Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File:                     1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier:          vK5GXC+bIonPMfzUhAEbI0PcuFCPG8FI9rbyrzXG6hc=
Subject key identifier:   C4:B1:70:63:3B:57:38:7F:E1:12:EE:5D:41:98:BC:7E:7D:E5:51:CD
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer:       /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial:       01962F748E6615B2AA58FC9D59365344153D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number:          0DD9
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: IEJjUbQJiFiRqqFmnfuyXd0hokFJXSSBLA4KG8TNyLY=)
                          2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
                          3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
                          4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8e:66:15:b2:aa:58:fc:9d:59:36:53:44:15:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=c4b170633b57387fe112ee5d4198bc7e7de551cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:75:3b:5b:c7:b8:2d:3f:2d:ed:91:89:8a:f7:
                    20:fd:83:2d:46:6b:4b:08:e9:bf:e2:bf:ea:59:e2:
                    5a:0f:f2:00:fd:22:30:24:9a:8d:88:80:17:43:ef:
                    23:ba:4a:da:87:7d:58:20:22:21:5a:6a:31:20:a8:
                    72:3d:65:d1:7b:fc:28:a9:68:02:10:fe:f3:22:17:
                    af:2e:d3:7e:a5:d9:65:96:46:33:54:97:e3:ee:75:
                    60:92:49:dd:de:6d:3e:8f:cc:43:f9:20:cb:37:6d:
                    cd:74:3a:60:6c:a5:84:c2:9d:31:19:2f:86:aa:ea:
                    9b:78:5a:33:48:6c:ce:f5:27:9a:4a:8f:aa:c0:1b:
                    e4:06:c2:36:99:45:fe:f0:f4:a6:01:d5:6e:82:33:
                    99:15:da:74:64:f7:41:91:3c:79:31:e9:bf:92:02:
                    54:5b:60:b0:e9:95:a1:94:b7:f3:f8:6f:ff:69:bb:
                    56:7b:2b:72:7d:4e:32:7b:c6:4d:78:f5:66:b0:28:
                    fb:23:f3:77:b8:fd:2a:23:a3:f4:d6:f7:68:c7:1b:
                    61:96:9b:cd:49:d3:db:e3:05:b4:3c:4d:f1:33:6a:
                    ec:22:06:35:47:41:06:0b:6a:cd:a6:4a:81:ce:7c:
                    91:3e:ce:9d:4c:f1:9c:aa:25:3b:6d:30:d1:f8:c9:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B1:70:63:3B:57:38:7F:E1:12:EE:5D:41:98:BC:7E:7D:E5:51:CD
            X509v3 Authority Key Identifier:
                keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:c1:47:2a:14:78:38:e9:10:6e:01:f4:ee:4c:69:d0:6b:2e:
         78:3c:a5:98:97:56:71:55:98:5e:63:c1:6a:bd:63:0d:1e:9e:
         16:9b:7d:f6:55:c2:f8:e5:52:eb:bc:e3:f5:1a:fc:2d:1f:87:
         8a:b1:13:cc:e1:45:32:96:81:15:d1:4c:c0:39:7a:31:02:2d:
         b7:36:1a:ab:48:1b:79:e1:64:49:e3:75:e8:85:19:65:f3:13:
         de:a9:5f:3e:d0:af:c6:19:03:2b:e6:59:6e:30:af:97:5c:dd:
         2d:01:c9:2a:69:88:07:42:55:7c:69:93:e0:ac:7e:a6:de:61:
         89:2a:6a:dd:da:cf:7b:5c:c8:41:66:1b:81:c1:6a:f1:7f:6b:
         71:3c:89:8b:5d:91:ec:b9:06:64:c7:8d:a7:0e:4b:c0:51:31:
         db:47:e8:5e:90:f1:01:55:0b:bf:a2:5f:23:6a:5f:fd:36:37:
         01:62:8f:9d:98:e8:7b:6f:4a:38:e3:1f:f4:8f:1d:29:6b:31:
         fe:a8:46:37:2b:14:53:b9:b4:44:61:eb:16:dc:c7:14:bd:4d:
         39:d1:27:88:0f:ce:4d:aa:a0:33:d9:52:5d:75:9b:1f:3e:60:
         ea:14:55:0a:44:a5:7b:80:1a:17:de:b2:08:e3:eb:01:31:e5:
         db:1d:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----