Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File:                     zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier:          JsKGWF7LnTXu2k2lq7xrRRNuO//RWJMBXRy9sLDvtSc=
Subject key identifier:   E4:AE:4A:AA:74:F4:4A:75:14:B6:92:AE:38:0C:15:47:2A:9D:22:61
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer:       /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial:       01962E2B2937EA0A35C096444C78ACB7FDAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number:          0F08
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=)
                          2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: MyXWeqhlPN1xi1pZenHbTQWAR58/g3u4+7EmOoAXbSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:29:37:ea:0a:35:c0:96:44:4c:78:ac:b7:fd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=e4ae4aaa74f44a7514b692ae380c15472a9d2261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:fc:33:13:97:91:79:c5:2b:16:68:49:ca:
                    03:38:e3:47:2c:8b:e7:90:bf:b3:31:e6:c3:83:a2:
                    d4:cf:05:bf:2f:2d:f7:fa:c0:cc:84:15:dc:6a:58:
                    68:29:18:f7:9a:39:a8:4d:00:aa:bc:72:b5:bf:d8:
                    9e:15:63:69:4d:0d:34:57:51:03:fe:5e:51:6d:d5:
                    48:db:f0:a7:1e:cc:78:95:83:e4:f4:0f:02:33:84:
                    bf:c1:ee:c3:55:49:e5:04:8b:c2:a1:e5:ce:c6:77:
                    2e:06:45:f8:19:aa:17:db:83:df:4a:b5:29:9b:99:
                    2e:29:c2:6d:8b:bc:8d:84:50:12:61:4b:02:82:59:
                    1d:d2:01:79:ba:fc:e0:ad:ff:c0:6f:86:e4:d3:bf:
                    38:d2:1d:77:98:0d:18:4b:d6:03:87:02:81:2d:0c:
                    88:7a:52:e1:e0:f0:d5:e9:af:81:fd:f1:54:35:e8:
                    7c:bc:a4:6c:94:fd:eb:03:dd:91:f3:d9:bb:07:65:
                    16:0e:4a:3f:f2:ab:18:a4:e7:fe:21:05:f3:7c:65:
                    ae:af:6e:d7:6e:1f:46:2c:6a:19:96:7f:0c:5a:cc:
                    f6:d6:3b:aa:92:4f:ac:24:37:f2:6c:20:12:64:f4:
                    be:b4:29:6b:14:86:29:28:8b:92:d5:1a:94:57:48:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AE:4A:AA:74:F4:4A:75:14:B6:92:AE:38:0C:15:47:2A:9D:22:61
            X509v3 Authority Key Identifier:
                keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:83:6f:f4:86:98:a8:77:94:92:65:8d:f0:76:71:61:3f:d6:
         0a:bc:19:09:cb:86:ef:1f:2c:c2:c6:b2:05:b2:36:5e:bc:68:
         b0:46:cc:60:f9:65:75:c4:d7:2b:3c:7d:20:83:c9:bb:51:74:
         39:b4:54:65:6d:52:37:12:9d:18:01:c9:f0:73:d4:dc:10:f5:
         de:8b:58:d2:23:88:16:dc:bf:c0:46:88:d0:4a:19:5b:99:b3:
         2d:7c:8a:7c:16:e8:8d:e1:a2:cc:71:3e:c0:54:6a:3d:05:ab:
         c3:df:54:b5:bb:d7:eb:93:b0:a7:46:e0:80:1f:ba:cf:62:b3:
         2a:dd:b2:96:f1:c0:e6:cd:1e:94:8b:c7:30:f0:53:70:9a:0c:
         02:26:d8:8b:99:c2:82:46:4e:b3:c5:1d:26:4c:c2:75:76:f5:
         cd:57:df:fe:10:0f:af:d0:0b:cb:ec:14:8a:38:41:96:23:96:
         54:05:4e:d9:e2:7d:89:2e:10:85:6e:00:64:3c:60:1f:2d:6f:
         e9:9f:fd:4b:6b:1a:e9:23:12:f3:bf:73:49:79:b7:0a:df:d3:
         07:5c:04:8f:92:cd:b5:79:dd:75:2d:0f:9e:18:70:18:15:d8:
         a7:f4:fc:28:e5:94:28:34:bf:0f:88:ae:74:07:0d:66:c6:dc:
         16:dd:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----