Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File:                     zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier:          cVQIrSxh+FrsPMdwnuMzSK+he5gbtlsXggSFHCcSDKg=
Subject key identifier:   79:87:F8:A5:C2:09:C4:02:E3:43:3E:FC:C0:C5:A7:60:0D:9F:F0:47
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer:       /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial:       01962E617A61E9CCD0AC76968D56F7BDF28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number:          04A2
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
                          2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: 2irwcJWiM+dFKeI4QaQKgy8ylGAb/wbkvnGoa6Wnoxk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7a:61:e9:cc:d0:ac:76:96:8d:56:f7:bd:f2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=7987f8a5c209c402e3433efcc0c5a7600d9ff047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:5e:2c:d5:49:10:30:ec:7a:6b:ee:1a:d1:
                    63:0d:26:32:91:c0:6c:42:fc:d3:95:16:de:59:00:
                    8e:34:63:33:65:4d:f5:b9:49:33:17:98:fe:82:31:
                    ca:22:e1:ea:88:28:ae:75:3e:ea:2b:19:34:9f:14:
                    88:6e:8c:b2:3d:c7:6d:64:3a:03:8f:de:41:4d:06:
                    4d:85:fd:9c:2d:59:fa:7f:7d:12:0f:d2:9f:58:6d:
                    c0:68:e7:38:5e:e6:75:c4:bc:b1:c0:32:af:df:98:
                    e2:56:d2:6f:d2:f1:81:17:9a:5b:00:bb:38:74:d8:
                    0b:e3:03:a1:79:0c:6a:5d:e9:73:7f:f7:8b:d6:4d:
                    c8:e7:a7:0a:78:cd:ef:da:ef:b2:81:ad:16:b9:c8:
                    d5:de:ca:b5:f3:75:8b:9d:6e:56:da:07:03:28:3a:
                    c7:28:31:1c:01:96:94:09:ee:02:7d:28:8a:65:71:
                    25:dd:af:c0:94:6f:18:43:1a:eb:59:90:e7:83:c9:
                    aa:11:b1:5b:bb:8c:d9:5f:4f:12:78:5a:69:ab:95:
                    67:ae:b1:a4:67:37:43:63:70:8e:be:a2:12:6a:0c:
                    08:01:ff:00:46:e0:65:7b:8f:13:48:0b:bf:40:de:
                    8c:e2:f2:e8:f7:58:56:50:91:c2:ca:ff:e6:69:48:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:87:F8:A5:C2:09:C4:02:E3:43:3E:FC:C0:C5:A7:60:0D:9F:F0:47
            X509v3 Authority Key Identifier:
                keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2b:50:22:77:7d:b1:91:a8:ef:75:ee:f3:fc:b2:c4:db:cb:
         e8:44:68:c0:3d:b1:79:7e:e7:4f:c0:74:49:03:88:ab:96:19:
         fd:80:a9:3f:c7:a0:1e:06:44:1f:e9:28:d1:f6:5a:30:70:53:
         b1:04:19:f5:46:c8:a9:96:18:3e:9a:a3:04:04:23:86:81:6d:
         74:aa:39:0d:25:ad:2c:8c:7c:15:12:90:50:cf:c1:18:a3:4d:
         5d:c8:04:e2:7e:6b:a7:18:51:be:71:9e:2e:10:df:d8:73:e9:
         a2:cf:66:8a:48:97:68:c2:2a:88:50:98:ce:23:d0:3f:b6:73:
         65:90:fc:2b:9b:83:6f:f9:e0:a6:69:72:fa:42:1a:2c:8e:af:
         ff:44:18:b7:4c:4e:dc:e8:b0:a7:f9:68:9c:a4:31:ab:5a:bc:
         ef:34:24:1d:79:1e:72:91:5d:04:42:40:94:1e:5f:4d:1d:52:
         b7:09:31:1a:95:c1:e2:10:4c:44:66:79:48:ae:08:6d:19:de:
         70:de:39:58:87:3f:9c:d5:a3:10:76:c0:3e:a7:d7:7e:5e:e7:
         90:fc:c9:70:b3:30:fb:3b:4d:b4:ba:45:ab:dc:1c:43:bc:51:
         bb:17:56:df:8e:32:74:b3:36:2d:b0:6a:16:d8:9e:e3:a4:04:
         dc:78:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----