Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
File:                     zeKPHxgJm6vwoZCIvqNboITskpc.mft (raw, json)
Hash identifier:          Ck2EAm4x1J+lIu92qB7HDapst6L3cPrtPLFMYQtSdPg=
Subject key identifier:   F0:21:12:8F:2D:57:B8:53:B7:39:6D:10:E5:DB:F5:EB:E7:F2:14:78
Authority key identifier: CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
Certificate issuer:       /CN=cde28f1f18099babf0a19088bea35ba084ec9297
Certificate serial:       01962E98AEFC2B66F8FE31D2925238F3A1D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
Manifest number:          0CDE
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: tODsj4wJmlLizDhD4zx5X4Q0kBs.roa (hash: 8ot7Ptkdu5uwMXdssVMoEe9aK4JBYnjK0TXriR+RS5I=)
                          2: zeKPHxgJm6vwoZCIvqNboITskpc.crl (hash: sl4+CMQBZsC4QYATRLKjzz+uZYEPYRlTF7OH7Mx7Agc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ae:fc:2b:66:f8:fe:31:d2:92:52:38:f3:a1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde28f1f18099babf0a19088bea35ba084ec9297
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=f021128f2d57b853b7396d10e5dbf5ebe7f21478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:09:e5:b1:df:43:bc:4b:2e:4d:7d:64:8c:
                    c2:4d:08:bd:bf:b1:69:28:2a:c5:bf:e0:3e:ec:e7:
                    38:93:3b:d3:69:0f:02:34:cd:89:5b:b3:f2:13:cc:
                    fa:32:bc:19:5c:3f:d5:3f:bf:ec:45:7f:2b:d2:5c:
                    da:7d:38:90:d2:8e:c2:ce:a0:3c:77:31:38:e3:8a:
                    ae:56:33:0b:4b:a2:fc:11:f4:33:45:45:55:64:00:
                    fe:a4:5f:20:e3:c6:33:76:ac:d0:2f:30:c6:1c:98:
                    9b:ac:98:f2:a7:a8:25:f4:16:6b:24:0a:0e:0f:a2:
                    93:07:19:cc:a9:01:04:b7:a4:e8:7f:75:86:d6:78:
                    da:9b:9a:d0:d6:40:1b:fc:a8:0a:d3:94:c2:39:9f:
                    6c:d6:7d:b1:0e:64:70:1f:1b:ad:90:73:2d:07:ff:
                    8e:32:7f:22:04:48:42:79:ef:b5:0f:7f:75:f4:f0:
                    48:02:de:32:42:5e:82:f3:29:35:e9:c0:90:08:ee:
                    df:1d:76:d0:8d:f4:d6:52:ab:0e:a3:97:fc:07:c1:
                    86:6f:91:6f:01:a0:71:5e:35:81:83:c3:a3:98:34:
                    05:d5:4f:be:52:de:32:eb:c1:d1:b9:e6:fe:4c:b8:
                    0a:e5:12:50:89:63:8f:d8:23:ce:35:c4:de:0a:bf:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:21:12:8F:2D:57:B8:53:B7:39:6D:10:E5:DB:F5:EB:E7:F2:14:78
            X509v3 Authority Key Identifier:
                keyid:CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:46:85:c9:c1:26:f7:65:b6:63:8b:69:ed:3f:cb:26:b6:0a:
         24:fd:a2:af:53:ef:19:c2:5d:5d:de:82:76:66:51:07:4d:67:
         d5:65:c0:6d:e7:c4:4c:0f:7c:69:e5:30:7e:de:14:13:5d:25:
         88:3f:f6:83:9b:d5:d2:92:19:de:71:de:25:84:68:a7:de:6c:
         a4:8b:54:be:7d:0d:41:85:f6:fe:4b:49:0b:cd:f3:d7:bc:80:
         5d:8b:4c:02:47:32:5a:c0:46:db:a6:a8:5a:b6:10:c8:d4:ce:
         6e:4a:d6:91:b7:da:cd:a7:79:43:d8:23:dc:77:49:3c:24:ae:
         ff:19:c6:98:aa:7b:b2:42:f4:90:19:1e:db:80:dc:ab:c1:2e:
         b3:48:a3:7a:6d:36:1e:88:64:a0:87:3e:4e:03:27:78:22:dc:
         67:67:d5:a8:0b:4a:fa:78:2f:95:75:c8:ac:db:58:fd:65:f7:
         ae:84:12:d6:29:cc:1e:07:5e:44:87:ce:fa:70:cc:17:ad:37:
         05:66:20:ea:ed:c8:b5:27:21:0b:41:3a:69:c8:b9:b9:9f:d5:
         5e:9a:87:d5:28:ff:87:be:f7:0b:c4:11:72:37:9a:09:0d:1f:
         6b:29:96:18:4a:02:99:7a:3f:16:19:92:a3:49:2c:dc:1a:49:
         5e:67:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----