Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File:                     0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier:          I8QXQvT6ialJTkW1YIeP9mGNcMnPPLXtik7gEyjGkZo=
Subject key identifier:   C7:6B:72:6E:FB:EF:49:83:8D:14:9A:86:D2:97:9B:B9:F8:B7:79:41
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer:       /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial:       01962E98E1AF7AC3462305B4F3372D47BDA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number:          143B
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: 5WZC5t/tacpzzIWVTp5stOatKbSf2Qnw90v4PZY3wAg=)
                          2: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (hash: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e1:af:7a:c3:46:23:05:b4:f3:37:2d:47:bd:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=c76b726efbef49838d149a86d2979bb9f8b77941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:5c:55:4f:a9:1d:40:5e:cd:c2:9f:9f:72:
                    89:b8:7d:d5:b5:b6:df:b4:96:ef:9d:77:cf:28:ba:
                    46:b7:46:03:43:86:54:86:39:40:5e:79:58:76:c6:
                    67:e3:63:65:ff:f7:46:b7:e5:fd:40:c0:6f:ea:a4:
                    f8:c8:62:ca:72:c6:54:0d:bf:12:ba:85:bf:ee:c0:
                    39:ad:d0:2c:f1:9e:5e:ae:b5:48:82:df:36:d5:f0:
                    4c:ea:84:a5:55:25:51:25:30:86:20:de:f6:79:61:
                    2f:5f:bd:30:48:ad:a9:b7:a9:38:ad:35:83:d7:2c:
                    c0:77:e7:77:5c:53:81:67:2a:bc:02:d3:87:e7:28:
                    db:eb:12:3d:10:29:bb:8e:b8:f3:a7:78:c1:df:7b:
                    52:a4:9e:dc:c8:67:c1:37:22:34:2f:e6:46:19:e8:
                    19:97:04:7f:a5:ef:0b:ea:08:eb:cb:3a:fd:7a:02:
                    b7:da:e2:b5:a4:8e:1c:8e:5c:a8:f1:e1:ff:27:88:
                    65:fe:c0:de:34:7d:9e:4c:c9:e8:90:3f:9d:94:43:
                    43:27:60:6c:05:c0:a0:d5:d3:33:8a:3e:d1:86:5e:
                    6b:f6:d0:a5:5e:4b:0a:f8:ec:17:d2:c0:8d:31:8c:
                    a6:01:68:c0:ba:ee:02:12:ad:e1:c8:f0:9e:a8:e8:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:72:6E:FB:EF:49:83:8D:14:9A:86:D2:97:9B:B9:F8:B7:79:41
            X509v3 Authority Key Identifier:
                keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fa:61:84:4e:7c:c7:36:8a:13:4f:cb:0d:e4:6d:b1:a4:aa:
         6b:89:57:12:03:5f:17:7a:e1:7f:e4:b9:8f:b7:be:ad:28:8a:
         22:03:47:53:6e:ce:d3:45:8d:4c:eb:2d:bf:d2:c0:9a:f9:5e:
         04:0d:8d:42:5b:63:c1:96:09:68:e0:bd:72:25:4e:b2:25:62:
         40:f7:94:1a:2a:60:92:91:60:ef:ab:4c:9b:2a:1a:53:5f:c8:
         a7:c4:45:33:3c:bd:a5:d9:91:84:63:dd:77:5a:01:2b:cf:7a:
         ca:5d:eb:d8:b9:b2:6a:39:b6:36:27:93:74:79:b6:56:0c:2e:
         ab:7b:1e:d7:88:90:e4:3e:5b:ea:10:47:b6:bc:10:9b:16:fa:
         20:0a:40:6f:97:b9:f7:37:18:9b:12:d2:4b:0f:54:ac:b7:0d:
         83:34:26:21:7c:fd:24:c3:df:5e:80:cc:95:b0:1e:a5:20:ea:
         e7:71:21:da:c5:87:4b:53:05:90:6d:90:19:ad:49:10:b1:f5:
         49:e0:d0:16:e4:59:4d:b0:2c:5f:b6:61:87:37:7d:df:a1:34:
         e4:65:bd:bd:2d:9a:77:b0:13:a8:f0:dd:c0:d2:d5:c9:74:1c:
         66:e7:e5:90:bb:05:8f:8e:a0:dc:7c:df:4c:d0:1f:0c:62:d5:
         c5:2f:ab:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----