Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File:                     czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier:          D3iXTsHH3nhhAWCe11XbfGk3gk0gvHMvxcEi82xBBPg=
Subject key identifier:   CB:AC:F9:C9:C6:06:A4:1D:B2:A7:8D:99:54:2A:5F:80:45:4D:0B:4D
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer:       /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial:       01962E618C1F9D953A436F07DA54FDA32E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number:          0621
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 0o1YRHDHs6Y_Qq6pCAQcKlyWFz8.roa (hash: nsMIKNS3OeQBs34bWYRCT4THehdiZrvKLdywuELl5UY=)
                          2: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (hash: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=)
                          3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: 7RrnB+YKe4MIBll3+sx+XYNNpHfmh7PUPRzYysJIbgE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8c:1f:9d:95:3a:43:6f:07:da:54:fd:a3:2e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=cbacf9c9c606a41db2a78d99542a5f80454d0b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:0f:73:81:30:af:c2:a8:ff:84:6b:ea:e0:
                    2f:9e:c9:19:e8:30:f1:c9:d3:a3:fb:be:50:8b:72:
                    04:91:09:0c:83:04:c3:2f:46:68:57:77:27:91:4b:
                    f4:dc:9d:31:8a:fe:3d:8b:e1:e3:8f:8b:e7:c2:89:
                    37:72:df:21:96:5f:38:0c:96:c7:3b:d2:aa:f6:b7:
                    f1:30:6a:83:0e:9b:08:d9:cb:37:03:b2:40:70:b5:
                    e4:6c:a7:1c:22:d7:bc:d5:70:4c:06:fc:80:55:8d:
                    16:d8:38:dc:d4:98:62:e8:1e:cf:25:66:b4:1a:b9:
                    1d:1d:b5:05:76:0e:5d:f9:cb:b4:31:dc:0e:1f:b8:
                    0b:4d:6a:b3:9c:9e:8b:ff:4e:9a:23:00:b4:40:c7:
                    ba:92:67:87:3a:63:fd:1d:1b:37:73:ac:51:f9:cc:
                    57:18:a3:0e:67:be:4d:c2:65:32:5d:b0:3c:fd:39:
                    d9:9e:9c:c8:80:f1:19:b3:04:92:41:5e:33:4a:61:
                    1b:52:54:27:96:ed:29:5d:87:f1:ee:ce:5b:7b:0b:
                    e7:4f:a7:a4:29:10:b5:a9:48:11:ab:05:7c:c8:3c:
                    ef:98:4d:3e:13:62:05:83:a5:77:1a:d2:57:8a:5c:
                    b5:f3:05:09:90:fa:86:9f:2f:85:db:35:de:16:97:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AC:F9:C9:C6:06:A4:1D:B2:A7:8D:99:54:2A:5F:80:45:4D:0B:4D
            X509v3 Authority Key Identifier:
                keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:96:70:ff:e9:51:a9:0b:6a:71:af:ed:b2:25:d0:ca:ee:73:
         19:4b:32:a5:37:5c:f8:2e:5b:f5:15:07:b0:dd:2e:d3:0e:47:
         d7:4e:bb:17:62:01:72:07:6c:b6:cf:1f:69:44:2d:54:09:80:
         a8:73:3f:b9:40:98:17:9f:c3:a3:9b:11:ac:63:a8:ce:ee:20:
         b3:94:8e:e9:e1:d5:0f:7e:08:ac:42:1d:e7:de:05:8c:8b:56:
         75:aa:22:c9:6b:dc:66:30:d0:b8:91:fb:2a:95:80:24:eb:71:
         fd:42:eb:53:54:80:a1:2e:a3:38:8d:19:0f:18:af:0e:7e:18:
         9d:0d:ab:0f:70:5f:7a:b2:05:dc:d4:7e:b6:7b:f0:e3:7a:35:
         36:27:b3:6c:72:ff:2b:a9:9a:30:32:3b:29:ca:59:e7:27:26:
         80:06:24:55:cc:9f:b0:78:ea:e7:b6:6a:75:67:03:9f:60:b5:
         4e:b4:32:1b:71:a0:64:d4:e5:e2:db:28:2d:cc:20:2e:12:94:
         a5:56:b8:e3:d4:1f:30:18:de:b8:1a:dc:56:8c:f8:e6:35:22:
         98:4e:94:a3:47:2a:06:b0:16:57:5e:69:c8:bd:32:ac:89:3c:
         85:29:79:c1:e7:ff:6c:49:d6:e5:14:fd:4c:be:d6:76:f8:dc:
         b0:32:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----