Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File:                     zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier:          tjdLl+jTPo496dBTZenSO3apn5jOrFNuWJY4Do6hEfQ=
Subject key identifier:   74:6D:84:50:B6:E5:9D:F5:3B:5A:FB:0A:6F:BA:30:67:39:06:95:C3
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer:       /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial:       01962F068AF4B30532A1ED1AB50BDEDB0E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number:          0E67
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=)
                          2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: OVRgIjG0BBNmtg3QAeO9k9XnplzNYefscSAl/TxBFVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8a:f4:b3:05:32:a1:ed:1a:b5:0b:de:db:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=746d8450b6e59df53b5afb0a6fba3067390695c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:83:89:5c:6c:c6:65:d2:8d:a0:bc:88:07:
                    bf:13:f0:7a:53:e3:a2:bb:ba:82:0b:26:58:3e:0d:
                    74:7d:a9:c1:a8:41:7d:dc:e3:e1:b2:ca:f9:35:4c:
                    aa:4c:f3:59:ad:3e:d3:72:74:00:b6:fc:06:54:04:
                    db:20:92:3b:1f:3d:36:11:2b:38:de:86:28:f5:dc:
                    65:52:72:ae:bf:b3:aa:bb:12:f3:19:d5:83:23:a0:
                    11:b3:d1:d3:d8:a9:55:2b:1b:7a:e7:cf:39:31:12:
                    72:e7:a6:76:ce:2b:df:cf:eb:14:ea:17:6c:0d:a1:
                    1c:7a:d2:cb:bd:8a:4e:a5:51:c0:0a:bd:51:a7:63:
                    34:cf:eb:ab:e5:4d:95:32:16:51:22:63:1e:d0:99:
                    80:fa:dd:df:94:8c:23:87:d2:ac:db:20:b1:d0:ac:
                    92:8d:06:83:60:cf:58:7a:ac:8d:7a:24:10:7b:49:
                    97:12:4c:60:56:d8:54:f7:d6:3f:d1:9d:73:76:0f:
                    b1:c1:ce:cc:80:d3:a7:42:0f:20:5d:89:2a:f7:28:
                    9f:db:a0:9e:a8:2b:5d:7e:22:b8:47:93:52:75:27:
                    06:f5:e2:44:a3:48:cd:67:ff:55:e8:6f:fc:7f:06:
                    85:46:24:9f:84:d0:51:e9:2c:8d:0e:71:e2:70:71:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6D:84:50:B6:E5:9D:F5:3B:5A:FB:0A:6F:BA:30:67:39:06:95:C3
            X509v3 Authority Key Identifier:
                keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:44:72:17:60:16:c0:19:b5:60:84:9e:3e:63:ee:09:00:7f:
         a4:ad:97:ce:71:9f:f0:ab:4d:ad:f5:17:98:aa:2c:be:92:5c:
         7b:b7:1a:dd:a2:8a:b9:d7:fa:44:72:40:e4:73:44:fb:bc:27:
         ae:cd:2e:9d:24:8e:7e:f2:e8:38:c7:24:37:fe:10:36:7d:c7:
         0a:d7:04:2c:22:b9:36:6f:80:a6:6e:9d:d5:df:d0:42:28:58:
         2b:e5:9f:c6:89:eb:00:70:26:75:2d:80:6e:3f:4c:a2:d7:ff:
         99:93:83:6f:4c:a7:e5:a7:58:45:9a:eb:cc:5c:c2:52:a9:6d:
         f1:1f:e6:4f:c5:65:42:43:18:9f:07:ea:f2:7f:7e:af:51:3e:
         8c:23:8a:7e:e4:66:90:82:02:0b:55:b4:36:7f:d0:77:c5:67:
         88:2f:f8:f8:b2:a6:48:2c:c4:a6:3c:21:e8:b4:0b:9d:93:d8:
         43:cd:bd:d8:98:b4:40:f8:aa:dc:b6:84:45:a2:14:b2:9e:64:
         93:bd:0d:37:ba:65:e1:cd:1d:4d:99:ad:8c:72:46:9a:63:a2:
         cc:38:54:49:1a:29:a8:6c:9e:86:a9:42:d0:43:67:66:ba:d6:
         c0:88:09:57:89:10:3e:eb:b7:0a:1e:ba:79:fd:22:f7:9d:61:
         92:8e:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----