Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File:                     zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier:          5V3i10SvL5V3csWZiv4/R/MLGLcW2+TlJBjBnu49Ln0=
Subject key identifier:   66:A4:6F:51:9D:BD:F6:3E:75:2D:92:97:32:98:C4:C9:61:9F:8C:2E
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer:       /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial:       01962DF450A90B81BE1EAAAF7D9C9DEB38F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=)
                          2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=)
                          3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: cv84bqx/A6akEGJ/aVDf6XvtNbSYDUvnNcs3rjyFiMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:50:a9:0b:81:be:1e:aa:af:7d:9c:9d:eb:38:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=66a46f519dbdf63e752d92973298c4c9619f8c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:e0:65:c9:26:67:67:07:1c:df:19:6e:9d:
                    ed:3a:18:e1:a8:32:e3:99:f0:f1:3b:61:8f:a2:0a:
                    cc:c6:b4:03:cd:63:fa:a5:c3:06:89:20:f6:f6:62:
                    b2:1e:86:51:6b:c4:52:37:64:b0:a4:20:33:20:31:
                    cd:a2:f7:84:a3:5c:b0:1f:db:70:82:cc:86:35:bf:
                    f8:14:7e:b6:e8:0c:f7:b6:d5:2a:30:60:41:25:75:
                    b9:77:b9:06:e9:aa:b5:c7:2d:26:46:3a:11:81:ef:
                    61:94:8c:21:35:1d:92:8a:cd:00:b3:c1:5e:d8:5a:
                    4f:56:ab:97:78:6a:e9:57:b4:1a:89:64:d0:4c:10:
                    65:b8:e0:8f:7b:e7:0c:64:0a:71:75:49:9c:6e:85:
                    1f:cb:6d:25:85:4c:1b:32:42:4c:13:fb:c2:69:87:
                    66:9b:dd:d7:44:fe:88:ba:21:6b:95:0c:b3:0d:de:
                    10:e0:3c:9d:32:56:3f:12:c9:b5:a4:db:c5:b9:c5:
                    5d:df:69:ac:2d:11:cd:ad:b1:13:1c:29:1a:02:bc:
                    4f:0b:d3:b9:9b:cd:96:d5:46:b8:c0:3e:3b:fd:3f:
                    46:ef:6b:cd:67:42:1e:1e:d8:fb:3d:9c:e0:d9:65:
                    df:c5:1e:cd:81:2e:d2:ae:e8:55:f2:93:0e:84:e3:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A4:6F:51:9D:BD:F6:3E:75:2D:92:97:32:98:C4:C9:61:9F:8C:2E
            X509v3 Authority Key Identifier:
                keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1b:d5:ae:a0:a8:ec:1b:6d:de:06:e0:9d:39:89:c9:18:6a:
         df:50:8c:4a:74:55:e0:bd:cd:41:be:e3:d1:f1:6e:91:10:f6:
         5d:91:22:2f:e7:63:6f:07:ee:ea:64:0f:bb:f6:ed:d5:79:03:
         3b:69:f3:ee:82:b0:a4:11:29:4c:93:ea:66:6f:72:f8:87:8d:
         52:19:0d:62:e2:a9:d7:50:36:7f:ae:d0:3b:ea:cb:5e:0f:eb:
         a9:d7:c3:77:df:2f:31:60:76:6d:78:06:de:6d:ee:d3:69:90:
         14:83:6a:f1:05:5e:24:1d:2c:42:1c:2e:fa:16:0a:b9:8b:be:
         ff:b8:6f:3e:a4:a7:d1:68:71:bc:56:34:3b:7c:39:33:85:29:
         2c:58:59:31:50:a7:b2:81:6b:88:f8:08:01:fb:11:6a:58:3c:
         d2:31:96:91:d2:92:f4:dd:9e:05:0f:71:ac:65:85:4c:68:ad:
         b3:00:58:8c:a2:f8:cc:ca:1a:47:22:54:9d:30:37:62:9a:a7:
         63:f7:0b:a6:93:80:f6:5d:66:5a:5d:1c:e7:2a:f3:68:4e:9b:
         e0:7e:b5:57:29:c9:19:c6:22:9d:2a:9d:eb:38:06:10:e4:f6:
         ed:74:25:fe:29:3b:62:2b:c2:9d:e9:61:5f:06:a6:12:23:16:
         56:2f:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----