Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
File:                     zkn8E0twZULK8aHvvgNPcBG0lDY.mft (raw, json)
Hash identifier:          xe32y/hIj9Tg6w+0VDu0qR+MgNEVO1zox7Y/Ekl4Qy0=
Subject key identifier:   41:3F:5F:F1:74:A7:55:3E:BE:74:45:E7:31:F9:58:56:24:CE:1F:D4
Authority key identifier: CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
Certificate issuer:       /CN=ce49fc134b706542caf1a1efbe034f7011b49436
Certificate serial:       01962FAB5AC2553B6500D2601151587DAB90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
Manifest number:          0412
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: SGAPHhpCJa9JFOb_Zf20G8kvkhI.roa (hash: 27D8nmxY/4y8rMryghx5LNMAGS+7aTblTkGND6PBRy0=)
                          2: zkn8E0twZULK8aHvvgNPcBG0lDY.crl (hash: RkAcSpjIJ4/BOoaKfo3yqbqPsHm+hKbtOtMKJHzbm2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5a:c2:55:3b:65:00:d2:60:11:51:58:7d:ab:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce49fc134b706542caf1a1efbe034f7011b49436
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=413f5ff174a7553ebe7445e731f9585624ce1fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:d8:ac:30:e5:3c:0b:fa:19:8d:85:2b:67:
                    db:e4:6f:4c:e4:a9:06:2d:b9:bf:ce:7b:40:51:79:
                    50:80:f6:e4:14:f1:87:bc:a3:23:05:d8:d1:67:ab:
                    98:4a:b7:8b:9f:32:58:e9:86:98:a7:c6:c5:bb:4d:
                    e0:a9:59:5a:8b:f0:58:34:94:3c:d5:ad:93:d1:92:
                    76:e7:a3:d8:b1:9a:41:65:10:35:e6:e4:71:d6:80:
                    d5:c2:96:64:e7:65:1d:67:f7:a5:58:b1:a6:cb:8b:
                    ad:53:bb:e1:26:bc:34:14:08:8e:95:ed:f9:7d:51:
                    7e:60:f3:ca:9a:67:db:d0:5b:13:b3:1d:a8:5b:dc:
                    5b:4f:52:f4:63:4b:10:73:9a:85:0c:5e:58:ad:03:
                    fb:78:b4:12:1b:c0:d5:ac:91:f0:7c:38:bf:64:89:
                    a8:f3:25:5a:ba:96:2a:92:d5:bd:97:93:48:96:5f:
                    6b:da:7c:94:4b:90:9c:71:77:8c:db:53:76:42:7d:
                    40:27:60:48:22:2e:ee:e8:18:2f:2e:fd:f7:d7:65:
                    4c:7e:d1:a2:7d:2f:af:e9:6d:a4:b9:51:55:5c:81:
                    5f:fb:24:fd:2e:f7:df:bb:5f:77:17:41:23:91:b0:
                    92:21:50:e6:de:8a:d3:64:d7:52:fd:d1:f0:26:c1:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3F:5F:F1:74:A7:55:3E:BE:74:45:E7:31:F9:58:56:24:CE:1F:D4
            X509v3 Authority Key Identifier:
                keyid:CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c2:02:bc:9c:9b:62:e2:16:3b:0c:e3:2c:bf:5c:bc:b9:40:
         5b:60:00:58:27:f4:31:26:ad:e3:8e:e2:bb:1f:ec:13:d0:fd:
         01:4c:3f:b8:76:e3:92:ea:36:eb:8f:65:d0:64:26:e1:84:5b:
         b6:06:ac:d3:f6:66:2c:a5:44:aa:37:34:77:8e:ac:9f:ea:dc:
         61:ab:ec:8e:82:fb:1f:df:dd:95:0c:20:6f:be:f6:c4:58:e9:
         8d:8c:5b:78:98:de:0e:f2:e7:2f:5a:c2:97:e5:0c:4a:e8:40:
         4d:b0:54:ac:6c:de:4d:01:85:df:9e:37:04:46:33:95:39:96:
         ef:18:1f:e7:a7:95:75:23:30:6b:1f:6d:1c:fc:21:d3:bb:aa:
         53:ef:06:12:88:c7:11:0c:96:85:1e:17:aa:66:0d:78:7d:27:
         92:d1:8f:eb:e3:44:d2:55:98:87:d4:de:a6:c1:f9:76:da:0b:
         0e:f6:57:92:7c:ea:b2:a8:f7:c5:c0:ff:0f:4e:50:a0:19:1c:
         76:6f:be:fd:86:14:e3:d7:a7:93:b8:84:ce:f6:d8:bc:d5:15:
         74:3d:11:0f:85:ad:a5:a4:e8:bf:48:3b:4d:96:ff:91:28:86:
         44:b4:c9:0d:c1:f0:dd:93:5b:59:79:8e:4a:b6:f4:00:eb:ee:
         c1:1c:a2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----