Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File:                     Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier:          yJDj1JfSuvM9l4d+0S+fjp3fL5+vSsm4rrc/czY1wa8=
Subject key identifier:   CD:DC:CE:56:E5:79:F0:83:73:A9:C2:3B:72:BF:6E:77:F9:61:59:44
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer:       /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial:       01962F3D9ACB7F60C3C2679F7C7CB3CE4021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number:          0FDC
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (hash: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=)
                          2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: YNEu0+DYgxu/Pqp1vssVWZE8MKOO51DPkGXQzpl9RzQ=)
                          3: hsXOS728ssx8bAD81ls-MhEMYHY.roa (hash: WicCvVpq6yjNVb8B4LAK2/Mh2on49kT2FPzZdWAqLP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9a:cb:7f:60:c3:c2:67:9f:7c:7c:b3:ce:40:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=cddcce56e579f08373a9c23b72bf6e77f9615944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:69:35:37:3d:f0:00:0b:ca:55:23:a1:8c:
                    d3:cf:e7:2c:e9:46:d9:b0:23:65:9b:05:f4:9f:03:
                    a0:61:14:ee:7c:5c:23:59:56:a9:74:61:98:1d:66:
                    63:dc:da:6f:c1:52:e4:f8:55:d8:0b:09:0e:12:56:
                    81:99:a7:82:6b:19:34:85:03:60:26:17:c2:83:3f:
                    45:a5:c3:bd:79:52:7f:01:56:d9:ff:5e:3c:03:54:
                    94:6d:df:d8:83:f4:1c:a2:00:8a:89:7b:3e:bf:3b:
                    48:07:d1:9f:fe:97:83:74:ee:7e:0a:3c:ec:04:d2:
                    c2:93:64:9e:b6:59:05:8c:b8:2b:83:b5:74:3a:e4:
                    2b:70:87:5f:0a:a3:0b:9b:b7:85:ef:6e:20:1c:a7:
                    27:45:4b:da:21:05:6e:50:7a:ae:48:1d:ea:c6:7d:
                    bc:9c:92:71:10:b3:ea:fd:fc:63:e2:01:91:5f:eb:
                    36:4f:06:2a:66:04:90:0c:56:b2:78:58:64:54:ab:
                    c7:d1:82:b8:e9:46:9e:fe:14:6b:fa:43:7d:1b:16:
                    4d:be:99:5c:8c:c8:3f:8f:02:77:f6:fa:74:16:e4:
                    9b:00:90:29:23:63:9c:65:70:11:a8:28:d6:07:fb:
                    bc:ca:ac:ad:48:ff:f5:ac:79:80:d7:53:a9:8d:c9:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DC:CE:56:E5:79:F0:83:73:A9:C2:3B:72:BF:6E:77:F9:61:59:44
            X509v3 Authority Key Identifier:
                keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:99:84:dc:fb:88:1b:b9:95:f1:2e:df:f3:cd:e7:3e:13:da:
         97:8c:78:44:95:9f:63:ac:ed:ca:2b:a9:48:05:d6:a5:ee:e8:
         27:8a:58:b0:d1:da:52:b7:02:6c:9c:20:79:55:74:ba:e6:64:
         6d:75:f3:a2:b1:ce:de:62:e9:cc:7b:97:6c:5e:69:1e:79:c0:
         4f:bf:a1:42:cb:26:20:f5:2c:50:da:2a:93:67:18:0e:32:67:
         7f:47:ce:d6:32:93:19:ed:49:f0:6b:11:4c:4e:27:d0:a6:ff:
         72:d2:89:d4:da:34:70:6d:41:d9:50:b1:b7:7e:90:22:ff:49:
         8a:64:55:b7:8b:ed:41:ef:42:fb:84:58:40:40:6a:9a:32:09:
         45:1d:a4:5e:14:86:d8:b1:f5:54:63:72:d3:8f:ff:ca:66:3c:
         c3:dc:eb:f4:b4:01:75:15:bf:6e:26:fb:c1:b8:0c:c2:97:b2:
         3c:1a:a6:82:2c:03:41:a8:2e:4a:8f:fc:ec:a5:a3:89:4c:bf:
         36:f6:7c:b7:08:c8:4f:50:63:63:35:17:f9:42:7b:8d:84:30:
         d7:9c:80:21:51:0e:2e:d3:8f:70:3d:9d:71:83:4d:b2:68:67:
         a0:5c:44:11:64:b6:cc:bb:49:eb:7c:c0:ca:5e:0e:91:9e:a9:
         6c:2e:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----