Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File:                     zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier:          7yOKVIImPYO8KZWudCgcXchXUrsKLRAb8oehARKSG0U=
Subject key identifier:   6F:6A:3B:C4:B3:86:AB:03:FD:50:FB:17:0B:1C:53:2F:A7:9E:E2:5F
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer:       /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial:       01962E6188BA2347C8014F1965FDDE5565D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number:          02E3
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: /FP/PULbi744wMBuu7cgcP1RZbfsQW4gGv+BNrQzpic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:88:ba:23:47:c8:01:4f:19:65:fd:de:55:65:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=6f6a3bc4b386ab03fd50fb170b1c532fa79ee25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:12:30:0c:fe:10:da:5d:11:02:90:74:ad:
                    96:0f:d2:b4:cc:5c:65:0f:17:3d:50:60:50:e5:08:
                    18:18:d6:23:d3:87:0d:27:d5:1b:53:6f:c2:ad:f8:
                    53:fc:84:77:79:49:f9:f3:fc:6c:11:34:f8:04:12:
                    b2:d6:83:51:bc:c2:e1:54:75:0a:fe:fc:26:3b:c9:
                    ad:ca:b5:3c:76:b4:ca:5f:33:ba:30:8e:15:8b:fb:
                    31:29:4e:be:70:7f:83:6a:5e:6f:57:6d:0c:be:77:
                    c7:89:3e:09:ee:7c:8c:c9:fe:8f:b1:fd:36:23:44:
                    e3:66:a8:4a:c4:c8:a5:06:d9:bd:ff:f3:1f:59:41:
                    06:34:01:1b:6d:a1:11:69:9d:3f:78:d4:3b:7b:ec:
                    d9:6e:4b:2d:df:3f:8a:16:67:cf:c5:cd:7f:68:d3:
                    18:46:0d:4b:15:98:3b:33:9c:89:5d:97:3b:69:58:
                    e9:2c:5d:79:17:37:b3:40:58:aa:3c:09:a4:6c:68:
                    77:1f:6a:28:07:ad:91:39:5b:35:4a:da:41:e5:f5:
                    54:6c:ac:f0:c8:2e:c9:81:ef:fd:77:27:2f:73:c5:
                    b2:cf:66:7d:40:ef:60:20:bb:39:c5:37:5e:4f:51:
                    89:48:a0:11:86:78:ea:d9:a5:4b:bc:3a:35:01:06:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6A:3B:C4:B3:86:AB:03:FD:50:FB:17:0B:1C:53:2F:A7:9E:E2:5F
            X509v3 Authority Key Identifier:
                keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:97:f0:9d:8d:83:f9:1b:83:c8:8e:a9:f7:02:ef:fb:ad:26:
         53:58:1f:af:9a:91:52:95:4a:d0:5f:35:73:5e:30:38:49:ce:
         72:f5:d5:2a:55:0e:c5:b1:ac:7d:f2:c6:03:06:a8:00:0b:a9:
         35:f2:af:04:a5:eb:d0:9b:e7:ce:a7:e0:4a:f7:dd:9e:42:3d:
         8c:a6:2d:55:5f:cf:ad:a8:fa:c5:0d:21:eb:04:9a:09:4d:2d:
         08:2f:5a:b8:8b:9d:a2:a0:20:76:9b:21:72:2d:18:eb:da:28:
         55:f6:51:b2:1e:64:75:f2:b7:f9:fc:77:ef:df:f6:b9:5a:20:
         48:33:2a:00:88:ca:c7:98:b2:92:61:ce:38:ab:ae:99:d8:82:
         2a:56:48:5b:89:73:32:d3:89:e5:55:7f:b0:68:fb:26:2a:82:
         79:fe:4a:60:b8:b7:10:9a:bd:17:b8:a1:6e:8d:12:e6:38:6d:
         2a:f5:2d:22:ab:40:17:1c:39:4a:15:70:aa:e5:b8:3f:7c:29:
         73:1c:73:ea:71:7e:79:24:74:b9:91:13:70:8f:e2:0f:54:01:
         51:67:21:99:cd:ff:cc:c3:d0:63:22:bf:a1:3b:e2:bf:d3:4c:
         22:a6:28:76:80:a7:a7:39:7b:65:4e:54:48:3b:be:3b:46:df:
         10:43:20:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----