Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
File:                     2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft (raw, json)
Hash identifier:          4L3E+mFb7Oe3ti6XEh4CFGsvyEVef/wEdtM7rQOEwgs=
Subject key identifier:   0A:C1:9B:C3:40:66:89:14:4F:74:24:05:4D:CB:99:27:F4:51:47:6C
Authority key identifier: D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64
Certificate issuer:       /CN=d99becd088794b11daf34c7f54e59f6939fe9864
Certificate serial:       01962FAB8AEF08EC11BB17E5B103C1E514E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
Manifest number:          0208
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl (hash: cijdgscP6FY3JsRLI9IV/3u5yph3EdGitUXQtDH8zGQ=)
                          2: P6mLuYTWcn0KuLmD43cJ982GF44.roa (hash: lthkyf0qk/Tj3D6L/66lHDSOVo0evf5q6TD/uKiHGiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8a:ef:08:ec:11:bb:17:e5:b1:03:c1:e5:14:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99becd088794b11daf34c7f54e59f6939fe9864
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=0ac19bc3406689144f7424054dcb9927f451476c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:5f:29:3b:14:e3:ee:09:63:af:4f:c3:be:
                    07:7f:47:c5:fa:87:f2:c6:a9:e7:0d:c0:19:44:5f:
                    52:f3:60:92:bd:cb:0f:52:04:dc:21:51:4f:74:c6:
                    5c:87:91:b8:ed:77:f3:50:aa:a9:a6:cb:97:c9:97:
                    2b:5b:3a:15:b7:67:83:8d:a8:74:3a:36:16:31:6c:
                    ad:04:e5:1a:ce:38:58:fa:04:4d:5a:fe:81:bd:b1:
                    72:06:03:1b:69:3a:cb:bc:5c:58:27:a3:31:e3:2f:
                    f7:3e:8e:06:c8:b7:bd:ef:a4:35:ae:a8:40:09:86:
                    fe:7d:e0:5a:aa:f3:39:db:cc:34:e4:df:03:b2:db:
                    0c:96:bc:cc:d3:ef:7a:d3:a9:b0:b8:48:20:b2:1f:
                    dd:84:1d:ef:b7:6e:c6:49:e5:10:f5:49:51:bd:4c:
                    73:f2:06:4e:ec:89:1f:0a:5c:76:36:ec:a9:d9:93:
                    28:01:64:fc:7d:30:71:cc:aa:d7:bc:86:ba:f7:02:
                    cb:10:90:56:e2:85:65:92:8d:14:8c:14:88:0f:1d:
                    fe:1d:9d:f3:f1:11:24:b3:93:b4:31:43:cb:ae:62:
                    49:7d:fa:7b:2c:5e:39:56:35:8e:f6:b2:04:5e:f7:
                    a5:67:4b:55:a0:e8:09:65:aa:a0:9d:4e:e9:01:be:
                    11:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C1:9B:C3:40:66:89:14:4F:74:24:05:4D:CB:99:27:F4:51:47:6C
            X509v3 Authority Key Identifier:
                keyid:D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a1:b3:ce:7f:fe:d5:7b:41:33:61:8c:e7:7d:66:3b:7a:e0:
         ca:52:f5:6c:2d:2b:bd:4f:63:bc:ac:8e:eb:a3:db:30:49:59:
         bc:c0:2e:ff:d6:39:ac:8d:2d:ae:60:ab:2c:41:69:a0:60:88:
         db:a9:60:2a:71:ba:9c:26:13:92:62:65:92:3e:a1:ad:95:43:
         ad:5d:48:72:44:d5:aa:77:53:ae:76:3f:0a:9e:3a:ec:48:fc:
         7b:ff:f4:b2:57:e1:57:51:48:9f:7e:07:fd:9f:b3:a1:5b:66:
         9a:25:45:b4:bb:51:fd:b6:f5:63:22:15:47:ef:a0:48:cb:00:
         d4:60:fd:ed:fc:0f:dd:31:0e:7f:04:b5:63:a2:6d:e3:60:c6:
         db:3f:b1:b1:f3:cf:4a:be:99:06:26:f8:95:7a:ec:0d:a2:24:
         bd:1d:ce:b9:b6:0c:68:c5:8c:b5:77:a5:90:d1:48:db:ed:8d:
         f9:71:27:89:72:a9:2c:a3:fa:b8:74:b5:c7:68:d2:d5:01:b3:
         65:a6:13:c7:be:ee:17:0a:f4:56:a2:c3:a3:b6:f7:33:b1:ef:
         9e:e5:3e:3f:c4:6d:09:35:d5:98:0b:6b:f7:70:74:54:19:7b:
         29:89:fb:47:19:87:a7:44:1d:a0:bd:95:09:ee:0f:dc:61:f4:
         9c:2e:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----