Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File:                     RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier:          f2ZMvh0ir1aTyB4BqIYzaILidtxLg5mlGjZrNu6gyZE=
Subject key identifier:   2B:8A:FA:7E:68:2E:1F:14:CB:F0:77:09:4B:0B:A4:7B:82:D3:AB:03
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer:       /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial:       01962F747F8F5201A62BAD66A7ECE8359C20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number:          0B65
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: oa2yGMrvp6XXUOTIkSnNxp5iRBn0f655aAwrUJbEMaI=)
                          2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7f:8f:52:01:a6:2b:ad:66:a7:ec:e8:35:9c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=2b8afa7e682e1f14cbf077094b0ba47b82d3ab03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:6b:71:cb:de:8b:04:34:e6:d8:4e:af:27:
                    03:e4:9c:50:7a:e9:55:31:76:2e:d2:e7:2f:f5:9c:
                    6b:13:2c:c7:11:8f:ac:8a:46:e9:6a:ef:04:3e:4a:
                    45:bd:5a:ed:55:71:3d:b1:d3:8d:f1:3a:48:23:f2:
                    77:8d:10:0b:3f:33:9a:cf:b6:24:70:55:56:ba:d9:
                    58:ec:02:3e:0f:c1:3d:b0:a8:64:98:bf:16:0e:d3:
                    d3:de:92:6e:1c:43:ad:de:19:21:2a:4c:40:96:de:
                    ba:57:b3:4e:07:05:e7:97:f9:dc:cf:89:ed:0c:59:
                    63:47:d6:4c:e0:1c:8a:84:c0:fb:e8:f9:60:52:d8:
                    bf:73:23:c1:7d:45:14:68:fc:42:e6:c8:96:27:ca:
                    1b:d0:1f:12:7d:dd:2f:38:a8:6e:9c:72:f1:47:d2:
                    07:e4:20:84:3f:fc:b0:d7:db:07:2f:40:1b:b0:7d:
                    bf:3f:c5:36:27:6e:67:21:bc:28:45:1f:13:ae:8d:
                    45:f7:75:21:c9:2a:b8:68:b9:6d:64:4d:b1:03:a5:
                    bf:64:69:19:35:b1:e4:56:dc:31:d4:0c:02:bd:63:
                    de:e4:b7:fc:ac:2a:8a:4b:82:f3:83:02:20:ac:c5:
                    46:5e:e9:ee:cc:cb:fe:bc:9b:49:48:57:3d:8e:ac:
                    e0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8A:FA:7E:68:2E:1F:14:CB:F0:77:09:4B:0B:A4:7B:82:D3:AB:03
            X509v3 Authority Key Identifier:
                keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:33:cb:6f:38:19:a7:01:ad:c1:f5:f8:24:a2:73:73:dc:68:
         77:e1:a2:e8:7e:f7:2c:a1:6b:d3:d3:cb:74:36:55:d3:de:a8:
         00:aa:20:2c:6e:8b:a9:c8:86:98:f1:c7:c5:40:df:03:dd:ff:
         36:51:d9:e2:1c:55:78:f5:54:f2:fa:52:99:b3:b9:1a:bc:5b:
         05:4a:89:c9:14:00:3a:d6:c9:ef:ff:f0:37:bf:ed:39:de:70:
         30:3c:6a:73:6e:b4:9c:fa:3a:e1:c8:14:2a:9c:d0:bf:d1:a5:
         dc:f8:67:9e:1e:c2:4b:3d:c1:f6:06:49:73:8e:b2:53:31:6e:
         ff:03:b1:29:6c:16:18:f5:aa:91:a5:e8:ce:3e:30:bf:a5:44:
         60:6e:0c:2c:2a:fe:27:91:5e:1e:3b:01:c7:7a:7b:4c:50:d9:
         b9:ee:38:b6:bd:02:b9:44:75:83:81:db:5f:5e:ff:1f:ab:39:
         c0:5e:59:c0:bf:87:3c:d1:87:24:ca:ab:ad:55:bf:16:80:e2:
         a8:77:d6:ae:27:ce:5a:3b:b9:cc:06:0c:8a:60:00:c8:74:04:
         d8:fc:ef:b8:b0:86:5e:d5:f1:b8:84:c6:cb:3b:06:76:66:87:
         0a:09:98:62:8e:a7:cd:ae:e6:a4:24:ca:31:7e:c7:44:2b:96:
         ba:fc:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----