Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
File:                     zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json)
Hash identifier:          3kBe3ZpTrSQ7Oai0cCHst2s/aRqC44myaeNcJRIg3+I=
Subject key identifier:   45:39:7A:AC:5E:D5:7D:82:3E:AD:E2:4A:88:CC:97:C9:83:43:03:7D
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Certificate issuer:       /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial:       01962F74280AC71767659B5F03A8C5669059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
Manifest number:          1228
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: EpL6n7YsTJUyCIMDB2XXj1UETF0.roa (hash: 0aITT3j5lY16SRph4DUvA4Lnw1Z/zDWpJihg1Nz305o=)
                          2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: YXUcgBwBLB9oSQ36Vnf1ylJocHpZFR2pxZovWQCC2Rc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:28:0a:c7:17:67:65:9b:5f:03:a8:c5:66:90:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=45397aac5ed57d823eade24a88cc97c98343037d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:15:3a:36:ee:14:9f:d6:81:96:fb:31:0d:
                    64:ca:08:0c:e7:49:2e:ab:43:b2:cf:05:59:7d:d1:
                    b1:7a:aa:a1:30:d8:31:7d:22:e7:4f:ab:a1:8b:35:
                    6e:b7:24:95:12:37:7d:d6:e0:26:77:63:c3:a3:04:
                    71:d3:c2:00:98:0c:ea:3f:00:01:81:e1:ed:6e:99:
                    16:99:2c:18:f3:3c:a7:3b:b1:20:df:e9:7c:a6:dd:
                    06:f3:6e:85:a9:f3:05:77:4a:1b:05:bc:e7:05:92:
                    77:53:90:f6:a3:60:44:a9:c3:cd:36:b3:74:d5:a2:
                    b1:d3:48:27:16:fb:44:3f:74:20:f7:b0:ae:01:6c:
                    97:4a:b4:07:9a:52:ef:b3:c5:ac:b1:56:40:08:a5:
                    11:35:20:51:ba:6d:fc:d5:48:2c:10:35:32:79:83:
                    d1:f5:92:60:ac:7d:82:7f:ce:bc:63:4c:50:25:f3:
                    5b:ac:22:8e:32:82:8b:ce:65:a4:fc:af:ab:0b:3e:
                    d2:e8:3b:89:d5:bc:7e:3e:c0:d8:18:4d:10:07:ef:
                    f2:a5:1c:7b:a6:4e:87:f7:26:9c:0d:37:b7:fa:13:
                    a5:79:5b:a5:37:59:a7:6d:31:37:ee:f8:af:f1:13:
                    61:1d:e6:3a:91:cf:73:37:ee:8e:9d:28:40:5b:f1:
                    ff:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:39:7A:AC:5E:D5:7D:82:3E:AD:E2:4A:88:CC:97:C9:83:43:03:7D
            X509v3 Authority Key Identifier:
                keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4b:9e:39:e9:26:17:25:66:01:26:33:58:ab:60:71:37:fc:
         3b:57:ba:d3:4f:3b:a5:25:89:7d:08:27:30:f7:fa:c7:15:ba:
         21:3c:cc:cf:50:3c:b8:7e:0c:60:38:71:d3:5e:3d:ed:d9:b9:
         26:97:f1:66:d3:88:85:4c:19:65:f5:be:50:d8:66:7d:04:f6:
         21:d5:e2:65:be:1c:70:b2:0d:0c:71:29:53:6d:e4:b0:22:fd:
         89:f0:c7:ca:85:e0:aa:c6:89:62:db:8a:10:c5:36:ce:e8:23:
         03:07:6f:92:30:88:f6:a7:e9:da:5e:47:bc:b3:5b:ad:4d:77:
         63:a8:d9:1b:a9:43:6c:b6:4f:63:a5:6d:77:cd:a3:dc:b4:4c:
         86:11:d6:d3:ad:10:88:b6:ea:6f:32:74:65:f8:aa:a0:df:57:
         84:99:89:90:09:a5:d6:f4:da:98:c8:a7:44:a0:ce:fd:b9:88:
         6c:c2:e1:11:b7:67:bb:64:61:1f:96:c6:5e:f2:91:df:8e:12:
         96:ba:3e:e1:d9:3f:d3:25:9a:b1:14:09:66:38:56:09:a8:79:
         a5:df:5d:30:2d:99:6b:c0:31:1f:ea:0a:2d:f9:a1:4b:da:ef:
         6a:48:0c:08:3d:47:74:e4:34:d3:88:d0:8f:40:9d:dd:af:9e:
         35:ae:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----