Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File:                     Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier:          97T+qlP1cQ3yRS8uNoKPYVFPxXD50vVRFxHFAExAdKI=
Subject key identifier:   E8:4E:DA:8D:E9:D7:34:67:26:EC:DD:C8:23:97:C6:71:B7:96:0A:F8
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer:       /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial:       01962E99663EE640BF747C94A855BE1DCDC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number:          0B77
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=)
                          2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: F5/HqQ75oTpnc9WbHb/otdDy5zNQMQQL+/MhJFh4ifw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:66:3e:e6:40:bf:74:7c:94:a8:55:be:1d:cd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=e84eda8de9d7346726ecddc82397c671b7960af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:84:36:d0:bd:23:40:fd:9f:ea:b4:7f:a1:
                    12:5c:0e:06:2d:73:c0:4c:45:42:46:98:ac:4c:7f:
                    7b:6b:12:d0:42:e1:5f:9f:50:a1:19:e3:e2:1f:7e:
                    05:c3:4b:8f:ac:b2:b2:63:4b:05:ad:3a:cd:c5:57:
                    6e:96:d1:21:fc:4b:53:76:e9:f7:81:d2:98:49:58:
                    1f:67:e8:84:09:c5:be:fd:ff:a9:97:b6:09:5b:15:
                    1e:d1:a6:95:86:00:e5:91:14:a5:79:87:a6:b7:19:
                    bb:e2:97:51:ef:1b:a6:75:48:9b:6f:6a:69:78:04:
                    fc:aa:a6:c3:d1:e1:8a:1e:38:93:72:d0:36:3e:83:
                    f1:3f:08:e5:a7:9e:a6:d9:80:6c:74:77:57:a3:14:
                    43:1a:29:72:23:a9:e1:28:9e:23:bd:af:e2:67:2a:
                    b5:55:19:25:63:52:95:21:7b:89:e7:3d:61:e7:1a:
                    b7:e0:3f:14:86:4e:16:94:95:dc:ae:cf:85:24:71:
                    b0:bb:58:5f:13:64:24:49:7f:58:76:57:34:62:8f:
                    5e:bc:db:ac:50:e6:cb:50:79:fd:bd:71:52:ec:a9:
                    90:dc:83:8e:9a:53:fd:35:9e:a9:ef:de:39:9d:f3:
                    63:ff:a6:a3:eb:30:56:99:58:7a:24:1c:1e:1e:e5:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:DA:8D:E9:D7:34:67:26:EC:DD:C8:23:97:C6:71:B7:96:0A:F8
            X509v3 Authority Key Identifier:
                keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:81:10:44:61:2e:10:23:5e:c4:a2:fb:42:e4:c3:58:43:
         8b:63:31:92:0a:eb:a4:86:0c:d6:79:97:ca:d8:04:6d:23:6b:
         6f:87:1e:69:2f:14:24:db:a7:1d:e9:c5:ee:6c:7f:99:03:70:
         72:58:89:0b:2a:85:47:b5:e6:d1:2b:7d:46:f4:93:65:c9:ce:
         c7:8e:aa:73:2b:c6:1c:76:4c:fa:67:5d:81:21:38:79:bb:fc:
         ff:f7:3e:87:07:9b:b9:1f:75:50:96:fa:78:9c:df:e2:11:49:
         d8:4a:51:98:f7:14:f5:6a:45:4e:5b:8e:31:ed:70:f4:d6:fe:
         bc:13:f5:0c:81:47:1c:eb:e6:bb:59:bb:7b:e9:12:25:71:bf:
         ba:34:87:fb:1c:c4:0e:90:51:e3:29:f5:49:82:85:46:b1:13:
         20:c8:f2:f3:d7:43:df:0e:a0:49:1d:45:9f:dc:35:7a:d4:73:
         a7:fc:90:ad:44:9c:4c:84:64:f0:e2:6b:f2:e6:e3:60:4f:c3:
         34:eb:95:f9:42:63:a8:47:8b:98:b5:0a:aa:bc:2a:20:66:e7:
         d9:79:33:56:52:7e:8d:28:e9:60:2b:49:f8:32:e1:08:8d:f8:
         37:7f:d8:91:f0:25:9a:83:de:d8:94:8f:7d:54:b3:9d:ae:db:
         28:6a:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----