Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File:                     zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier:          gsXdT9PAB1o8IuFrvsaRPfmWdxKIlutJICE0vTg2Ccw=
Subject key identifier:   69:4E:36:24:23:99:F0:AD:B5:17:5C:44:D6:9F:52:3E:5C:CB:D9:01
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer:       /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial:       01962E99190FEFF6D334ACFEE423A0D03D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number:          0E3D
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
                          2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: +jJA0ZzuHry+ggVdMknVPsqaN/FTYXQp6fny9OozQn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:19:0f:ef:f6:d3:34:ac:fe:e4:23:a0:d0:3d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=694e36242399f0adb5175c44d69f523e5ccbd901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:39:6e:d9:e9:f7:d8:a4:09:6a:4e:8d:f1:
                    05:b8:89:80:f9:78:12:80:78:b7:c4:17:cb:4d:83:
                    10:da:ce:f2:ad:cf:a6:f0:2b:cf:43:cc:e1:b6:b5:
                    f0:57:74:61:45:5b:3d:6d:a2:c8:3d:0a:c9:da:ef:
                    f0:d1:e1:84:6e:6a:37:c7:11:41:e2:4d:9d:41:f6:
                    23:43:91:7a:1c:ea:5a:0e:5f:9f:65:be:9f:a0:13:
                    46:4f:c9:f9:65:0b:11:ed:22:48:bc:c6:b9:b1:6b:
                    4d:9e:c7:3d:4e:7f:4d:d2:7d:5d:53:d0:44:0d:ab:
                    c5:5c:22:3d:32:6c:69:76:19:6c:18:78:6f:5d:4d:
                    aa:15:e3:60:08:cf:b5:a3:07:3d:49:8a:32:9f:ad:
                    c3:42:cd:19:0e:3b:87:27:6a:55:e5:d7:c5:09:48:
                    a1:52:38:fa:00:8d:54:ef:72:2c:19:1e:0e:b1:0f:
                    68:26:8f:79:58:fc:50:51:60:20:24:48:86:7b:26:
                    75:42:fd:4f:33:45:58:26:25:b7:58:da:b9:18:de:
                    85:8d:36:1e:52:29:96:64:9f:c6:bb:f4:5e:02:c6:
                    3a:1a:0c:44:61:5a:4f:2c:dc:c6:dd:26:d8:66:39:
                    c8:e2:8b:90:9a:6f:9f:a2:74:b2:5c:88:74:67:4a:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4E:36:24:23:99:F0:AD:B5:17:5C:44:D6:9F:52:3E:5C:CB:D9:01
            X509v3 Authority Key Identifier:
                keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d8:cb:f3:53:09:5e:4a:19:38:1e:a6:19:02:88:52:cf:32:
         6a:1d:57:3a:ac:43:23:b3:f1:e7:dd:9c:a9:aa:79:38:73:1c:
         8a:4b:49:8d:8d:7c:83:20:4d:d7:66:1b:8d:1d:16:41:04:45:
         d6:16:a4:8c:08:a2:b6:3a:1e:ee:42:6b:4e:67:fe:ff:89:c4:
         4a:b6:df:4c:42:63:2a:61:34:75:64:64:03:a0:28:4f:13:aa:
         d9:8c:bc:e2:f2:18:8f:41:22:2c:da:f3:39:53:31:55:47:aa:
         e6:b8:f4:bf:f6:43:c2:fd:f5:0c:f2:1d:d0:53:7b:79:83:bb:
         96:37:18:23:d2:e6:10:6d:89:ea:36:f0:37:5e:c9:61:3e:a4:
         55:f9:16:9c:de:3b:1a:ab:af:2e:19:88:51:5f:aa:9b:77:37:
         bc:13:69:69:1c:78:77:d3:d3:07:27:10:77:6a:4d:1d:8c:f0:
         63:c1:f2:53:a5:73:cd:0b:5f:ca:83:70:ba:5d:57:de:8d:ca:
         b7:1b:75:58:b5:48:13:d5:a4:f5:e7:c7:2d:18:d5:0e:23:04:
         67:e4:b1:07:09:27:ea:c0:dd:f3:30:fb:36:56:13:25:e4:e7:
         32:da:d8:91:46:65:84:13:84:6c:82:1f:05:08:e8:61:b6:50:
         76:6c:34:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----