Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File:                     zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier:          kjjm/SeVBKgQwEP3wQVigwEsfAglACjfGmFTpOnMShU=
Subject key identifier:   77:E1:70:F9:3D:E3:00:6C:95:86:8F:DE:A2:FF:39:C3:A7:49:E7:38
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer:       /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial:       01962FAB3376D86159D9CDCDF27C9D6F3FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=)
                          2: Jb_gFPV2he7uZ_D9dGgBvUqstrY.roa (hash: 76/q3p10jkYhjXz60HYg6xHRHGQY02emHt13PPRY/0Y=)
                          3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: AEMmvwNn5DbTp2+aIbVB3ScZLJayOxm+cDAs2BEO5sU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:33:76:d8:61:59:d9:cd:cd:f2:7c:9d:6f:3f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=77e170f93de3006c95868fdea2ff39c3a749e738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:2f:52:fb:0e:8f:02:a2:b3:da:89:11:47:
                    c2:90:59:20:47:f2:92:cd:05:81:81:26:b3:f8:5e:
                    d6:8c:23:a9:1d:02:de:0c:af:78:3b:cf:5b:a5:78:
                    ef:1e:9d:05:d7:26:94:c6:85:9c:04:38:6f:31:dd:
                    cd:62:c7:38:8a:bb:58:07:72:70:0c:a2:39:fb:60:
                    bc:2a:19:3c:fe:bd:08:e0:3c:34:91:d5:82:bb:56:
                    28:90:69:ab:81:b7:81:71:fe:80:86:6c:e3:83:c7:
                    2d:cc:77:0b:91:de:b5:2a:87:80:fa:7d:5b:f1:4a:
                    76:18:87:5d:2b:80:d8:b0:0b:b6:67:e0:bf:e8:ea:
                    30:bd:6e:18:bc:53:47:98:b1:a2:5b:af:1e:a7:06:
                    48:6c:da:04:ac:ac:d9:c0:1a:19:48:c2:24:3a:c7:
                    b4:7c:a5:70:5d:4d:63:65:6c:93:5b:93:e2:e6:3d:
                    18:41:e7:f7:63:11:03:06:6a:47:ec:ca:ba:c8:15:
                    21:a3:9e:1d:22:b2:c4:2d:97:ff:26:9e:50:cd:59:
                    e2:8f:a0:9e:d9:4c:e1:38:56:5c:b6:1e:ac:fe:62:
                    74:40:a1:d9:dd:20:ca:e5:40:91:1a:38:c8:8d:fc:
                    38:ab:86:76:e4:9d:06:f4:5c:aa:95:0c:6b:86:84:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E1:70:F9:3D:E3:00:6C:95:86:8F:DE:A2:FF:39:C3:A7:49:E7:38
            X509v3 Authority Key Identifier:
                keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:26:89:3c:54:f1:cc:3a:4f:f4:1a:e2:40:ca:4e:55:34:a8:
         23:de:99:d7:84:aa:e0:f9:27:ad:c9:94:1f:60:50:61:0d:cc:
         dd:d1:8b:3d:a1:8e:05:30:dd:a3:26:b0:54:2b:1c:be:ab:c9:
         ed:1b:c8:45:9a:a7:c9:2c:db:33:8f:34:75:8b:08:c2:f1:d0:
         5b:f1:1e:84:fa:37:75:d0:2c:64:d3:3c:b9:82:88:96:24:a8:
         4a:dc:f6:20:81:3b:e4:63:f4:15:16:61:55:c7:36:9d:2c:65:
         15:73:ad:e9:4d:9f:d9:57:24:a0:62:db:6f:32:c4:27:d4:3e:
         fa:b0:74:1c:b9:84:1c:42:7f:4f:b5:25:73:42:fd:40:b3:1e:
         52:fd:9a:67:fe:92:74:5b:91:b2:55:07:7e:7e:da:77:be:d8:
         a6:9d:b2:b9:d3:05:3d:9a:8e:14:45:f8:28:f5:6d:27:e2:71:
         73:9e:61:27:aa:dd:0c:a9:32:8d:1b:3f:3d:9d:4d:da:8b:7f:
         93:bc:e8:5b:1a:0c:96:0c:32:50:7d:09:c1:19:5e:1f:fd:fe:
         54:b6:19:f4:c3:27:30:9d:eb:af:03:b4:ee:6f:0f:f1:71:80:
         08:56:b5:2d:b2:a7:0a:5a:47:d1:bc:5d:cf:00:55:37:0c:ea:
         0e:51:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----