Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File:                     rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier:          wRXYPeMTltLFzhGZz+sKe61q5w9xiF67KQgQuFDrO9A=
Subject key identifier:   4B:08:0E:30:02:E3:A1:AD:90:D1:94:AB:3C:57:76:B4:21:38:BF:E5
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer:       /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial:       01962DF3AC47E4234D35F2DFC545502CC035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
                          2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: tPEBM7CRV6Bhw4sqI2jucIYaQ6DgRPpEZBoOX7DYKFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ac:47:e4:23:4d:35:f2:df:c5:45:50:2c:c0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=4b080e3002e3a1ad90d194ab3c5776b42138bfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:2d:f0:1f:fa:1f:e3:bf:9d:ed:9d:93:29:
                    bc:bc:f3:6f:e2:a1:52:68:f9:0c:c6:64:36:24:df:
                    42:de:8d:34:1d:b4:42:1d:a8:b8:ba:a5:59:00:fb:
                    eb:c9:72:0a:cb:e0:30:3f:b4:35:04:71:93:d0:0e:
                    9a:e6:3c:ec:ec:4c:d2:dc:15:30:71:62:84:8f:e4:
                    ff:cd:64:75:75:5a:47:55:6b:86:ac:56:65:84:b0:
                    b1:fe:41:ac:96:bd:07:96:d1:34:4c:5c:43:eb:d8:
                    76:05:79:55:19:f8:dd:a9:bb:62:dc:26:90:45:46:
                    09:4a:83:88:4a:52:cd:9c:b5:fa:1d:e4:a4:63:bf:
                    64:9f:45:1f:17:26:03:60:cd:73:de:c2:af:15:8f:
                    08:87:85:5e:89:08:46:a6:d5:52:00:33:b2:90:02:
                    ce:3d:3f:f6:c6:d7:28:e4:e7:07:d4:ae:7b:77:f4:
                    05:f1:45:02:94:c1:ab:10:b3:6b:c1:78:71:68:7b:
                    66:24:de:c5:f9:a6:91:b7:d0:69:32:c5:71:73:02:
                    4e:a4:8e:d4:47:0e:2e:2c:48:29:73:59:6e:41:2f:
                    3f:b9:a3:2f:2d:44:10:18:6e:1d:8d:49:8f:f7:20:
                    c3:db:6f:10:d9:8e:3b:6e:21:d1:2c:68:45:1d:a0:
                    9d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:08:0E:30:02:E3:A1:AD:90:D1:94:AB:3C:57:76:B4:21:38:BF:E5
            X509v3 Authority Key Identifier:
                keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f7:f8:4b:d4:28:ec:92:f8:9c:aa:a8:a4:1a:df:17:6d:c6:
         a5:3a:32:23:5e:92:36:bc:b0:34:8b:66:cc:ee:28:24:ec:69:
         0b:37:cb:66:d2:4e:3f:4c:e6:e1:4d:47:4b:da:4e:29:83:53:
         3b:1e:f1:d5:11:19:96:98:d4:f7:02:00:5b:27:ad:30:51:e8:
         96:10:ed:fa:89:3f:a3:7d:81:4f:46:3b:7f:c8:2c:8f:36:05:
         96:eb:22:9f:7f:c9:1c:46:9b:75:cb:66:6b:ff:6a:bd:fa:ea:
         cb:68:9d:32:39:37:2e:e1:7b:c5:e4:42:97:ee:7f:42:20:a0:
         86:67:68:05:40:21:b2:51:5f:15:26:4d:80:64:ba:38:4b:3b:
         a9:1d:98:1c:88:2f:d5:10:fd:20:81:70:89:ff:df:80:1a:53:
         f0:7c:66:cf:46:a2:1a:a8:9d:82:c2:ac:a1:f2:a6:66:74:91:
         8e:7d:de:7e:11:1b:1b:ae:64:3b:5f:96:86:36:5f:ee:28:a6:
         2f:b1:fa:36:d4:56:4b:03:66:7d:8d:cd:19:9a:2b:c7:fd:b3:
         da:cc:a4:74:20:13:5a:02:3f:54:13:33:ba:3b:81:ae:51:f3:
         4a:96:d8:01:56:46:52:6b:42:30:16:63:aa:4b:e5:e6:10:d8:
         d1:6c:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----