Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
File:                     zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json)
Hash identifier:          U8DOQsfaha+Rx6p/k15xyKuf+afgSWzsRW3BMrP0mAU=
Subject key identifier:   1C:1A:87:E2:C1:E6:98:A7:94:E7:69:D0:B1:E5:F4:15:16:63:E2:51
Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
Certificate issuer:       /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Certificate serial:       01962FAB83534A36EDB41C68A067B1791019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
Manifest number:          02B0
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: BBmeL_y8dFZnZVsyof-5HOdh9rM.roa (hash: l+ylGzhBzhl0JipTi0n6QhNTnBVAyKKM7zWtPfY+z3s=)
                          2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: worW6lMP1mKceemzPZqRqv2QV1dQa40flImBBdfzw2E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:83:53:4a:36:ed:b4:1c:68:a0:67:b1:79:10:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=1c1a87e2c1e698a794e769d0b1e5f4151663e251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:12:b4:13:f7:21:e0:93:e6:0b:e8:60:74:
                    50:59:d3:ec:24:dd:38:27:83:f7:02:de:75:f1:e6:
                    9c:34:8e:d5:8b:83:48:4c:e2:85:18:ec:d7:6a:d4:
                    84:7d:3a:03:a8:b0:7f:c3:69:f5:6a:1a:9f:01:e7:
                    6f:c8:40:95:fd:af:c9:b3:07:d8:9c:4d:0d:a2:98:
                    0b:e1:bf:27:5e:c4:23:6d:1e:44:a6:2a:85:dd:55:
                    36:72:69:a1:24:02:6f:3e:7c:56:e2:58:91:92:e0:
                    8c:ae:c0:60:0b:29:3c:de:f0:16:d7:30:ad:18:18:
                    96:e6:b2:1a:d0:fb:4c:82:4d:05:a7:c3:c9:c3:0d:
                    67:d2:dc:fe:3b:33:b2:0a:22:eb:e3:29:8a:96:9f:
                    ef:d2:61:3a:2e:a8:57:ca:27:2a:fd:77:33:b5:51:
                    19:3a:d3:3f:cf:fb:6f:59:7a:8c:3a:33:6e:32:5b:
                    fb:f1:50:a8:6f:3b:a0:18:ee:2c:30:ab:80:94:0f:
                    fe:0b:b9:7b:17:79:71:d2:1a:88:0b:c7:04:30:17:
                    d1:d9:bf:a8:0c:0a:e0:3f:94:37:0c:61:3d:13:95:
                    e9:24:69:b1:88:23:5a:4d:7f:80:cb:55:37:9b:c2:
                    d8:00:ac:6b:49:f6:8b:49:00:70:81:4b:49:53:97:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1A:87:E2:C1:E6:98:A7:94:E7:69:D0:B1:E5:F4:15:16:63:E2:51
            X509v3 Authority Key Identifier:
                keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:28:52:10:2f:11:cf:ec:40:78:1c:ab:a4:73:cb:a0:c9:1c:
         0e:82:b2:ad:a1:a4:6a:31:f8:49:21:6e:01:f4:8b:f5:8e:0d:
         9c:7c:5a:dd:ee:31:91:0e:c1:8e:af:51:3b:b7:ef:85:3f:02:
         e2:83:06:df:3f:a6:31:c8:c9:a2:5f:5d:f4:d2:ad:3d:f4:d0:
         b0:99:b9:b3:cb:3c:6a:8a:46:17:02:24:f7:45:8e:d1:bf:8e:
         d7:f4:c3:0e:6e:26:ff:d9:10:be:06:b6:ff:47:74:aa:e5:8c:
         a5:0a:13:b2:c9:91:77:cd:fd:8c:a8:2f:2b:dd:43:01:5a:d0:
         17:36:5a:01:87:62:e0:27:fe:51:87:b7:3b:ec:0a:9a:b2:ce:
         5f:62:c2:8e:f7:e5:09:36:fa:a4:6a:8e:a1:b0:67:4c:e7:98:
         7d:5d:6b:be:7a:83:b0:bb:bf:91:aa:30:89:af:17:ff:c3:0d:
         22:4c:c6:02:b7:2d:58:27:34:1f:a0:08:c1:38:ac:c5:41:cb:
         27:87:54:9d:4d:12:ef:34:9e:1b:b8:9a:65:85:1e:fe:4d:4e:
         77:c4:63:f9:b6:da:35:de:31:a5:dd:15:31:20:cd:4f:8b:ab:
         ea:d3:05:70:12:dd:c7:41:a6:f6:33:fe:45:b3:d6:02:20:77:
         71:47:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----