Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File:                     zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier:          fY93fpi2vaxwZpuKKN74yYfxSIiFjMakmR8NlNinf2Q=
Subject key identifier:   84:AA:74:7D:98:FF:C8:11:89:46:66:C8:EF:52:73:FF:02:D8:03:77
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer:       /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial:       01962F3D8D933C9B8A534CC69F9A0DEDABF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=)
                          2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: fFjT/32PBZCpoqZB1oonu5dcHxYLdtWiPNnZjSa78o8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8d:93:3c:9b:8a:53:4c:c6:9f:9a:0d:ed:ab:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=84aa747d98ffc811894666c8ef5273ff02d80377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1b:7b:b6:1a:fa:3e:c3:12:fd:e5:22:82:bb:
                    37:69:f8:c3:94:e3:d2:d5:28:80:ed:ba:3c:ae:4b:
                    5d:c2:e7:66:01:3a:05:5b:f0:27:46:7b:52:72:c5:
                    5f:0c:57:5b:a9:d1:b6:5a:6d:82:e7:f9:39:de:c6:
                    f7:96:b4:15:c9:7f:17:51:4f:07:32:5a:b7:10:f8:
                    aa:21:e0:fd:47:36:c9:38:06:59:86:51:c7:75:59:
                    1e:06:8d:cf:2b:68:e8:ad:34:73:ec:85:f0:e1:af:
                    ec:1c:07:ad:5a:7f:dd:0a:1f:5d:38:56:0a:f4:1a:
                    82:29:6c:d0:e4:9b:94:84:b1:4e:49:84:12:16:37:
                    44:43:fb:e7:e3:7f:95:a0:1b:10:a7:b0:d7:58:ac:
                    e2:c5:d9:0f:a0:50:d8:20:ee:e6:2f:86:46:ac:47:
                    21:f0:f0:71:6e:c1:f4:af:2f:b2:01:26:85:71:7f:
                    6b:bc:ec:94:58:a8:4e:36:a1:f6:e2:ef:bd:f4:33:
                    b7:4c:85:8c:99:98:68:ef:1d:a0:37:1e:f9:cf:40:
                    8f:76:61:12:16:c7:fe:2e:a2:eb:6f:56:9e:f3:cd:
                    f8:34:fb:89:f5:cd:4d:0c:98:5e:0d:50:c5:f7:99:
                    e5:70:22:a2:92:d7:4a:f1:09:bf:80:b3:76:2e:05:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AA:74:7D:98:FF:C8:11:89:46:66:C8:EF:52:73:FF:02:D8:03:77
            X509v3 Authority Key Identifier:
                keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:51:ea:2c:1e:8d:ec:73:9f:d5:4d:ca:80:3a:78:d6:48:
         99:c0:51:48:4f:e4:ba:dc:71:1e:63:ad:50:2d:73:e5:49:88:
         78:1c:21:fb:15:da:90:c8:dd:5c:61:32:5d:a2:78:1b:be:04:
         e9:d3:cd:02:44:ae:33:6f:76:2b:22:56:4a:4e:0a:f6:e0:7b:
         85:52:a7:ff:30:0a:13:06:4f:13:4f:63:a7:3a:ee:0a:88:c5:
         6f:b3:de:97:7e:ec:1c:70:7d:72:f1:90:5d:e2:ef:cf:53:29:
         b5:da:be:72:8f:25:f7:ad:3d:77:9e:de:fb:21:41:3b:25:c8:
         2c:05:8f:5a:57:6c:05:71:e4:b9:ed:ae:3b:1e:04:38:db:54:
         d4:e2:a5:0f:31:f7:8a:30:85:37:77:f7:f1:2e:8d:b0:29:60:
         7f:a3:68:a1:b7:d5:1e:20:cb:56:f1:67:b8:c0:5b:56:a0:a4:
         69:c5:f2:5c:6a:50:19:81:6d:ee:31:a7:68:98:32:95:e0:dc:
         c8:5f:44:85:93:3b:6f:e5:27:99:f3:0d:b2:5d:c8:4f:f9:65:
         81:bb:ff:15:b4:81:3f:2b:24:3e:c3:a2:fe:08:a7:57:11:b6:
         9c:a6:71:ff:8f:78:4b:07:3a:0b:ff:62:df:f5:6e:da:f0:92:
         e7:c7:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----