Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          DuYViQAveDhSPv1PvLajz3LqoNxe+sffwT3cY+bezg8=
Subject key identifier:   02:37:CF:0B:67:AB:55:6A:46:10:1A:82:5A:39:AB:D2:16:90:B1:7B
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       01962F3DC7B28399918B92EA82E2B564F389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          046D
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: 03rudiLJ4X6lEQN1YSlMf43Mm3qsRV2CNR1nzw6LAZs=)
                          2: uYgWW_zdLQsajiXhTq8i3RTL28Q.roa (hash: 97sMIzW9Z3Yd5hS5dOMaGnDa8EPHNF/+DV+wEv9V9uQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c7:b2:83:99:91:8b:92:ea:82:e2:b5:64:f3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=0237cf0b67ab556a46101a825a39abd21690b17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:c1:52:67:33:0f:39:28:13:c4:ad:df:bd:
                    bd:3d:68:91:c3:25:47:05:c9:25:1b:84:9d:05:9e:
                    8d:0b:fd:19:2c:8b:96:bb:e2:17:0c:9b:ae:c6:4a:
                    9d:89:c6:13:4a:ed:ea:16:00:83:a3:05:f7:cd:39:
                    ee:12:f1:0b:35:1e:4a:d2:be:a9:1c:7c:3c:95:c2:
                    5f:bc:dd:9d:bf:ec:cb:de:99:2b:58:0f:30:da:c4:
                    dd:e1:20:7a:f2:ca:e9:40:9d:5f:23:35:bc:fb:cc:
                    bb:be:8a:60:23:8f:7d:1e:92:a5:4e:94:f7:f2:f9:
                    70:90:5e:7e:68:96:5f:7d:44:f5:0b:01:2a:c5:8c:
                    87:7d:2f:bf:53:5b:65:d4:b5:bf:b6:0f:10:96:bc:
                    11:2e:ce:c5:e0:ba:3e:31:e2:50:b1:15:5a:a1:88:
                    e0:c8:72:9c:3b:20:74:26:a5:8f:55:80:f8:57:2e:
                    c0:92:50:73:aa:87:bc:f0:b8:96:62:25:b8:08:6c:
                    f2:f5:9c:d8:31:ee:3c:16:92:bc:b3:2c:af:ba:93:
                    4f:f1:03:3d:cc:ef:c6:b1:a2:fb:ce:84:9f:56:3f:
                    eb:c9:e1:4e:c3:5e:cc:3b:04:16:11:f8:72:92:4a:
                    ca:9c:76:47:a8:bb:99:38:2f:b4:2c:51:22:fa:b6:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:37:CF:0B:67:AB:55:6A:46:10:1A:82:5A:39:AB:D2:16:90:B1:7B
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0d:32:dd:95:8e:b8:45:88:8c:4b:bd:c9:58:24:55:65:82:
         eb:eb:38:d1:f6:e5:93:db:3d:3d:a1:40:65:b7:32:7d:ba:e5:
         9c:90:77:be:2d:90:4f:66:a9:0e:03:bd:bc:00:7f:ad:b8:be:
         94:3d:a3:1a:99:77:d9:ad:66:a7:68:d4:cb:39:bd:93:02:37:
         db:99:fc:44:51:04:50:0d:32:24:6a:fe:c8:38:66:c1:5c:4a:
         6d:d4:b3:a6:96:d8:dd:43:00:61:74:1b:29:13:f3:b5:24:4c:
         5f:26:70:8b:f5:a0:6f:68:3b:4f:77:bd:8b:cc:19:c8:95:bb:
         19:69:38:01:5c:83:65:aa:16:de:65:fc:3d:7e:58:d1:e9:0a:
         f9:7a:c8:86:47:c3:e8:b8:6c:58:0a:6c:b7:5c:22:c6:f6:38:
         76:3c:7c:de:40:42:fc:2c:7c:14:fc:9c:e7:29:0c:0b:d0:9f:
         2c:5e:d4:19:55:04:8e:65:e2:b3:c9:7e:9a:db:19:c2:25:d9:
         b0:cd:14:c9:71:d3:0c:ed:39:e9:a3:61:63:53:dc:dc:ae:a1:
         0e:5d:ac:16:66:e2:35:7c:5b:4e:58:e8:b8:e1:75:77:94:51:
         85:10:8c:9e:99:6b:ef:2e:f9:25:b8:4a:d9:ef:92:22:16:75:
         9a:76:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----