Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File:                     _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier:          VLETudWIJy9g0ld9jwuTa7rhK+VAEk9ybHRLUJ+AY+U=
Subject key identifier:   DE:3E:F9:4A:E0:98:C6:90:FF:CE:84:88:E5:36:32:29:F0:39:AA:6E
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer:       /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial:       01962F3DB5FD74E47EF0934B6191743EEFA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number:          02D9
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: sKKojjP4gUVeO3nZlf6n9g9dMenDS5Rewarz7S+7u2E=)
                          2: eq5Eim9KBsmi3XU8htjV8anK_NE.roa (hash: EyydfpDXeHT6D2quI197b3wlG8U+XsJ23kRkj7BvaNU=)
                          3: zn5C8fAocAiuB2ZE1nzAyisylHk.roa (hash: AAikGT90Pn2msY679R7PQpNXsSFlO6fo1qsXsGW4c7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b5:fd:74:e4:7e:f0:93:4b:61:91:74:3e:ef:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=de3ef94ae098c690ffce8488e5363229f039aa6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a4:41:26:4a:98:c8:a9:d0:7a:36:5f:ac:09:
                    3d:78:51:f4:51:9f:c9:64:b4:eb:ac:b3:01:29:7c:
                    8a:f9:d1:aa:19:8d:cb:fb:d3:7d:3e:2e:1f:5b:bc:
                    32:7b:c7:7c:37:33:d5:3a:5b:9f:40:44:00:ed:78:
                    df:39:59:d3:d8:65:5b:96:cf:bf:d9:c5:f4:df:06:
                    a8:74:34:a6:13:1f:35:64:e1:f1:d3:3e:9f:ee:e9:
                    90:d7:f3:e3:3a:e6:c4:9a:84:ed:37:f6:c5:38:6b:
                    39:4a:7c:92:e8:70:77:29:32:0e:21:dd:e9:9a:7b:
                    9d:4d:b6:da:d3:86:ef:fe:de:41:f1:61:8a:87:ca:
                    da:c2:3f:26:d8:2f:05:c0:31:c5:3d:5b:6b:0a:29:
                    c6:3f:43:bf:13:a0:2c:f4:aa:13:57:f0:6f:f3:3a:
                    ed:c8:9d:36:e9:2c:36:23:6d:5c:3d:79:12:dd:39:
                    14:73:44:e0:bc:ca:20:aa:43:bb:2c:ff:2e:33:e8:
                    bc:28:83:68:3c:d9:fe:c0:fe:f2:a2:72:68:42:49:
                    36:75:6f:2d:9c:07:c8:5e:ba:a0:97:9f:df:94:4e:
                    d5:95:2a:b0:58:70:d0:5c:8a:2d:85:59:2b:fd:ed:
                    07:71:93:4b:31:25:ca:e8:1b:2e:90:b7:6d:0e:9d:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3E:F9:4A:E0:98:C6:90:FF:CE:84:88:E5:36:32:29:F0:39:AA:6E
            X509v3 Authority Key Identifier:
                keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7b:ba:72:85:23:c9:f1:0d:6e:61:0b:f4:e8:db:f3:aa:1c:
         c3:9a:18:a1:0e:42:10:e3:09:11:0e:72:9d:52:ac:0b:c7:17:
         30:aa:0c:01:3d:c7:36:0d:66:b1:b8:9c:91:32:dd:dc:5e:7b:
         cc:46:83:de:ed:8e:14:10:bf:1d:d6:7e:33:91:78:9f:cd:52:
         38:89:92:28:26:68:14:e8:61:a1:97:26:59:d0:30:c9:ab:dd:
         a6:15:7d:f9:6b:8f:54:a5:f6:d6:df:c4:fd:4b:dd:3f:2c:af:
         ae:0e:4e:ce:38:b0:e9:ea:ca:70:ea:66:31:d4:b9:14:42:88:
         56:d3:82:4b:18:7a:ea:e1:ec:56:d7:aa:73:31:84:8a:e3:2d:
         0c:38:d7:68:25:76:ce:1a:f2:7d:09:4f:a2:7c:3b:4c:d4:59:
         52:2e:76:8f:0a:32:de:97:58:55:d0:c5:b0:d4:b2:ce:00:79:
         e2:e4:00:9e:66:e1:b4:3f:b3:9f:7a:a5:23:9c:8e:00:50:32:
         16:c4:b1:35:64:71:44:2c:33:f8:d4:8a:7e:4a:40:52:5c:e6:
         6c:1b:5b:3a:15:41:c5:e5:d2:90:c5:d6:2c:ab:e0:40:b9:c6:
         e9:cd:a6:7d:34:b9:48:56:7c:b8:b5:ab:d9:06:30:b9:23:2a:
         ad:d7:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----