Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File:                     ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier:          bzaXLITnALzzbcbHMs+dVb1JrOSlPiOGiBCTdzTMJjw=
Subject key identifier:   B3:1E:D2:AE:9F:0A:44:D9:1A:CE:2D:2D:77:5D:94:CF:11:5F:63:37
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer:       /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial:       01962F74DF8576FB04511C82D9F916861DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number:          11A9
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: TErop3VidtPm9ZSFXQ3SDHbCM/NKdIw+K1j8AAxtfuQ=)
                          2: cD0i6eXUEb95MRC9zt2P-QsR-zI.roa (hash: bwRfJD4nIDDz+Ohj/YcPEu2i5IBHAbvcA7uyG/Ew8EE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:df:85:76:fb:04:51:1c:82:d9:f9:16:86:1d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=b31ed2ae9f0a44d91ace2d2d775d94cf115f6337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:f2:ba:73:1d:7c:5d:67:b8:de:f3:82:38:
                    c3:a2:a7:c0:46:48:8b:f0:6b:96:c6:c9:66:50:5c:
                    3f:d9:11:83:3a:0a:ce:4c:29:77:74:42:b7:2d:ba:
                    e2:8c:48:92:bb:5e:91:4e:22:69:14:ec:1f:bd:a7:
                    81:11:4e:25:2e:ba:80:c5:0c:fd:78:7d:47:d9:4e:
                    d5:40:b8:98:ad:ba:83:7d:10:ed:b2:90:18:b1:90:
                    49:25:99:f5:6c:85:34:97:d5:c2:3e:77:a5:73:d4:
                    76:c4:2f:fa:1e:fa:e7:86:77:02:f5:36:15:77:7d:
                    d2:88:21:34:95:b4:9c:c7:7e:60:a5:08:56:13:84:
                    14:01:e6:2d:12:2a:9b:36:68:02:21:6b:61:45:69:
                    29:2c:10:50:cf:0b:75:28:6e:af:79:e5:b5:a7:af:
                    e2:de:2d:1f:61:73:63:36:ac:25:3a:da:82:50:c2:
                    d4:6c:ed:b8:8b:73:93:a7:2b:f1:0e:ac:d6:78:ca:
                    f1:36:5c:1e:65:a9:22:7c:66:be:75:50:de:34:c2:
                    49:a1:9a:b0:3a:7b:89:d1:52:ac:ea:cc:ea:9e:d2:
                    5b:86:e9:40:5d:f4:56:57:82:20:d2:b0:1a:52:b1:
                    d1:1c:ce:6c:97:64:cd:d3:aa:2f:cf:9e:a3:a8:ff:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1E:D2:AE:9F:0A:44:D9:1A:CE:2D:2D:77:5D:94:CF:11:5F:63:37
            X509v3 Authority Key Identifier:
                keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:fc:5d:da:f5:f8:55:e0:c6:0c:df:8b:d6:c3:f2:15:e3:
         d8:51:2f:fa:15:0b:41:6d:7f:25:ee:88:16:3e:9d:bb:d0:78:
         08:fa:2d:08:13:fa:21:81:10:8f:6b:bc:24:fe:cc:08:50:80:
         e9:9a:b2:cc:8a:f1:14:d4:70:73:c5:39:cd:51:91:a9:1e:a3:
         16:19:bc:81:88:83:19:b8:a4:f4:07:59:29:fd:50:b2:04:1a:
         88:5b:6c:33:7f:94:e3:42:a8:12:ee:75:20:4e:5c:13:5e:95:
         9a:3b:7a:5d:cf:a0:2a:7d:94:9b:3a:0f:3f:23:f0:61:a7:13:
         40:f5:d0:53:ca:ad:a8:4c:f6:b7:8d:ce:64:c3:16:04:63:5c:
         77:ea:6e:f8:dc:f8:db:a6:05:6d:82:86:76:13:5c:30:e8:93:
         a1:37:b5:a4:ee:0f:d1:0f:07:9e:01:7a:58:b8:43:a2:a1:4d:
         29:4a:ac:51:b8:f3:40:98:04:3d:b7:9e:46:6a:1e:0b:5a:be:
         57:f1:7c:5a:fe:dc:6b:fa:6c:dd:30:1d:52:df:00:62:1f:62:
         ee:07:18:75:39:bc:52:ce:a2:69:90:50:62:72:cd:15:e7:21:
         bc:48:8c:4f:2e:61:73:ec:21:96:de:f3:39:43:a5:7a:c6:d6:
         55:63:79:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----