Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File:                     ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier:          Zdy7STm2SHimJ2W/zree5bKL0FXxFEiv+Mwawi8f5p0=
Subject key identifier:   88:56:75:6F:F6:29:EE:0F:AC:65:72:1B:49:1B:15:D9:F7:E1:DF:12
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer:       /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial:       01962F743D7E46CE578A57BBA4E9317FB052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number:          10F4
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
                          2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: DsJIb5ML76UwueqhbQr0SZFC7v7CtdhetLE1ekvnrU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3d:7e:46:ce:57:8a:57:bb:a4:e9:31:7f:b0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=8856756ff629ee0fac65721b491b15d9f7e1df12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:74:53:7f:c8:96:51:b6:81:88:6a:57:bf:
                    ff:df:df:f5:22:27:fd:69:f8:fb:b6:ad:30:6a:a2:
                    bb:2a:d0:3a:40:11:3c:4f:0f:23:34:44:b7:d1:f2:
                    13:57:c0:a6:b6:bd:29:63:8e:ab:a5:4f:22:da:1d:
                    02:b7:d7:8c:9f:61:87:ad:4a:54:4b:e1:58:e3:1f:
                    33:50:70:12:1c:be:53:e3:eb:57:4f:86:d8:6e:ad:
                    b1:8c:2a:26:3c:07:94:bc:5d:87:c2:f9:1f:96:97:
                    3e:32:a9:fd:14:5e:30:88:88:49:16:83:a6:8f:de:
                    61:a8:45:05:81:01:2b:37:e9:18:5b:35:0a:14:a7:
                    2d:60:e9:9f:c4:68:70:48:58:78:ae:fc:18:39:3c:
                    94:b9:98:5a:f7:20:68:fa:fc:78:b9:4b:21:c7:5f:
                    55:84:97:b9:42:87:94:0f:42:fd:d2:0f:6f:ed:c2:
                    53:87:aa:de:4d:1b:72:eb:07:b5:1d:c8:62:68:46:
                    16:e0:cc:94:27:6b:c3:a7:56:f5:72:7f:a6:b5:0d:
                    15:1f:bd:68:d4:19:b0:63:28:eb:f4:2c:a5:ab:67:
                    38:0e:44:24:1d:12:34:4f:ca:4f:5a:3d:92:fe:95:
                    5b:85:77:27:d1:a0:30:10:bc:07:d9:65:28:e0:e6:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:56:75:6F:F6:29:EE:0F:AC:65:72:1B:49:1B:15:D9:F7:E1:DF:12
            X509v3 Authority Key Identifier:
                keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:a1:ae:b0:cc:d2:a8:79:a4:24:8c:81:e6:f3:7c:ed:0d:
         f9:ce:ad:76:10:db:18:0d:81:ed:70:c9:ba:58:fd:20:07:f5:
         8d:cc:aa:71:cb:11:0c:01:0a:3c:43:ff:d7:ef:47:46:a6:12:
         9c:f4:cd:16:1a:80:76:a5:d9:da:25:34:dd:07:e8:a1:8d:bd:
         31:be:21:29:8b:76:eb:54:12:15:4e:e6:f1:d1:1a:69:c0:27:
         c4:77:93:22:f4:be:45:19:06:3e:03:93:fe:50:2e:58:ec:61:
         08:f1:f3:eb:14:0f:0c:a3:c2:ba:33:e3:97:58:cb:5a:cc:21:
         d2:f3:a6:00:37:02:5f:1b:6c:e8:b8:fd:ec:f2:ff:0d:14:77:
         5b:b3:b5:dd:69:2d:73:c7:dc:e2:4b:92:bd:d2:64:90:25:05:
         89:49:5c:e8:c9:52:b3:b4:27:07:92:5b:5a:6d:d8:1a:fd:bc:
         35:37:9c:59:e0:59:da:35:cd:24:70:bc:a8:a6:96:46:ef:6c:
         f4:a1:3a:f9:89:51:b4:1d:4a:d1:ea:0b:a3:0c:63:48:4a:6e:
         a7:8e:1e:73:8b:fa:52:0b:79:b8:bc:2d:eb:2c:c9:14:b0:1f:
         79:b6:6b:a1:35:40:d7:6f:0e:b9:5a:17:bd:ed:94:fb:8e:3d:
         7b:b5:04:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----