Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File:                     CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier:          fwyZVem4nLyBNPkw1kBt4s0iS9HoIKEsP0sOoUKWZCA=
Subject key identifier:   6D:6B:61:13:C1:22:F6:52:C5:A4:69:36:45:08:3E:5D:97:C9:ED:80
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer:       /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial:       01962ECFD9A2AD19A26CE1059D2E368F209F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number:          0D2E
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: 4TNnw5YyypUfVkvoH0oTOypmqg1KPc0YuPZDzLzSa1c=)
                          2: xhegVBAKk0XT86_ijfwUPQBwbjE.roa (hash: HzUtvDRCwVOU+h+rA3imDZdqrxNmwf2Nw3JBM6GcfyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d9:a2:ad:19:a2:6c:e1:05:9d:2e:36:8f:20:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=6d6b6113c122f652c5a4693645083e5d97c9ed80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:82:53:1f:e5:20:18:9c:da:5e:e7:93:ab:
                    f6:13:97:bb:55:0b:fe:a3:12:21:d2:82:b3:ac:61:
                    b8:95:63:ae:ee:cb:87:01:a3:40:7a:79:39:ec:5a:
                    5c:e1:1e:9e:dc:03:d0:f3:58:65:ee:39:12:a2:e7:
                    8d:c8:90:62:08:02:fb:7a:cb:f1:0f:3f:37:98:fe:
                    9f:40:93:d6:dc:62:44:7c:88:1b:a4:f5:36:9e:0a:
                    6a:47:f1:b2:32:44:55:3c:41:c2:93:23:ce:2f:9c:
                    21:a2:14:24:f5:42:74:03:83:ee:4a:98:4b:bf:3c:
                    0e:cf:b6:29:de:45:b4:a2:bf:65:36:ab:7b:30:ac:
                    62:b1:49:dc:0c:58:4e:ba:09:0f:2a:07:e0:27:0a:
                    0a:6e:96:67:47:de:39:e2:f8:48:d2:30:33:5c:51:
                    1e:95:d5:87:fa:a5:3c:5d:6d:9e:d9:6d:fa:f2:05:
                    4c:af:44:d7:b0:2f:67:1b:e9:fc:7e:75:cb:18:34:
                    39:67:99:f4:ef:f2:b2:52:d2:8a:17:cc:32:e6:50:
                    07:16:72:a1:c5:4b:bc:f7:8d:92:09:66:84:ff:81:
                    6f:9b:42:72:8c:46:23:eb:8e:02:50:e1:3a:18:73:
                    66:f5:ae:13:fc:b9:5c:ce:8c:c9:e0:61:b4:9e:8b:
                    28:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6B:61:13:C1:22:F6:52:C5:A4:69:36:45:08:3E:5D:97:C9:ED:80
            X509v3 Authority Key Identifier:
                keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d1:00:49:f2:ca:3d:d6:7b:f7:2c:3f:18:91:4b:5d:71:eb:
         dd:53:bb:5d:e9:ff:ab:56:a1:51:e3:8b:be:92:85:f3:20:ca:
         21:7c:5d:af:bc:7c:ca:48:30:ca:e6:99:9b:0c:de:61:bc:ae:
         1c:db:e9:06:6e:80:a4:7f:ed:aa:e3:8b:7f:63:3b:a4:bb:d7:
         86:b6:fe:80:fc:e1:0d:ff:e0:ef:cd:00:37:2b:be:d8:00:8d:
         98:a9:f5:0b:17:1b:82:8c:00:18:cf:3c:f6:0f:e2:04:e9:d9:
         d4:cc:ae:07:20:2f:41:2e:d3:a4:a0:d0:66:2f:5e:e8:14:3f:
         a8:1a:9e:9f:37:1f:66:3e:83:61:9a:81:96:ff:18:b9:c4:1c:
         36:0a:db:cf:6c:67:65:21:3b:b8:b7:67:cc:d7:2a:01:ca:67:
         7c:63:f6:38:89:30:54:90:ed:90:d9:67:cd:9b:dd:4f:0f:5b:
         d5:70:9a:5d:ec:76:aa:19:70:10:a0:15:b8:6a:56:f3:e6:4a:
         f4:aa:7f:31:84:88:b4:85:72:cd:3d:5e:d9:83:d5:67:42:16:
         2b:b1:21:38:71:99:a5:0b:1a:9e:6f:19:db:8c:e9:ac:b0:54:
         2c:5f:61:16:e0:7d:9e:cc:df:4e:07:5c:fe:8f:9a:96:bb:c8:
         fd:d9:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----