Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File:                     ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier:          rnN69LwsMc7ZUCs57YGxwzTd9Biz8mynwk8W1jBguUs=
Subject key identifier:   A4:8A:39:0E:47:6F:02:3E:3E:62:05:F1:BF:BA:07:AB:0C:36:B2:F5
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer:       /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial:       01962E98D225C8FE7BBDE3A68E668A3E2B32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number:          11EA
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: zk/NYD6NtNrDkSHZ4XHlyvn0844shy8hqu7Ss8R9eEg=)
                          2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d2:25:c8:fe:7b:bd:e3:a6:8e:66:8a:3e:2b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=a48a390e476f023e3e6205f1bfba07ab0c36b2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:e2:50:18:c7:38:8f:74:e1:29:50:6d:63:
                    46:4b:13:c7:78:24:fb:0e:1c:41:d6:67:8b:50:27:
                    81:b3:b6:93:51:bc:18:d6:3f:57:d1:e4:fb:bf:31:
                    52:6d:a1:c5:79:d9:7a:64:3b:00:ec:d2:7d:e4:d1:
                    c4:e4:a8:26:97:98:8f:f2:ed:cd:02:2e:84:52:a7:
                    c2:18:3c:7b:bf:2c:0b:f9:2c:43:62:fe:23:87:17:
                    d1:34:b9:cf:06:a7:41:37:8a:a8:c4:24:d9:ad:16:
                    c7:f7:1a:3d:a8:80:c5:a6:be:05:7d:67:00:6f:07:
                    a4:69:2a:1e:54:68:f7:74:ef:04:34:f8:94:50:5d:
                    2a:f6:a4:65:75:b7:37:89:34:c9:b6:84:2f:ff:70:
                    e0:e9:da:04:6c:35:5a:e1:e8:c2:61:fc:55:9a:90:
                    46:40:fd:a9:ee:79:30:48:21:b3:fd:03:f9:be:7f:
                    4b:19:9a:70:ea:22:8e:75:da:7b:e0:e8:54:f2:7e:
                    6e:77:76:e2:97:6e:53:ba:db:27:27:48:da:3e:d1:
                    bc:ca:32:87:ad:c5:39:1f:51:d9:f4:a7:35:96:0f:
                    37:38:ec:a6:71:e7:cd:0b:57:51:4a:41:b9:ac:1e:
                    bd:d9:f3:1c:41:12:7e:e6:d5:f6:6f:20:09:f7:8f:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8A:39:0E:47:6F:02:3E:3E:62:05:F1:BF:BA:07:AB:0C:36:B2:F5
            X509v3 Authority Key Identifier:
                keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:30:cb:31:30:d7:9e:92:a2:ce:52:9f:21:eb:72:15:23:a1:
         a9:23:5f:72:0b:db:9f:30:36:0c:6d:72:ca:a0:14:de:a4:47:
         c9:47:ea:2a:7e:14:b3:a2:b2:5a:3c:ba:15:41:39:ec:8a:9b:
         4f:3d:ab:3c:5e:11:8d:1b:ff:f3:26:2e:2d:57:85:7e:2e:00:
         c2:22:4f:00:4a:f9:dd:af:3b:2d:77:a4:45:7d:8c:15:f3:35:
         b7:40:6f:54:b4:37:84:54:e7:32:bd:7b:05:50:a6:12:2b:1f:
         9b:02:9b:a7:3b:25:06:32:a3:17:25:63:4e:4c:c3:c6:f3:9f:
         3b:26:4b:45:79:ac:23:4c:f5:af:1b:4f:ba:12:f7:4e:7c:a1:
         16:80:35:f7:38:c6:0b:1a:b4:3e:13:74:09:1c:55:1d:d9:c0:
         f9:f4:31:3d:94:3e:0f:0b:38:01:ee:3e:00:7d:94:b8:1d:95:
         ae:f7:5f:79:94:6d:57:d5:fc:4d:f8:63:f6:70:d4:ee:d7:bc:
         ff:51:66:07:78:72:1a:2d:66:c0:5a:0e:bd:18:8a:d7:0e:16:
         3c:42:6d:40:36:37:35:5b:9a:f8:03:c9:92:7a:8d:9f:fd:2e:
         05:72:c6:76:e0:31:b8:21:a5:fe:41:d0:cd:43:88:b1:68:2b:
         ed:52:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----