Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
File:                     9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft (raw, json)
Hash identifier:          BNi84GYDFR1dcXoseUHfqGadX5LoZFUEm3aQopg+7Z0=
Subject key identifier:   3A:48:F9:D1:1E:95:6A:C3:18:BB:89:90:05:73:DC:0A:B2:FD:BC:CB
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Certificate issuer:       /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial:       01962F74298397EC039BA0657C90EAC41791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
Manifest number:          1445
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: 949NJzEdExJn5XO-wPE1DtJv8g4.roa (hash: msLuXe7ObxuPncz+MW/EtdRT5Yp9BkwdtqMj7DLIE3w=)
                          2: 9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl (hash: 9m8U1Lx7C+u7CULxJtVg5E9vhRqNQkmJBj/OoQCmUQw=)
                          3: SgIFzdX6JcgyEvIi1tU7tEpqzs0.roa (hash: p6RL3L68zCciLtwZlC4lGEQ9Tf1FF1+MJetEEftOp98=)
                          4: WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa (hash: IM898uPAV6VmuESMyy3MG48B0cB42EspCAHOuXpg7Io=)
                          5: wcQI0N2rjHU7nz4Hv4-6dzygAdo.roa (hash: Fm3HUvHW0IncmGHh7snGXOSS7m758QU/6otLVSlOO+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:29:83:97:ec:03:9b:a0:65:7c:90:ea:c4:17:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=3a48f9d11e956ac318bb89900573dc0ab2fdbccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:97:21:03:63:e3:f7:80:e7:24:e7:48:70:
                    14:b7:36:22:81:0a:a1:d0:2a:2e:cc:fa:e4:93:89:
                    00:81:13:4b:13:7c:60:8c:60:60:2a:17:af:1a:02:
                    b7:89:ef:bd:af:0d:ea:99:f0:5e:08:77:2c:13:a9:
                    71:9f:57:f5:55:2c:38:1a:b6:9b:e2:13:74:90:d1:
                    2f:75:ee:af:49:36:18:bf:66:52:aa:42:72:28:ed:
                    7b:c9:93:99:c7:ed:ff:93:ce:0c:54:a9:59:3a:e5:
                    93:52:c9:9b:ae:ae:71:b2:2a:28:cc:d1:80:c9:ab:
                    8b:19:4b:89:e9:68:4d:12:39:ca:5b:d2:1d:bd:41:
                    15:e3:8f:9b:a6:e8:be:7a:05:0d:6a:64:c7:90:e4:
                    aa:7b:57:36:64:54:ae:b3:58:19:5d:8b:23:11:c8:
                    38:94:d3:5b:10:43:07:10:be:1a:55:01:59:12:56:
                    a1:21:fc:21:11:3b:c6:5e:2f:60:9f:5e:45:fe:bc:
                    fa:fe:6d:6c:4b:cc:87:10:5e:f5:d0:61:10:4a:5c:
                    d4:ea:db:d7:8d:7b:ed:92:26:6d:71:5a:09:51:9b:
                    7c:de:85:7c:20:57:69:f4:24:92:80:49:1e:07:fa:
                    0d:98:c5:6a:e3:64:1f:d8:bf:24:32:83:0b:f4:29:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:F9:D1:1E:95:6A:C3:18:BB:89:90:05:73:DC:0A:B2:FD:BC:CB
            X509v3 Authority Key Identifier:
                keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:05:85:07:f5:a9:3e:5b:ae:65:d6:7e:8c:c3:3a:6e:87:a6:
         08:d1:93:ca:65:51:35:bf:d9:96:ed:b2:b4:ab:d7:97:af:fa:
         05:48:93:98:04:ab:0e:18:74:45:e6:b8:68:ab:1a:54:6b:e1:
         9f:65:d8:38:6f:5b:1f:98:f8:34:6d:51:54:60:c1:ae:82:ea:
         88:ad:cd:d1:cb:e0:5d:a4:de:e6:c3:ef:bc:f4:58:3f:1f:c0:
         1e:38:5b:da:d6:79:bc:ef:4c:28:be:9a:94:c7:5f:36:53:03:
         f9:c0:e4:35:31:28:d1:0d:6c:d7:11:e4:56:c0:73:92:b6:5f:
         b6:e9:b7:ba:08:c9:71:8d:75:d2:f0:71:b7:6d:12:4d:f3:41:
         b7:bb:05:5e:26:74:c7:d7:54:8a:ab:09:df:e9:b0:f4:2c:e7:
         21:ff:25:29:f3:65:7f:9b:91:34:cd:c2:53:98:db:97:6b:b1:
         e9:b5:95:7f:65:2d:1c:c9:67:ca:6c:c9:1d:3c:c1:15:6a:08:
         9e:08:e4:87:80:c0:37:42:8a:1c:17:3a:37:87:67:1d:2e:88:
         69:ac:d8:8b:31:27:c2:43:87:be:63:23:44:1b:c5:64:cf:55:
         5e:49:39:c5:e8:de:23:06:9b:98:f7:52:56:cc:9e:29:55:4b:
         db:e9:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----