Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File:                     zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier:          YT870cOVMbvuTtV9SUOORVu5AC4scapYiI+Q2VYS9Ps=
Subject key identifier:   FE:C9:E6:8B:67:31:FB:23:F0:EB:DD:12:4C:B5:43:34:10:81:67:59
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer:       /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial:       01962ECFDAD1CBFEB4AEB7023E2996933B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number:          0A39
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
                          2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: BU62pxcfmXBgEbwlBOeGkozA0BD3W40LvcfbFVYmhPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:da:d1:cb:fe:b4:ae:b7:02:3e:29:96:93:3b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=fec9e68b6731fb23f0ebdd124cb5433410816759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:62:52:20:75:86:31:0a:3a:01:f5:80:90:
                    90:0a:f4:37:a0:53:37:55:e3:0f:52:86:60:9a:e0:
                    5a:21:c5:13:44:db:1e:24:d7:5c:69:22:de:da:13:
                    23:46:ec:06:0b:ba:b0:f9:b0:80:ea:61:69:fa:83:
                    83:f0:97:6d:43:f1:61:05:99:85:76:17:8f:d6:ce:
                    55:e4:6d:15:41:fe:9d:5e:28:72:73:93:9c:c0:10:
                    a0:9a:b7:38:0c:cd:21:2c:d4:47:8c:65:1c:1f:92:
                    50:a7:4e:45:0c:26:3d:84:b4:aa:9c:40:77:86:35:
                    5a:35:5d:30:3d:64:f3:ce:ff:7b:da:0c:39:a9:12:
                    45:80:28:a5:38:cb:8a:7f:41:06:f7:1e:42:bb:9b:
                    d0:23:50:60:52:fd:52:fd:88:8a:f5:fa:6e:48:47:
                    1e:8c:4d:7a:8a:bb:b5:fc:40:bc:19:b3:d8:ac:54:
                    73:bc:43:5a:77:f7:17:cd:94:12:a4:01:65:93:e8:
                    1d:f3:9c:8d:29:00:c1:ba:fd:c6:73:50:e4:a4:07:
                    bc:c5:a5:af:2b:98:6c:07:36:e9:a2:78:43:03:39:
                    6f:6f:7d:43:bd:22:e9:21:ca:d8:48:f4:fc:4e:d9:
                    85:d3:a7:fa:eb:a1:3b:91:05:81:d7:9a:6f:36:2a:
                    60:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C9:E6:8B:67:31:FB:23:F0:EB:DD:12:4C:B5:43:34:10:81:67:59
            X509v3 Authority Key Identifier:
                keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:37:7c:a4:b5:dd:b8:d5:14:bb:e2:98:e7:d2:c0:b8:e8:
         de:14:e8:88:68:45:6b:f4:dc:96:00:4c:49:c0:94:2b:de:6d:
         e8:9a:b0:2e:1f:62:82:35:2a:7d:04:f8:25:7e:3e:37:40:49:
         66:0c:9c:d9:9d:8d:4c:be:19:c2:54:52:27:48:82:65:a9:b0:
         64:2b:91:42:1b:d9:75:3c:32:f8:bc:77:02:1b:cf:87:e5:2c:
         8d:06:24:60:82:67:93:b7:7b:40:e4:a3:8e:37:84:a9:58:cf:
         a0:36:c4:60:40:67:93:76:32:33:fb:bc:d5:06:9b:56:36:3a:
         a5:23:fb:13:bd:db:e4:f4:e9:93:62:95:be:08:95:2d:3e:94:
         8c:c5:2e:f0:7d:77:6e:c0:0b:40:24:d1:d1:ae:40:81:19:e4:
         d7:81:95:f6:c7:61:e6:74:73:c1:50:2e:cd:65:ce:72:2d:b6:
         7c:4a:de:eb:df:57:c0:e8:bf:7b:a7:f0:30:bd:a0:3c:6d:32:
         64:2a:e6:fc:8a:fe:69:d1:c5:9d:e5:9e:4a:d7:40:9d:87:05:
         38:c8:6a:e2:5d:f4:b9:a0:d8:63:34:4f:5f:3f:40:dc:00:47:
         87:b0:1f:2e:ce:5f:c2:9b:73:6d:dc:69:5a:95:b8:bd:57:3f:
         a3:82:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----