Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
File:                     RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json)
Hash identifier:          L+upbI3nXby+y41aeyiMK1dmzrBE0/2n27rseoqPCBY=
Subject key identifier:   CE:21:A8:59:F8:72:64:08:30:25:3D:5C:E9:BD:98:2E:F1:77:05:1A
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Certificate issuer:       /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial:       01962DF42BEE7507887866EC6A989CEB3FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
Manifest number:          0BC0
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: kAKvVfkr90iL2xv4NCp+GjFd4ahf3BKIS+ihJBi6HFw=)
                          2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2b:ee:75:07:88:78:66:ec:6a:98:9c:eb:3f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=ce21a859f872640830253d5ce9bd982ef177051a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6c:e7:45:b7:ea:30:ae:99:85:f2:e1:5c:28:
                    f1:cb:4c:86:b1:b3:9c:1f:c5:03:46:d9:27:7d:c3:
                    3e:ce:4f:00:37:d7:c7:ef:c7:1d:66:bb:e6:ee:37:
                    4b:68:47:29:b2:b2:50:73:dc:5c:4a:44:13:2f:af:
                    d6:cf:0b:d0:0c:a1:44:fd:99:3e:bf:d9:28:03:0b:
                    7b:4c:2e:26:3d:b1:e4:ce:a5:b6:c9:01:b8:83:9a:
                    67:1b:83:3e:59:b1:0f:f8:2c:7e:d1:9f:db:30:a1:
                    34:c3:4e:6e:e7:d6:6b:40:eb:e2:cd:de:dd:5b:83:
                    78:c8:f9:4f:77:4c:3d:28:f5:4f:0e:a1:b9:97:73:
                    fe:37:03:90:6b:12:af:fe:2b:4f:51:87:b7:16:04:
                    35:43:75:6e:1c:c1:00:1e:4c:0a:ff:6a:c9:0e:90:
                    70:87:78:1b:b4:1e:c2:fd:e9:99:c7:a5:d9:73:e5:
                    0f:ff:93:90:4c:71:43:9e:44:0b:54:d8:49:12:eb:
                    ba:9d:bb:5c:aa:8c:2e:b6:df:07:9a:8a:af:e8:01:
                    1b:21:f9:bd:ed:8c:29:0b:f0:c8:69:bb:f0:dc:21:
                    5b:ef:27:4e:08:65:7e:1e:8c:a5:1a:e1:0a:2c:4e:
                    13:74:cb:3c:fa:c6:30:5d:a3:e7:21:44:87:a6:a3:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:21:A8:59:F8:72:64:08:30:25:3D:5C:E9:BD:98:2E:F1:77:05:1A
            X509v3 Authority Key Identifier:
                keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:69:f3:75:b6:7a:c1:13:61:c4:d8:9e:4c:ef:53:dc:44:2a:
         07:62:6e:a2:1f:56:f9:d0:6c:4c:19:b5:51:f2:56:aa:a0:13:
         9e:57:46:3c:4f:27:33:c3:ab:9a:de:d5:4b:91:ea:89:30:97:
         7b:3c:31:8f:a5:c4:8f:2e:cc:bb:40:d9:93:1e:46:18:56:22:
         34:9c:0a:a6:c6:66:8a:5f:20:fe:22:cd:80:8e:0e:5f:26:13:
         31:b9:e8:26:9b:87:aa:4b:4c:7b:0d:ef:c7:c9:ba:b5:c1:1d:
         1d:16:24:6b:09:e1:d5:d5:f6:86:ba:d7:73:20:12:f5:e4:eb:
         8c:66:4d:7b:a6:89:86:bc:1f:43:de:8b:52:b1:d9:c9:92:58:
         ca:dc:fa:45:26:17:5e:68:b4:0f:1b:36:81:2c:7f:4c:bc:53:
         8b:70:69:1d:2a:ef:07:b3:c9:eb:71:7f:8d:eb:c6:e3:da:77:
         57:27:e6:b1:c4:e5:62:9b:c3:7a:09:21:f8:8c:31:80:61:9c:
         70:45:f1:8d:6d:ad:5c:e5:9c:40:64:56:b9:06:a8:d1:1c:8d:
         90:23:71:b4:fb:32:29:af:22:53:f5:fd:a0:6a:0d:3e:be:50:
         11:e6:1f:a0:b2:0e:65:4b:13:88:f4:57:96:fe:ef:5d:5e:77:
         4e:59:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----