Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File:                     zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier:          8So6d6TNhXZ3qNBGI/Odz01HhUodoioS5Qv090ECjsM=
Subject key identifier:   91:AC:5A:FC:27:DF:5E:28:9D:B5:63:C5:03:0E:39:89:03:0B:D6:93
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer:       /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial:       01962F74762CF128E05BBA0127BD61AE5066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number:          0B40
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa (hash: 6Ep9rh8riGcgqLK1eN8d8mtWbuCz5+WFjzg4sxJvKMw=)
                          2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: LuYURJOAwcT23+vyQSoj6n+hy2a7Bjs4vhNsMf7+COU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:76:2c:f1:28:e0:5b:ba:01:27:bd:61:ae:50:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=91ac5afc27df5e289db563c5030e3989030bd693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dc:80:a7:ca:0b:95:ff:36:4e:6f:dc:0d:22:
                    36:a2:b2:d1:dc:57:9e:16:0b:1e:e2:2c:e3:a0:7a:
                    ed:7b:15:3c:1b:29:fc:76:88:7d:c1:97:9e:94:2a:
                    53:83:88:51:cc:43:aa:12:fe:09:a3:8b:fa:e5:42:
                    90:d2:57:72:17:b7:60:a1:36:8d:c9:38:da:1e:d1:
                    36:a4:2d:fa:99:b0:81:3a:b9:d5:8f:05:3b:bd:db:
                    30:d3:9f:f3:d1:c5:e2:4f:61:d8:2e:3a:e7:7d:32:
                    a1:8f:3f:3d:bf:7f:d1:0b:ff:3f:ea:96:03:0d:66:
                    71:f8:2d:c8:0c:48:e6:aa:b0:7b:55:96:88:ef:84:
                    a8:df:72:d4:d4:3c:94:6c:f6:11:a1:87:9c:2a:0a:
                    17:ec:77:93:08:a6:04:be:fd:30:e4:a0:ec:93:1d:
                    7d:74:4f:b7:95:ac:01:90:de:9f:f2:4c:95:64:07:
                    57:bf:31:78:b4:67:7f:57:60:2d:03:a6:67:ab:23:
                    cd:87:52:d9:85:8a:69:ae:a1:8f:a7:04:17:68:30:
                    9d:da:81:66:2f:21:79:d1:47:66:99:5a:8d:ba:06:
                    ab:87:82:68:11:fa:46:09:5e:9a:60:cc:e4:ba:62:
                    09:e9:83:99:05:9f:3c:63:5c:1b:20:b7:1d:a6:38:
                    c1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AC:5A:FC:27:DF:5E:28:9D:B5:63:C5:03:0E:39:89:03:0B:D6:93
            X509v3 Authority Key Identifier:
                keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:62:03:fb:84:69:43:16:1f:1d:6d:cf:d6:e0:16:fb:df:ea:
         50:84:6e:72:bf:0d:c4:70:c2:78:d3:b1:4c:bd:37:fe:b2:3c:
         7a:80:c2:c4:77:47:00:ae:ab:18:53:89:84:1e:b8:ce:b3:0f:
         73:c7:63:98:a6:08:d0:29:08:24:9e:fc:63:17:4c:a3:0a:5e:
         d4:51:c0:4d:b1:75:fa:9f:10:55:d7:a7:9e:e2:ff:b7:27:6a:
         78:df:eb:de:55:c3:50:60:a6:27:47:0f:ee:f6:f4:a7:60:d3:
         db:70:dc:12:be:8b:81:a7:96:16:2b:98:e9:3c:83:ba:26:47:
         ce:d5:18:19:58:2f:46:ce:1c:ce:15:01:1c:38:24:fd:5b:78:
         3b:4f:e5:90:4a:b7:53:93:fa:2f:89:e9:f4:13:1e:04:28:0e:
         2f:92:b2:41:21:0d:b1:70:4a:d3:50:78:6d:84:bd:c2:00:ce:
         66:db:1e:dd:4b:f4:fe:97:18:89:70:68:1f:02:77:f5:b0:cf:
         9f:f1:b4:4a:bf:af:87:3e:d9:a7:69:4e:dc:63:04:50:11:3e:
         d8:4f:38:a5:10:6a:9c:21:16:13:d9:78:25:ee:92:ad:52:a8:
         2f:43:fa:8e:b2:aa:d5:11:07:98:ba:6a:e4:e1:35:45:0b:be:
         bb:58:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----