Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File:                     zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier:          sLpmyWWohokjh+qiR1ZeodebnGnY2bxPWkVlq3ibZto=
Subject key identifier:   28:09:65:D4:EF:FA:9F:0D:C8:01:5B:3B:AC:13:B4:C2:E3:E1:79:5E
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer:       /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial:       01962F06F6742B00051E68577A69BAFDD59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number:          0B16
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=)
                          2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: cZUDkCKEt1cW8GuCFweqZfLDpd/w9yHFLUz+XORS3c8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f6:74:2b:00:05:1e:68:57:7a:69:ba:fd:d5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=280965d4effa9f0dc8015b3bac13b4c2e3e1795e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:cc:72:0c:da:a0:20:82:4f:2b:67:40:e3:
                    5a:37:fa:a6:06:54:e7:e0:ec:fa:44:76:3e:3f:68:
                    c2:c1:b6:6a:3b:e1:77:f1:73:e9:83:54:f7:86:63:
                    c2:56:1c:2d:5c:d3:35:8a:80:86:c2:fe:7c:f6:f7:
                    fa:11:79:40:b9:89:f1:87:eb:52:ed:63:ef:dd:a8:
                    1f:3c:68:7b:85:c1:dd:ca:4e:25:2f:30:1a:f8:10:
                    70:63:d1:21:03:e2:1a:65:5b:0b:1b:07:d2:ef:25:
                    d4:ef:fb:e0:ea:14:a8:ac:b3:fd:00:56:1b:e7:29:
                    8a:2b:8a:85:d4:21:0f:f6:f1:10:ca:bf:17:5d:61:
                    f6:bb:16:38:c5:44:55:4f:d1:44:ba:45:90:7f:3c:
                    2a:4b:32:0b:d6:b4:0b:d2:d0:53:dc:44:6b:8b:bb:
                    4d:a9:e6:41:df:ab:43:c5:ee:da:62:dc:60:2e:d4:
                    55:cd:12:03:d2:6d:9e:b4:f3:5f:80:4f:80:97:97:
                    11:c2:11:f4:af:c9:3e:67:c3:c0:56:33:6c:e3:6c:
                    87:ae:31:93:b3:8b:4d:2a:91:73:1d:73:61:df:5d:
                    f1:61:80:fe:88:13:98:70:db:f2:d3:30:4b:90:30:
                    34:dd:e4:42:c4:da:bf:40:2b:80:e7:4b:75:46:14:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:09:65:D4:EF:FA:9F:0D:C8:01:5B:3B:AC:13:B4:C2:E3:E1:79:5E
            X509v3 Authority Key Identifier:
                keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:40:49:06:6d:83:a6:49:54:82:36:71:f2:e6:02:1b:27:78:
         a1:e2:ff:f7:f4:cd:f8:90:80:8f:85:cf:52:71:c9:2f:af:e3:
         73:85:30:f0:08:a6:67:d8:7b:da:b3:06:2d:5f:74:07:62:80:
         a0:b1:87:ba:09:e3:34:6d:44:a2:91:d4:19:6d:42:ac:a4:25:
         05:6c:40:d1:7f:0c:62:55:5a:a9:73:47:04:c8:be:5d:21:a9:
         76:01:88:07:f8:ca:30:77:91:87:1f:af:b3:38:74:ea:58:8d:
         aa:49:86:0d:bb:e3:7e:97:d4:a7:18:cb:6f:d6:4e:46:25:e1:
         3e:0c:9b:5a:14:46:ee:3d:ac:35:9a:7a:45:10:fa:3d:18:48:
         c2:83:1c:8f:12:7f:a2:5f:f0:89:2b:20:7c:09:95:03:f7:ad:
         87:91:6a:0c:23:83:80:a5:3b:fe:43:16:0c:7e:b7:a0:93:f4:
         af:9c:c2:47:78:19:d7:16:cc:2f:d6:ac:e6:16:81:f7:ee:13:
         23:7f:2e:28:a3:e8:3b:47:74:e9:32:79:e8:13:d9:c0:1b:62:
         cd:dd:f2:e8:d1:73:d5:f6:ab:f6:33:d6:67:c0:3c:b4:4b:a7:
         9a:d1:e8:cc:33:85:c0:d5:e7:ef:ec:c3:e6:87:ad:a3:49:db:
         a7:d3:93:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----