Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File:                     zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier:          aWEpxiltuHnHToFIHqGVvTD72MiC8m8ukuDQL442tz0=
Subject key identifier:   BD:03:40:19:08:2B:1D:8F:45:34:F3:5F:89:5B:E4:B0:47:CC:72:4B
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer:       /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial:       01962F74A8B1805B3B13C9B06B08ECE0818B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number:          0B53
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: pIpJ8fNC27Y24CDWefynJuipkU4.roa (hash: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=)
                          2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: wgfSo4WNx7baVKQTfPtaik9oL6oT5Tr9eNSzkk2v3dE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a8:b1:80:5b:3b:13:c9:b0:6b:08:ec:e0:81:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=bd034019082b1d8f4534f35f895be4b047cc724b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:23:ab:d5:12:bd:20:36:b2:d9:42:b8:dd:
                    fd:0e:b7:d8:75:d0:ae:46:42:88:43:22:91:c5:ac:
                    b1:2f:e4:17:ac:a4:bb:72:d9:67:1f:0e:06:ec:bb:
                    7e:87:e3:47:8a:2b:a5:ca:2d:a5:90:69:a7:75:58:
                    f5:fc:ea:79:3e:52:2b:82:9b:09:74:5f:41:11:81:
                    4a:c7:26:39:bf:91:01:a0:6e:17:09:3c:e6:18:64:
                    60:64:25:4f:68:5e:1d:70:42:de:a0:55:44:52:aa:
                    d6:a0:b2:2b:90:91:1f:b9:95:db:ad:82:d9:1f:e0:
                    b5:18:b4:e0:3b:a9:93:7f:9b:db:25:49:aa:b9:8e:
                    c2:1c:4b:c7:f8:b6:74:21:ad:1a:67:58:e8:b6:b7:
                    72:0a:c0:ba:a5:c6:f3:46:a9:e6:a7:fb:6a:90:2f:
                    f6:c3:53:46:2a:94:06:51:89:55:ae:ae:8c:7d:71:
                    31:ae:39:0a:e3:ff:96:94:80:f0:58:98:0b:dc:50:
                    43:ce:dd:58:60:d4:93:08:03:09:67:3a:af:d7:fb:
                    04:6a:fb:ae:42:fe:30:0e:90:c7:1a:6d:cf:8e:65:
                    67:4a:08:66:87:33:23:32:42:26:0c:3c:0a:b3:a8:
                    30:7e:52:95:79:95:85:c0:35:70:5c:71:b0:7e:6f:
                    1f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:03:40:19:08:2B:1D:8F:45:34:F3:5F:89:5B:E4:B0:47:CC:72:4B
            X509v3 Authority Key Identifier:
                keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:40:e3:b2:57:1b:bd:cc:97:56:10:6b:23:6e:eb:db:d0:32:
         58:b7:63:06:b8:d9:c4:aa:c0:c9:ad:0f:74:6f:25:62:92:ae:
         de:e4:d0:78:2d:c4:b0:a5:d8:ff:29:f6:39:fc:53:69:e0:3d:
         12:e0:d3:79:f4:c7:c6:76:2e:14:36:39:72:45:bb:ba:bc:e7:
         89:06:11:62:7c:93:a2:60:42:ba:00:b2:88:86:16:9e:47:8a:
         66:1b:5b:1e:d6:cf:00:30:36:f5:e8:d3:85:2e:d8:88:d4:71:
         73:88:7c:9e:16:04:ee:6d:ea:30:58:a9:e5:d2:f7:a5:71:03:
         21:d9:5c:ab:26:9c:d0:6e:96:3e:79:cc:53:43:4c:a8:69:7f:
         bc:d1:0e:c8:e7:7f:ae:d2:32:d9:3c:d5:a1:cf:bb:5e:c5:44:
         bc:06:01:48:ee:80:3b:78:a1:70:96:d6:99:ef:8e:c7:70:3c:
         12:73:9e:61:37:e7:6b:06:65:6e:6b:23:34:a4:53:ab:af:24:
         87:af:68:e1:f1:1f:12:b3:78:55:cf:a5:eb:6f:0c:ee:d7:b1:
         b1:20:ff:35:50:f3:97:2e:52:83:ca:28:bf:1d:08:2a:5e:9e:
         7e:79:fa:aa:94:84:7e:b2:16:ec:4d:37:83:20:1e:67:24:96:
         fa:7f:54:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----