Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File:                     Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier:          PnFjBNZA4RC/d9h4YqreT+Y9it65L0b9ty0HWjJ88vM=
Subject key identifier:   B4:9E:5A:67:5B:E0:EF:CA:A2:96:1D:1C:F7:78:3C:91:CD:95:D2:22
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer:       /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial:       01962E2B2BB4C8BC21AD4490A90D9A69D30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number:          12F9
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
                          2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: lZF28vDvJqhMA4yThknc0X/pUAj+SfMJ89wkkOaV0TI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2b:b4:c8:bc:21:ad:44:90:a9:0d:9a:69:d3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=b49e5a675be0efcaa2961d1cf7783c91cd95d222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:79:da:99:f7:b5:95:e0:2e:32:46:7b:c7:
                    dc:cc:12:da:89:a7:26:c6:39:a9:21:7f:39:2b:18:
                    a4:c3:78:50:9f:ea:fe:12:7a:5b:b1:9c:34:bb:da:
                    8d:9a:52:0f:6c:37:99:fd:a6:86:3d:89:eb:8f:77:
                    c2:1d:53:b8:e7:c0:3e:9f:ef:84:46:3b:22:e5:c1:
                    71:17:d0:2a:13:0c:a1:89:f3:18:92:2d:99:59:a7:
                    a4:92:7e:b5:55:40:0e:21:03:4a:6c:f9:7f:68:91:
                    6e:f3:5c:4b:9b:7e:a9:8f:26:35:89:ec:e3:31:a8:
                    27:ec:f1:d5:1e:b2:d7:ec:b0:54:60:1d:54:c5:c9:
                    1e:2a:f4:a5:1c:7e:f9:aa:11:74:b1:96:e4:bd:b1:
                    c1:a8:a8:d2:d7:52:3a:8c:46:f3:f6:5a:6a:d3:19:
                    6a:26:c6:9b:cc:69:89:b1:72:ef:a9:52:c4:08:e9:
                    c0:6b:c7:a1:3a:42:67:6f:8a:63:63:89:c9:c8:26:
                    f2:ae:53:4b:aa:9f:00:f4:6a:9d:e1:fa:4e:fd:8b:
                    a5:4b:a1:57:8a:ec:0b:d2:73:55:eb:e6:ae:31:f1:
                    53:62:8c:ef:9a:27:bb:b6:df:0b:3d:98:72:9f:b6:
                    a1:89:99:25:af:d6:6b:cf:f0:7a:21:50:cd:b2:de:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:5A:67:5B:E0:EF:CA:A2:96:1D:1C:F7:78:3C:91:CD:95:D2:22
            X509v3 Authority Key Identifier:
                keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:90:cc:62:07:84:ad:7d:10:b7:83:00:b3:1c:20:a0:cc:38:
         5b:22:26:6c:26:d4:20:ef:79:5f:40:7e:52:87:ff:58:4f:1c:
         36:1e:d4:06:f3:e5:ab:41:e8:00:71:19:33:5b:1e:3e:eb:65:
         16:74:f1:0c:f3:8d:46:2d:4f:46:bb:7d:97:fd:c4:4e:91:9d:
         72:6d:b1:c5:c9:b0:5e:a9:d6:7a:e1:27:f4:7d:a6:95:7d:60:
         da:d1:9a:55:c8:1b:e8:d7:58:ba:10:fe:55:0b:45:ad:da:79:
         cb:2a:62:59:6b:5d:85:09:42:3a:e9:1e:6f:43:1c:eb:70:9a:
         30:ce:4e:2e:9e:77:3e:84:ee:dd:99:11:a4:a8:fa:25:25:98:
         9a:b2:6d:78:b8:12:54:e4:69:0b:8a:72:bc:4d:60:ec:6e:47:
         bc:37:e0:3d:28:61:0c:87:a4:0e:ed:d6:aa:ca:31:25:55:0f:
         96:1c:68:2b:04:03:1f:28:f8:93:07:0c:39:dd:18:b0:d6:64:
         22:6b:ff:50:3d:c5:6b:5e:91:45:c9:b6:c2:eb:81:4d:c9:7f:
         21:32:3e:a4:89:44:26:23:86:12:b3:6f:57:7f:1d:ae:cc:9d:
         cf:91:6b:00:1e:8b:92:e5:c1:81:e7:9e:89:51:7e:34:60:93:
         14:c7:19:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----