Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File:                     ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier:          DaP/u49QEzWMV+Jfcgm6jHzEhRT4TJLPlyhTUDTXd48=
Subject key identifier:   B4:4F:16:94:E8:97:1C:9D:FA:3A:B2:08:DA:80:A8:8D:66:AA:A3:0B
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer:       /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial:       01962FAB8F17E8806355DDC4F2FE5E9BB431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number:          0831
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: YetJSvYXE1l9xBjBcRoqoSB/ueSdyThKTfcFmAUKybs=)
                          2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8f:17:e8:80:63:55:dd:c4:f2:fe:5e:9b:b4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=b44f1694e8971c9dfa3ab208da80a88d66aaa30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:76:9d:32:7c:2a:67:99:cc:9d:09:59:48:
                    4e:a2:f3:35:58:e2:38:99:a4:b8:5b:e6:d2:ec:39:
                    6e:c9:c6:7d:ed:11:50:a7:58:01:59:d5:96:d4:8d:
                    ca:fd:19:59:7b:f2:f3:17:c0:dd:0c:fa:aa:23:47:
                    f7:0e:47:17:f3:6c:38:6a:a5:c8:15:e0:47:07:c2:
                    9d:d7:2d:f6:98:88:80:a5:39:29:71:e7:ed:f9:ae:
                    d2:26:d9:18:0c:3c:ed:c0:66:52:e4:56:bc:c6:66:
                    58:3a:9a:2b:46:3f:41:5a:6f:cc:24:c5:63:db:b7:
                    3d:f1:1e:9b:dc:16:69:74:c7:c6:98:8e:af:c9:65:
                    6d:85:6e:8f:91:c3:38:27:75:8f:87:e8:80:f6:bf:
                    9b:49:be:a9:f9:2f:67:fb:94:d5:0f:ca:ef:a3:26:
                    28:db:45:33:0f:63:65:b2:17:3d:93:21:0e:c2:c2:
                    5f:b8:6d:d4:99:38:91:b6:aa:26:24:1f:02:a3:4b:
                    ce:27:3d:2a:8a:21:27:ab:c5:32:e6:a1:a1:ba:19:
                    7e:6c:85:49:a8:4d:93:f2:2e:ea:42:5e:fb:68:de:
                    d6:4f:06:c0:22:4c:71:c7:ee:bf:cc:5f:66:63:c0:
                    f4:b6:3a:18:a0:11:76:01:0f:c9:46:09:20:68:c3:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4F:16:94:E8:97:1C:9D:FA:3A:B2:08:DA:80:A8:8D:66:AA:A3:0B
            X509v3 Authority Key Identifier:
                keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:0a:ae:05:f5:85:5c:87:ba:76:cc:d6:d4:ba:73:23:12:
         a0:05:0d:9a:f1:4f:46:ff:5b:d4:24:51:32:f2:49:fd:35:3d:
         67:8c:1b:c9:aa:d3:2a:3c:73:83:4a:8d:92:c3:12:9c:1b:0e:
         19:dd:b7:d9:aa:1f:2b:1a:3e:2d:6a:2d:6d:7b:ae:94:6d:0e:
         f5:3e:36:8b:65:26:e1:dd:12:df:5f:f3:f9:aa:6d:37:d1:da:
         61:93:30:7a:62:00:44:96:86:fb:cf:9c:b3:4c:1f:93:ef:41:
         20:17:1c:e3:45:d4:7c:95:f3:64:93:ff:01:4f:1a:1e:24:50:
         20:15:be:50:5a:2d:3a:aa:2a:f8:d8:8c:3a:52:31:e2:41:d5:
         5a:d6:c4:1b:d4:ec:db:86:7f:fb:02:4b:34:4d:45:46:b1:75:
         20:98:ba:6b:19:e2:7f:a7:52:53:0e:c8:20:c6:9a:c2:8f:a6:
         13:6f:24:b0:61:ee:96:9a:b8:55:f4:7e:2a:a8:f4:e6:a4:6d:
         6f:bb:b8:b0:10:a0:d4:33:dc:a8:43:7c:ab:57:ae:d2:da:68:
         6f:11:d8:5f:c2:3f:5e:0d:55:95:79:ac:cb:56:b8:cf:86:d1:
         68:61:05:0e:4f:30:be:ce:0c:61:be:de:33:9c:92:9a:2a:dc:
         10:59:b8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----