Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
File:                     pLZdoXU_tO7tuG_ah906-mnYYtA.mft (raw, json)
Hash identifier:          cRkTcQ7rgmHUi99u6UWqgtL/Di+EHLFUKQH6x8D55uQ=
Subject key identifier:   29:5C:94:F0:CA:94:E2:8B:56:51:E8:B1:D8:F0:C0:28:19:F5:9E:24
Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
Certificate issuer:       /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Certificate serial:       01962E61E21A45D335810229E919C3D86625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
Manifest number:          0864
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa (hash: wQrCWKGL3Sn9wGoFnk6i9VJ1UdYXoGTZv1+i2lw0LfY=)
                          2: pLZdoXU_tO7tuG_ah906-mnYYtA.crl (hash: 8c7i5ojZMQDC+Y2GMzEwE4Hv9+24EkdQUEtdGj2d9KU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e2:1a:45:d3:35:81:02:29:e9:19:c3:d8:66:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=295c94f0ca94e28b5651e8b1d8f0c02819f59e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:60:e2:4d:8c:45:0f:96:98:19:e7:72:40:cc:
                    9c:3e:09:d3:5f:37:f8:3d:f3:54:80:28:27:0b:ac:
                    35:4b:e5:6b:d0:69:b0:64:da:d3:41:75:e5:5b:14:
                    df:64:af:ee:b9:b6:b3:fd:59:4c:78:21:ea:89:a5:
                    2f:b0:24:c6:4a:b1:95:14:da:e4:8e:63:37:93:9d:
                    83:c0:c3:6f:8a:11:24:c4:88:52:42:a9:c1:40:cd:
                    65:6b:a9:ec:89:34:b2:18:bd:86:ad:18:68:12:9d:
                    48:d1:2c:1a:01:6c:24:67:72:00:87:72:37:86:57:
                    c3:75:4d:01:01:5e:8d:00:df:33:2b:9f:32:5e:cf:
                    8c:46:16:f8:8f:e6:72:00:31:b0:91:6e:30:f4:8d:
                    ae:b4:89:16:c7:1a:dd:2e:f8:9d:69:19:85:ed:b0:
                    07:69:da:90:47:78:40:fe:67:f4:46:ce:97:bb:f0:
                    dc:34:c4:15:b2:4f:92:14:ca:f1:b9:39:3b:64:62:
                    ad:fc:66:c4:ad:d1:6c:bb:98:43:c3:9e:e4:e1:18:
                    21:04:0e:55:e6:52:3a:63:98:8e:0e:ae:55:b3:f9:
                    88:e2:94:24:34:d2:5a:e0:1b:e0:97:f6:20:0d:9d:
                    eb:6d:0d:19:48:00:eb:bc:39:f4:9e:b1:46:74:44:
                    4f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:94:F0:CA:94:E2:8B:56:51:E8:B1:D8:F0:C0:28:19:F5:9E:24
            X509v3 Authority Key Identifier:
                keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7f:00:38:82:b0:46:27:34:bb:2b:87:f1:7b:a7:f7:0a:b0:
         17:0f:cb:a9:33:37:7f:b7:0b:5b:07:74:d0:37:71:e8:d8:d9:
         ed:98:f6:2d:3a:ce:a5:4c:c9:68:71:f3:d0:45:75:c8:e1:01:
         51:0f:45:f5:37:b4:b0:c0:56:8b:47:79:3d:b6:ec:0d:c1:b1:
         47:41:d4:b5:c2:6a:0c:00:f3:4b:9f:73:1e:21:7d:08:61:36:
         63:d5:24:65:0d:fe:87:ff:fa:80:7e:e3:9f:ae:e2:c2:fc:63:
         b6:4a:7f:5b:03:8c:d1:ee:de:c1:00:cf:90:59:81:55:b6:0c:
         f0:f6:f5:3b:78:de:80:66:b9:8c:44:37:f0:f3:34:37:35:06:
         22:08:19:46:24:88:29:cc:a1:aa:56:22:e0:02:f1:05:2b:6d:
         90:6c:62:19:1a:c2:f6:d1:8a:4f:91:7e:e1:5d:59:e3:af:a8:
         52:7d:f1:ce:cc:42:38:b8:06:a0:6a:27:61:33:72:a8:3a:3f:
         7d:11:1f:ca:f0:07:98:56:a0:b8:c3:76:88:db:77:2c:ed:d7:
         1e:66:4c:26:c3:de:a8:f2:d6:e6:d8:36:b6:4e:d0:82:27:31:
         e0:c4:cb:fa:aa:6a:4b:87:38:51:ed:72:39:5c:22:f5:d1:c1:
         eb:56:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----