Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
File:                     czFVtC-vxzVab8gJx9nM9bL4zcI.mft (raw, json)
Hash identifier:          quXqsxSTl0CQW8pRDz7pQng5ZerhzQkxCGenAVHzSHY=
Subject key identifier:   C7:09:3E:E2:87:60:79:76:43:E6:70:CE:E3:6F:5B:F2:59:FA:17:8E
Authority key identifier: 73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
Certificate issuer:       /CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Certificate serial:       01962F06C58D1B9D9D0518C51DBD41ECF9D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
Manifest number:          0412
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: czFVtC-vxzVab8gJx9nM9bL4zcI.crl (hash: NZxL/+/lTjFNdZejpvMtfQoyjJ67/f5Kam4HymZJsVc=)
                          2: l0CnYB9TqdwdMbmMIDN6gmU04y4.roa (hash: uHgPuHlAwsjfMv6nb8pkc75mAM6+gk2FAGFMxkvLSjo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c5:8d:1b:9d:9d:05:18:c5:1d:bd:41:ec:f9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=c7093ee28760797643e670cee36f5bf259fa178e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:7b:e9:82:3d:21:f9:b5:97:87:09:31:13:
                    8b:01:41:32:61:9e:25:f1:7b:82:99:ed:89:2b:9e:
                    fd:36:88:99:2a:f5:8b:a8:2f:85:69:66:69:f0:fb:
                    16:e1:b1:11:c2:1d:c5:62:6f:4b:4c:28:5d:3b:38:
                    d4:af:a1:97:d4:bf:3c:0f:0a:ef:af:26:ff:dc:c7:
                    1c:aa:7a:48:8c:fd:85:1b:1b:79:e8:88:f0:20:a9:
                    1e:16:80:c4:0a:7c:b8:71:3c:9f:d5:2c:ff:72:d4:
                    44:de:ea:e7:aa:ed:53:85:ed:93:b5:a9:6c:3e:83:
                    82:41:32:94:92:0e:a6:40:ec:7f:1f:4b:1a:b4:7f:
                    3c:45:90:f9:98:f8:5a:19:53:1e:53:92:79:28:b4:
                    9f:80:b9:c5:a7:71:0d:45:e4:10:f6:04:f7:48:ac:
                    6f:c2:13:01:0a:90:d5:85:ea:4b:69:03:a5:8b:c2:
                    f0:1e:26:5d:30:76:0a:b8:61:8f:72:c8:6b:60:0c:
                    38:b4:41:05:6d:39:f7:12:c3:85:a2:68:fe:7e:72:
                    b1:16:0b:51:47:4e:fb:b2:62:1a:17:56:50:04:df:
                    3b:38:0e:1e:c2:97:17:f7:0e:53:1f:5c:38:32:b9:
                    1a:a1:a3:d9:51:3f:94:c5:8b:1c:0a:2b:f3:c4:93:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:09:3E:E2:87:60:79:76:43:E6:70:CE:E3:6F:5B:F2:59:FA:17:8E
            X509v3 Authority Key Identifier:
                keyid:73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:a6:39:27:70:7b:f8:16:12:17:3a:a0:3d:15:81:8f:a0:
         d3:b4:bc:55:7d:6e:13:7a:74:16:99:a6:40:ab:20:ff:bd:4f:
         c8:8a:31:50:ba:0b:ee:9e:8f:78:9f:73:54:7a:12:72:18:a3:
         63:69:a9:d9:a0:97:17:05:e2:2e:10:17:79:b6:e8:2a:54:cb:
         54:61:60:74:2e:b5:38:58:97:d3:00:e5:c7:67:c0:99:9a:b0:
         4b:28:56:f5:30:be:5b:61:d6:d6:04:e6:b5:8c:9f:bc:6f:cb:
         7b:35:de:a9:49:21:b9:b2:0a:32:fa:15:95:0c:d5:43:88:d0:
         92:af:94:02:9d:5f:2c:44:bb:9b:ee:1e:49:80:b3:cd:f9:c4:
         2c:b7:9c:8e:20:e8:0b:57:54:de:56:a9:5d:3b:71:ad:b2:73:
         e1:e6:c1:5d:c5:2d:91:18:69:55:60:2a:96:b1:a1:6f:f3:d7:
         ef:a7:77:0e:a1:bf:75:85:9c:6e:f7:e8:46:1a:c4:11:0a:8d:
         2d:5a:5d:f5:9c:93:e9:07:4e:69:0c:33:f4:e6:17:e0:1d:5c:
         0a:92:f6:ef:72:4f:08:6b:4d:74:01:3b:5f:ca:e8:7d:31:4b:
         c8:06:7f:2b:77:29:37:49:b5:de:7c:9e:de:58:1c:bd:21:5a:
         7d:71:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----