Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File:                     z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier:          B/tqp7riF9yLuxIWBnBd4EvgoV6FTR0S52aG3X77QVg=
Subject key identifier:   B2:3D:71:5D:27:4A:B8:BB:9F:4E:31:84:61:2A:ED:4D:49:AE:39:53
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer:       /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial:       01962FAB795154416D5383E4DA90B8B93906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
                          2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: gUmp8M3QfsGe7XQm9TSSNVvgNmvFAIDYgh0qYs1vNp4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:79:51:54:41:6d:53:83:e4:da:90:b8:b9:39:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=b23d715d274ab8bb9f4e3184612aed4d49ae3953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:66:ab:d1:48:d9:6d:ba:72:ce:55:21:0c:
                    67:31:44:f6:12:f3:d8:f9:7d:28:93:38:e5:6b:a9:
                    ee:ed:28:d9:53:81:a0:d9:6e:99:41:ad:6c:85:a0:
                    d5:ac:17:95:f7:1e:34:81:3b:46:a2:c9:0d:e9:5e:
                    5b:a7:85:4c:c1:33:be:fb:2d:82:9a:82:68:88:e0:
                    2c:fe:0d:05:28:7e:ba:1b:2d:88:ec:f2:8c:b0:77:
                    06:9c:38:6c:cd:bc:4e:79:7a:56:ba:d6:14:56:81:
                    7f:b1:c8:b9:86:36:aa:b0:2f:b5:fe:11:94:81:2c:
                    7a:f1:13:7e:5f:14:bc:4e:f1:4d:4a:b3:3e:09:03:
                    71:cb:3e:11:02:3a:96:c2:8f:33:91:ad:e1:75:ea:
                    7c:fd:53:e6:94:1f:02:9a:29:da:d8:69:d1:f8:50:
                    fb:3e:2d:d7:32:81:c2:5e:30:cd:e4:df:3f:28:47:
                    47:13:fc:4f:cc:27:81:3f:df:7f:1a:f1:1e:ad:cb:
                    2b:55:33:be:03:61:0b:6d:42:3b:30:a8:58:6c:6a:
                    3d:a5:a3:72:04:e1:22:0c:bd:8f:2c:40:68:f4:08:
                    83:21:5b:f2:c5:3b:73:78:3e:74:33:2c:a3:cc:d7:
                    17:00:dc:d5:f5:33:f2:b0:3e:8e:49:87:5e:90:a0:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3D:71:5D:27:4A:B8:BB:9F:4E:31:84:61:2A:ED:4D:49:AE:39:53
            X509v3 Authority Key Identifier:
                keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c0:c5:da:c6:0d:19:c3:d1:e6:60:2b:d0:07:04:b0:35:fa:
         e5:9a:29:3b:55:64:db:1b:9e:58:b5:8d:0d:d2:3c:87:83:48:
         fc:17:3d:54:99:8d:d7:a2:00:5b:93:ac:00:64:77:1f:0e:92:
         0d:96:55:76:b0:38:ec:30:cf:29:f3:6c:f0:dd:5c:8d:86:99:
         d8:55:01:f0:3c:3d:e6:6b:82:0a:e1:ef:8c:c5:41:2a:10:62:
         c6:6b:36:af:d1:c9:94:ab:ae:86:46:5a:08:18:22:be:70:80:
         a2:93:17:3c:a0:88:94:17:33:68:c2:75:f7:24:dd:47:b1:44:
         cc:13:5d:ce:35:ca:00:40:0d:e5:7b:5a:b1:78:9e:41:f1:6d:
         8a:20:fb:57:e0:8e:05:13:bb:a7:b0:c4:2a:44:3a:6b:aa:65:
         91:e7:af:1a:5f:34:98:f2:71:ad:22:49:1b:d6:0f:a1:ed:fe:
         56:19:04:cd:27:fa:01:5e:1a:7b:f7:80:69:61:ad:5e:1d:af:
         c4:ec:b5:5b:6c:b2:8d:41:82:89:f2:35:94:9a:02:d6:7e:44:
         11:70:8a:f8:7e:90:81:5e:d9:fd:ad:a9:34:d3:22:50:13:02:
         e8:22:78:48:71:e7:5c:4d:32:96:14:12:6c:8f:f6:e5:a6:83:
         49:22:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----