:4e:9c:bf:01:8d:a2:00:68:
                    4a:cb:48:11:fb:f3:ce:ad:e4:ca:48:71:f2:2a:8a:
                    f4:12:ae:91:dc:e0:fb:47:7a:27:0a:5c:d5:df:73:
                    13:d1:d8:d7:2f:0f:20:aa:f0:78:c9:c2:e4:86:f3:
                    cc:af:54:70:11:27:14:ec:8a:c6:e8:cf:70:39:ef:
                    df:20:4f:63:3b:61:5a:aa:86:91:d7:4e:25:5d:f7:
                    af:10:59:16:34:ab:42:c5:19:29:76:98:65:0c:92:
                    d1:09:78:d7:2f:80:03:89:13:d9:fd:ff:c2:78:24:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:D9:93:03:A2:B8:27:F7:35:1F:FE:2E:2A:50:D6:A5:E8:BE:4B
            X509v3 Authority Key Identifier:
                keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:cc:f6:5b:d1:01:d2:5b:6b:00:ae:45:87:7d:34:2a:c7:fe:
         9e:cd:07:8f:e2:d2:12:be:a0:7d:4b:f0:97:cc:b8:ab:42:9a:
         9e:c7:57:77:02:31:2c:b2:69:61:53:89:93:f3:48:16:33:33:
         66:f9:2e:85:20:7a:2f:ff:08:5b:c8:76:6f:7b:14:af:c7:a0:
         da:00:b6:f2:e7:b5:3f:44:61:78:99:a9:b5:96:c0:31:30:d2:
         22:01:b8:99:0e:ba:9d:08:77:50:6d:52:12:cc:6f:91:2d:ff:
         7b:8a:55:aa:50:a0:cc:e8:75:43:ca:a7:e3:2a:cc:b8:ba:94:
         ce:33:6d:fc:09:48:a5:ca:20:ae:b6:45:83:01:b5:7b:90:77:
         eb:87:89:1a:c1:03:4a:49:39:6b:46:3b:82:5b:52:f4:b4:9b:
         b2:48:aa:0f:fa:ff:48:8a:32:e4:d7:ff:93:b9:6a:63:57:1c:
         97:e7:0d:03:84:ee:eb:df:88:5f:3c:26:65:0f:8f:f8:a2:ae:
         8e:52:d5:9b:bc:a0:d6:74:38:fb:94:69:c7:22:41:21:59:65:
         bf:f8:be:31:b4:22:ed:39:e8:9f:b6:c8:b2:67:0f:f8:e6:87:
         45:b6:9c:3d:58:3b:65:f2:75:13:99:30:d8:04:61:06:61:9c:
         18:ee:de:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----