Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File:                     ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier:          bdpdlRMTucWbvFg/9yqs1rPv6fUjxitVwmRdwNB8C14=
Subject key identifier:   F9:A2:C8:AC:70:4F:CF:F6:63:46:A3:6E:DC:89:2D:B1:64:E0:E3:6C
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer:       /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial:       01962E2B4E60842CEF1D542EAB358D5D5A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number:          0777
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: K5gJRaPdUKn9XKhzO7AibxY9CA0.roa (hash: qUxgMl4Hgu/d5oBnuOvT0GW4I1N7zX5/ljI5wWQ4TLY=)
                          2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: 2lbyc22k7u1bWdEB6KLWgU5Tuw0qb/gl8ia2sLSb3A8=)
                          3: _U7TKaQkv0gDvtMnKrNnbIWERmc.roa (hash: FZz1mY5/p4ukf0qO7zFoKrsIjV3lp2u1Lai3o16W3qQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4e:60:84:2c:ef:1d:54:2e:ab:35:8d:5d:5a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=f9a2c8ac704fcff66346a36edc892db164e0e36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:ba:54:0d:2c:94:a7:28:6c:d5:51:fa:67:
                    14:32:c0:9c:00:56:18:e8:56:28:7b:16:3e:ce:02:
                    28:8a:1c:e0:e5:c1:42:2f:7c:08:32:53:c7:35:d8:
                    32:fc:ce:b5:2f:21:5a:b7:76:08:0b:a6:43:6d:a5:
                    20:21:88:60:33:b1:ca:d5:70:68:2f:41:d7:bb:21:
                    84:6a:75:ae:78:5f:b3:7d:ae:a9:62:fb:2a:f7:b2:
                    b4:94:58:c9:c0:1b:42:d5:03:71:1e:19:fc:3c:54:
                    37:a1:f0:62:44:f6:f9:ae:80:a0:c8:b0:12:78:8a:
                    e0:57:94:17:58:50:d9:80:74:b3:2e:f3:0e:a9:2c:
                    1a:67:88:0e:f9:7c:13:4e:25:ed:0f:a6:14:e6:db:
                    9f:14:b2:15:b7:67:1c:bd:dd:d0:d4:51:41:ce:b4:
                    b3:5a:53:cc:5e:f2:c7:70:2a:bc:b1:72:1c:1d:12:
                    6d:cb:49:c5:6e:4e:bb:96:16:59:6c:18:d6:1c:95:
                    cc:f8:92:38:a3:3f:0a:ec:58:7f:a0:a9:33:31:70:
                    a9:cd:e0:68:97:c5:08:95:56:4e:55:54:75:b5:7d:
                    db:5e:ab:fa:65:f8:aa:01:3d:a0:5b:d5:29:62:24:
                    cf:eb:2a:cc:3c:e9:da:05:3a:bc:6b:24:e0:49:9c:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A2:C8:AC:70:4F:CF:F6:63:46:A3:6E:DC:89:2D:B1:64:E0:E3:6C
            X509v3 Authority Key Identifier:
                keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:f6:74:f2:9d:31:b9:b3:d4:8d:4f:57:01:b9:e6:56:36:
         8f:86:d6:ae:2d:5e:a2:1a:95:3e:fc:c4:00:83:e5:1a:59:76:
         d3:be:31:98:b6:c1:b0:55:53:b8:ca:28:56:f4:a6:ba:f2:05:
         97:97:01:74:3f:76:6d:8a:67:41:44:e7:1d:96:b0:36:d6:83:
         46:06:e9:ed:b8:f9:19:4c:13:ce:6c:00:9a:e6:34:f9:2a:41:
         16:61:10:00:c6:7b:0d:12:13:ec:aa:af:a5:f8:47:bf:49:e2:
         43:9d:33:f2:06:09:0d:45:27:f4:19:87:05:ad:59:ea:47:b3:
         69:fc:6c:0c:47:6e:7c:3e:35:31:33:50:b5:3c:9a:81:7b:97:
         5f:02:eb:d4:7e:8f:45:24:23:89:39:15:77:51:d2:26:c5:66:
         76:a2:75:fb:64:ee:d5:d3:fa:8d:13:3d:68:e9:f8:0d:28:c3:
         c5:e2:93:1b:40:a8:34:fe:45:3c:f8:2b:a6:90:a5:90:c5:71:
         c9:a2:4b:29:15:d9:ff:f3:69:4d:69:ee:63:d3:50:e6:69:ef:
         7a:29:2f:66:cb:97:ba:de:40:eb:11:a8:c7:0a:6c:22:d1:df:
         ed:c2:2f:37:40:3f:ac:e0:01:da:de:d7:68:06:1d:04:5d:03:
         5b:c8:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----