Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File:                     zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier:          9pA/YB86XuAjDoqxdJtejMqYqckDZUdfyfzOPMnh7xg=
Subject key identifier:   D5:30:B5:9E:01:19:B2:BD:4B:35:DE:65:FB:BF:31:EC:F1:A6:C9:BB
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer:       /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial:       01962E2B230844AC77514FB10366A1CA5F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number:          0375
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
                          2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
                          3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: 95yOb+c2zvJlob5cVpYXqDGbvR2ncJLuGAtxJhjw6yQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:23:08:44:ac:77:51:4f:b1:03:66:a1:ca:5f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=d530b59e0119b2bd4b35de65fbbf31ecf1a6c9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:ec:2e:69:91:93:8e:7c:9e:b6:86:2c:7c:
                    91:a4:a7:aa:8a:0b:4b:4d:92:ff:b1:29:81:6a:3a:
                    d2:2a:78:49:f5:ee:12:5f:59:b2:7d:6d:26:4d:86:
                    0c:0b:ff:1a:db:a3:2e:0a:5e:82:ba:07:57:34:4a:
                    5b:2f:69:a9:22:21:90:f2:8d:48:0c:8f:99:b7:7d:
                    67:c8:f3:54:fb:1b:a7:6f:3a:35:41:7c:b2:a7:fe:
                    57:39:f7:5a:f3:f0:34:c9:6b:f4:bb:33:1d:81:f9:
                    98:d9:17:4f:81:c1:99:a2:18:03:08:0a:58:5b:fe:
                    c2:48:93:8c:50:0c:d6:7b:c8:b8:5b:cb:95:b7:a9:
                    a5:77:63:1a:90:2a:a4:fc:86:29:0a:f7:92:1d:09:
                    e9:a4:06:5e:c8:bb:fb:95:f3:24:bc:4b:33:f3:b1:
                    c6:8b:9d:8d:cd:4e:32:7c:0c:23:13:a1:f4:8a:ef:
                    81:7f:ee:8d:5b:c5:eb:a9:af:52:a8:f0:72:c9:f2:
                    9f:73:f7:9e:3b:58:b3:2d:3e:b2:9e:36:d5:7b:96:
                    d1:ed:24:8e:d8:87:ce:d0:b5:4f:5d:87:7e:b9:b3:
                    e2:3c:ed:12:41:16:d3:51:0d:90:58:ab:bb:fe:1e:
                    27:53:b5:56:76:64:34:1a:70:4f:e9:db:07:0a:7f:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:30:B5:9E:01:19:B2:BD:4B:35:DE:65:FB:BF:31:EC:F1:A6:C9:BB
            X509v3 Authority Key Identifier:
                keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:44:69:d0:ac:e6:ed:00:d2:5f:6c:c3:c1:63:8e:a3:d4:01:
         38:70:c4:d8:ae:9e:4c:3c:22:98:d3:cd:44:60:ea:28:73:a7:
         10:fa:99:33:83:aa:f4:82:a8:99:a8:55:47:d4:8c:21:3a:15:
         40:b4:e2:0c:dc:f3:a3:20:71:a6:4a:32:03:a5:7b:c5:47:40:
         6a:ae:1e:46:be:f5:8f:66:f0:8b:27:7d:dc:64:45:26:06:58:
         a3:45:6e:3e:3d:ce:bd:c9:5f:8e:a2:18:cb:6e:da:ec:0e:2d:
         55:6e:55:24:23:1f:fe:75:b2:bb:ae:54:64:3c:53:57:36:f9:
         23:8c:c2:9a:b5:08:c0:8a:cf:36:be:63:af:a4:2a:f0:33:2c:
         25:98:ee:0a:65:9c:18:76:93:67:ca:2e:1a:0f:48:78:e2:15:
         85:a6:96:a1:49:44:c4:7e:fa:05:ab:f2:e6:5f:6b:7a:b1:c4:
         d3:e5:a4:c6:88:1b:05:bf:59:51:83:d8:e2:db:74:a3:bf:b7:
         83:48:93:45:58:a8:9d:a6:c6:ea:56:ec:d9:89:fd:1a:bf:fd:
         6d:a7:c3:85:4c:c3:35:1e:1f:e5:24:4f:b0:92:c9:2c:2a:d3:
         a6:c6:71:57:f1:01:39:ae:bd:66:5f:dd:2e:15:df:98:89:aa:
         8a:e5:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----