Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File:                     zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier:          2YTtLashlHzWS2mB38s2r8zlXEmSTkfz/Xj3VXmjBM8=
Subject key identifier:   8C:4A:94:C0:2B:25:20:81:FB:96:A6:6D:CB:2A:E3:46:E2:1D:CA:F8
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer:       /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial:       01962E992409FD641F68891D64D007197485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: /aNxDlurrAkkFmjhCYfVsrSPl+lXtM28ByaE7F4Bhlg=)
                          2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:24:09:fd:64:1f:68:89:1d:64:d0:07:19:74:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=8c4a94c02b252081fb96a66dcb2ae346e21dcaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:39:c1:6e:2d:ad:c8:a0:b6:13:f7:00:31:1f:
                    09:9f:ef:b9:62:b6:6c:9b:17:23:d5:bb:02:2a:2d:
                    4e:e8:d6:74:d3:02:a3:57:d7:1b:02:71:36:28:bf:
                    1e:5b:82:1e:5e:e0:1f:2b:da:16:12:98:9b:78:92:
                    23:58:3c:61:4c:57:8e:33:e8:de:42:8f:f4:a5:44:
                    e5:b1:5a:78:99:82:a8:4a:e3:cc:95:2a:77:27:ea:
                    c2:08:8b:0c:55:ed:00:d0:93:39:44:74:22:56:8b:
                    64:ee:8c:2c:d5:8b:b8:dd:f8:e7:11:fd:1c:6b:79:
                    96:31:d1:15:9c:48:27:b1:e1:50:3a:8a:de:58:62:
                    f3:e5:6f:95:64:93:e0:1c:2a:26:fc:23:bc:05:38:
                    7b:7d:35:55:92:47:9c:c6:c1:6f:03:60:bb:e6:50:
                    8d:a8:e3:7b:cf:b9:6f:5f:7c:25:61:6a:e9:ed:50:
                    06:64:e6:74:26:be:47:6a:e2:ba:d2:d7:85:44:ab:
                    aa:e8:f7:11:94:67:de:0e:9c:07:ef:17:4c:3b:e3:
                    26:76:21:03:4f:ec:17:3d:37:46:fc:e4:78:ca:0c:
                    ec:da:1d:3f:6b:8f:37:c7:f1:c3:67:7b:bc:be:d8:
                    5e:a2:5c:ec:6f:53:8b:48:34:d0:92:b3:57:78:70:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4A:94:C0:2B:25:20:81:FB:96:A6:6D:CB:2A:E3:46:E2:1D:CA:F8
            X509v3 Authority Key Identifier:
                keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c7:48:29:72:47:38:cc:91:63:28:47:94:80:ed:d6:8f:61:
         21:07:32:61:56:65:40:d4:c6:b5:15:92:67:81:17:03:6a:81:
         86:17:76:94:8c:2f:92:eb:4d:2b:56:81:10:30:a7:fc:9b:4f:
         90:b9:a2:38:8d:db:bc:6a:76:9f:01:71:97:6d:ad:26:70:d5:
         4f:81:cd:b7:74:c9:61:df:01:56:3d:39:4e:57:c0:92:47:07:
         0f:d6:4e:ec:d9:0e:1d:97:0e:8e:e5:f4:fc:a3:33:55:a8:78:
         15:a6:7f:fd:62:83:dc:55:36:13:97:2e:08:cb:2f:dc:12:91:
         6b:8c:5f:24:f9:66:57:64:a5:a4:89:43:d4:33:cc:a6:b8:7a:
         30:d0:5b:8e:0c:00:54:b4:30:56:58:e7:50:fe:e7:80:0b:8e:
         58:0c:1b:b2:1d:e3:9a:4f:0b:92:80:e6:b7:d1:3c:98:bd:f6:
         4b:bb:98:51:ae:08:ca:e9:34:21:76:ea:82:17:b6:b0:7c:f2:
         ad:96:c2:94:41:23:b3:22:a4:db:90:65:51:8a:fb:a7:e0:04:
         bc:18:37:1a:df:cf:d2:f3:29:83:6d:4c:a8:3a:05:a3:56:1a:
         8e:4a:3a:ad:5e:79:ad:6f:62:64:27:d6:a6:c1:3a:b7:cc:4e:
         36:fe:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----