Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File:                     fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier:          9tuB/At2BjcD16d7AeNhBOE/Qe5QmwnAcUbwY13m/Wg=
Subject key identifier:   25:92:77:AC:C2:B3:24:BF:61:CF:31:68:D7:17:2D:93:F1:CB:76:58
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer:       /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial:       01962ECFB3D8B56A3C636C3E8EECCD7AD975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number:          0C11
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: 2CYNXB5qZHN7in7RGaGVmXvb7Xs.roa (hash: n74UAylTv760Shvrd+PI6ipCj4rV+2WaR3QnP3+8e6Y=)
                          2: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: ytjMORIn3rX/ELxrocUByu0xCMGxpPh/hEwNnYonGZI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b3:d8:b5:6a:3c:63:6c:3e:8e:ec:cd:7a:d9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=259277acc2b324bf61cf3168d7172d93f1cb7658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:ba:c2:62:82:7d:20:76:17:b7:53:19:7f:
                    b1:3c:92:e9:a0:26:ea:cc:69:d5:38:84:b0:c1:d9:
                    9c:34:a2:99:bc:91:9e:71:2e:fb:6c:6e:3b:38:c1:
                    e6:5d:b6:f2:4e:4f:93:e9:45:a2:37:e3:6f:33:75:
                    98:1f:e7:45:5b:3d:58:a2:3d:9e:c3:5f:87:29:2b:
                    37:be:0e:d4:10:96:34:12:c2:de:5b:0a:86:ac:67:
                    5c:4f:8f:31:fb:ec:fc:0a:23:80:dc:b8:20:4e:e2:
                    32:68:7f:27:5d:a1:17:12:37:f2:14:5a:96:80:45:
                    82:35:73:62:ae:d3:24:ca:e5:1c:c5:c1:27:a5:b9:
                    e8:55:3d:44:1a:2c:79:9f:a9:08:98:fe:54:0b:38:
                    cf:ad:76:c1:86:c0:aa:bf:26:b0:5f:25:bc:57:00:
                    89:66:ca:70:66:f3:22:45:aa:07:72:71:c8:c3:21:
                    40:98:f0:db:5f:fb:db:4f:39:0d:a7:17:53:1f:63:
                    59:27:ca:30:ff:d0:c9:cc:c7:81:f2:bc:2b:92:57:
                    77:a6:cf:17:41:0f:db:06:a7:21:93:19:43:00:e8:
                    dd:6d:b8:56:da:06:13:9c:5d:f0:be:63:d7:5b:b3:
                    a2:f2:4b:dc:9b:c2:2b:9d:69:d0:a1:a8:40:78:3f:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:92:77:AC:C2:B3:24:BF:61:CF:31:68:D7:17:2D:93:F1:CB:76:58
            X509v3 Authority Key Identifier:
                keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:75:d4:27:82:e4:f8:f0:70:b9:fd:ca:b7:76:33:56:bf:c9:
         f0:39:71:98:1a:27:61:b5:a8:af:f2:b2:5f:a9:c9:6f:67:7c:
         9f:1c:2f:93:a8:9a:4a:ba:ba:67:51:7b:56:36:64:71:62:cb:
         84:5e:2c:d4:d6:e4:03:4d:86:94:ac:70:af:00:dc:db:6b:58:
         08:bb:35:c0:93:ee:af:a2:8a:b3:2d:26:81:a7:ed:3e:58:83:
         3e:37:41:e4:da:7e:d1:26:2d:0d:a4:38:20:ad:8d:fa:3d:1a:
         d8:c4:4c:6f:56:d1:5d:9a:84:b8:e9:15:78:ea:67:22:57:38:
         b3:b4:27:7b:77:98:36:f3:c0:65:36:4b:c9:d8:25:c9:4d:22:
         7d:4a:9b:ca:16:4e:79:24:65:d9:eb:7e:30:84:58:2c:b0:db:
         f3:06:74:66:14:29:2e:15:a0:8c:24:35:70:1f:6f:34:8c:a6:
         c3:09:de:d3:6f:b9:8d:1c:d0:76:f4:8a:c6:9e:fa:51:88:84:
         e6:bd:1f:a2:28:4f:ae:dc:b9:05:0e:2d:8c:0c:1e:83:ac:6a:
         43:40:2c:d8:5e:12:87:fc:48:9b:0f:e5:52:1a:76:46:64:2f:
         b8:b7:3d:9c:cb:b2:0a:18:5b:c0:a8:13:2c:2e:3a:89:06:e2:
         90:e9:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----