Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
File:                     zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft (raw, json)
Hash identifier:          vwRnaok9k2BlEYh+NJ7M1Mbh6QYkqn9gqE8tGsQCrMQ=
Subject key identifier:   8C:D6:A7:C6:A2:B6:7F:91:9E:0B:2F:CC:B0:72:7D:D2:3C:88:73:C8
Authority key identifier: CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
Certificate issuer:       /CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Certificate serial:       01962E2AC8D8A4D53293545061BBE08D0901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
Manifest number:          25
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: BE_olsmmnp-joM_N2rLYKLd8dek.roa (hash: ZleCTANKAgfaV22x6J6w6CdrHsjvtau2exHtj44bgPs=)
                          2: zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl (hash: QUT1gBSvdq4U2hOFDcUM8AjMtlQiBRzvI208qbn93j4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c8:d8:a4:d5:32:93:54:50:61:bb:e0:8d:09:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde4c465d2df3458c02610f87820c9bc2eb33253
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=8cd6a7c6a2b67f919e0b2fccb0727dd23c8873c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:c4:f0:d3:d0:59:48:f2:60:92:32:f9:c8:
                    50:0a:fd:fb:55:60:f5:e4:70:fe:0a:34:1c:e9:f0:
                    80:b9:a8:61:0a:0b:68:2c:6a:50:42:8b:91:08:71:
                    05:ae:92:55:10:b1:53:99:94:a7:57:fb:94:b1:f1:
                    da:35:b2:88:34:6f:c9:a0:3f:1d:4a:8a:36:68:cf:
                    4f:43:ca:ae:3e:42:95:ff:70:f2:0d:35:5d:6b:bd:
                    31:c2:d6:93:b1:b2:e2:a2:51:8b:16:d2:a9:d4:af:
                    70:3a:80:eb:8b:8e:06:34:62:41:fe:03:9e:11:99:
                    3c:bc:b8:48:e4:72:4c:41:9a:9f:32:05:b8:45:91:
                    d5:42:64:da:bd:b7:f1:5c:a0:ac:b2:82:58:b6:a6:
                    d3:06:b0:42:99:d3:ac:14:b6:56:37:6c:39:60:16:
                    25:b7:e8:b5:b2:ea:e3:f0:fa:2c:b7:58:7d:52:b3:
                    c9:78:3f:8e:41:a1:da:6e:21:d9:b2:ac:94:fb:0f:
                    d1:50:4e:47:89:f8:ef:da:58:90:21:34:da:7e:23:
                    89:db:36:d7:20:9d:a7:a3:04:35:3c:ae:86:82:80:
                    8a:a8:a4:00:c0:e6:18:25:17:41:ff:ba:1c:ac:e7:
                    af:3b:63:38:d2:db:ff:59:68:55:2c:87:70:95:82:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D6:A7:C6:A2:B6:7F:91:9E:0B:2F:CC:B0:72:7D:D2:3C:88:73:C8
            X509v3 Authority Key Identifier:
                keyid:CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d2:06:fb:41:ba:24:97:c9:aa:4e:7e:e8:05:e4:8f:f5:5b:
         3a:9a:05:a3:0a:63:62:f9:f0:bc:1f:77:ab:d7:0f:9d:c8:1d:
         e5:75:af:81:99:60:39:1a:08:a0:8a:ab:7b:40:16:8a:57:36:
         de:c9:3c:7d:57:29:58:56:ed:5e:9e:c5:4b:a9:3b:b3:aa:7c:
         85:1b:3c:0a:25:1f:49:9d:5c:23:fc:0b:fc:ce:ee:6c:bf:12:
         8e:27:fe:ec:58:6a:a6:61:50:2e:51:6c:55:20:97:d1:a0:12:
         94:f0:85:b0:a2:69:35:ab:27:62:b7:75:d1:fc:d3:87:67:f0:
         8c:0f:ee:df:6c:41:3a:a8:7c:89:fd:d8:dc:f7:e3:99:71:c5:
         b1:a3:14:db:fd:9a:b3:3e:46:f9:15:c7:08:43:a5:13:82:ff:
         28:22:66:af:fd:e1:e8:a5:a0:de:9d:a9:58:bc:e5:55:2a:31:
         f3:b8:d4:b6:5d:ce:f7:f5:3d:00:85:f9:41:a1:61:b1:71:5f:
         89:4c:42:4b:36:e9:26:9b:92:1d:cc:ca:c8:bc:64:68:bd:c7:
         78:cd:72:16:ef:e4:7d:12:98:8f:83:d2:90:44:ea:67:11:96:
         19:54:dc:fc:29:0c:f2:43:43:60:9d:35:eb:b9:a2:9a:60:18:
         54:cd:ad:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----