Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File:                     ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier:          rtj9Qt2XUU3O7EPFi64u57BSPgprLO5qKHoSNsvJOuY=
Subject key identifier:   45:9F:E4:34:31:95:26:B7:D9:0E:87:C6:67:A5:7D:C3:2B:3C:50:FA
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer:       /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial:       01962E99E752C484533BEDB3F30BCDEE30EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number:          09BB
Signing time:             Sun 13 Apr 2025 10:02:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:40 +0000
Files and hashes:         1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: qwuSKl5HNFg4EZDfcnYhZVmI85uI4EM6ScttjKUS6Hg=)
                          2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:e7:52:c4:84:53:3b:ed:b3:f3:0b:cd:ee:30:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
        Validity
            Not Before: Apr 13 10:02:40 2025 GMT
            Not After : Apr 14 10:02:40 2025 GMT
        Subject: CN=459fe434319526b7d90e87c667a57dc32b3c50fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:68:14:2a:2e:ac:d4:7c:3f:ed:ca:98:08:
                    0c:e0:77:1e:3a:4b:87:01:97:68:88:71:d2:6f:98:
                    c0:dd:71:0d:3c:28:d2:ce:a9:4f:6f:c1:36:3f:d4:
                    97:ef:3c:db:01:28:a9:8c:d3:74:2d:0b:3f:a3:0f:
                    73:c5:32:dc:ee:53:85:16:b5:58:e5:60:ef:7b:3c:
                    5b:56:bd:c2:04:dc:6f:d3:bf:bf:2a:1e:8e:8e:0d:
                    3a:94:71:2c:29:12:d1:91:1a:d3:82:1a:3e:b5:c7:
                    13:28:7e:4a:3f:42:a0:e4:39:ac:ea:be:a4:89:49:
                    49:a4:72:47:ff:dc:09:5e:b4:70:36:67:c6:6e:72:
                    64:aa:e3:88:b1:61:84:bb:47:ae:f7:a5:c0:40:c1:
                    44:da:18:05:9d:71:6d:05:8d:57:b9:be:d0:1a:75:
                    27:a5:e6:9e:0b:25:16:51:1f:22:9a:16:88:64:6c:
                    2f:67:11:cb:8a:36:83:45:1d:02:48:38:f8:bb:5d:
                    df:fa:3f:57:d4:82:0e:9d:b3:3f:1b:76:1b:f8:55:
                    a9:60:48:a0:eb:cb:60:a8:c5:71:c1:e5:d3:2b:1e:
                    8f:56:43:ad:ad:34:11:70:67:87:f3:a6:fa:b1:28:
                    39:39:af:c6:cd:13:ad:f4:08:3d:18:90:d0:b7:68:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9F:E4:34:31:95:26:B7:D9:0E:87:C6:67:A5:7D:C3:2B:3C:50:FA
            X509v3 Authority Key Identifier:
                keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:55:69:62:0d:94:af:e5:d2:16:88:2c:a5:0e:0a:43:23:51:
         ac:a4:58:bf:33:ad:51:c4:cc:7f:cc:24:3f:d7:29:8a:a7:e8:
         9b:08:06:dd:88:79:55:a3:55:4c:50:9c:b0:e2:52:2b:21:16:
         01:cd:91:68:b5:87:45:2b:fc:45:20:b4:01:a6:62:b6:7f:98:
         c8:ff:c2:18:33:7f:53:1f:34:47:19:d2:b2:f3:0f:2d:1a:9f:
         c1:10:9f:78:f1:d3:85:3b:68:61:94:01:60:01:99:f3:39:94:
         bf:a6:b6:44:c7:ce:68:ff:01:4f:a0:40:44:99:0d:50:a4:d3:
         7f:e3:5f:ab:47:27:7e:14:2f:6e:4e:7e:8d:3c:32:64:37:4f:
         a6:57:df:00:d3:a4:a9:d7:83:29:94:79:c9:9d:c2:04:0f:9a:
         cd:2c:53:74:2f:85:e8:76:1c:14:8f:bf:bb:1f:2e:3e:38:cc:
         74:b0:81:7e:78:99:e9:12:05:5f:ac:3a:d8:69:a1:b4:6d:bc:
         ed:a1:73:97:93:be:78:f6:5a:c9:f3:97:23:aa:a3:01:0f:0d:
         11:d1:93:3a:64:89:0d:21:54:19:ae:8e:dc:36:a8:02:64:56:
         59:8a:d1:9f:a5:ae:51:a7:8a:3d:00:f1:d2:47:f2:a0:73:19:
         81:55:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----