Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File:                     1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier:          O5XNRaKTWN45PK/27onKYBh2BjI6GBctjJehG/1DZ00=
Subject key identifier:   B9:B5:87:96:BD:24:31:EF:0E:EE:01:E9:36:B9:12:B1:AA:37:44:3C
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer:       /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial:       01962F3DD1CC9ABD5256481200FC6D44CAAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: 6qeoE5AIy5SPZqblKY0Qvn13WT3wDJVXNP7oJXq2zb8=)
                          2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=)
                          3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d1:cc:9a:bd:52:56:48:12:00:fc:6d:44:ca:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=b9b58796bd2431ef0eee01e936b912b1aa37443c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:9e:c9:84:72:06:73:9a:d7:92:e2:16:b7:
                    ad:73:59:a6:1b:73:1a:dd:55:cf:b0:cf:6f:84:74:
                    30:2e:f4:e5:57:e6:1e:a8:9d:54:8b:ad:0f:ee:db:
                    3f:d8:76:30:2f:70:09:21:3b:40:bc:99:fc:df:76:
                    a6:7e:07:c5:40:c4:a9:a6:31:2c:88:f2:62:f7:84:
                    85:ba:33:8f:a8:29:dc:ca:fe:9f:70:50:c6:dd:7a:
                    64:18:95:b1:f0:9c:d1:05:68:28:37:d1:e7:92:bd:
                    5e:0a:56:a0:31:3e:0a:07:9c:a3:a7:97:15:fe:16:
                    69:b1:f7:3f:ea:d1:68:5a:16:82:6d:2c:d4:ca:bc:
                    0b:af:2d:06:39:87:ab:da:49:58:a5:c3:f7:06:41:
                    b1:81:f9:af:f0:aa:8a:f2:19:0b:f6:b1:75:05:37:
                    4d:ce:8c:48:26:cd:3f:82:c0:90:0b:1d:d4:b7:b0:
                    1b:7f:87:01:c6:e2:50:5f:49:be:db:22:a1:0b:13:
                    d8:66:fd:25:21:11:98:e5:4c:48:de:f7:cb:9b:64:
                    c7:e6:81:ea:f0:2d:cc:08:6d:88:43:d3:0c:41:f9:
                    42:05:69:1d:5f:6b:57:bb:90:41:7f:42:23:0a:9d:
                    26:21:cf:74:33:92:76:02:90:61:64:58:96:f6:84:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B5:87:96:BD:24:31:EF:0E:EE:01:E9:36:B9:12:B1:AA:37:44:3C
            X509v3 Authority Key Identifier:
                keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:ed:4f:07:e1:2b:c6:df:e9:2b:10:49:ae:e0:66:49:ae:
         89:5e:69:2f:55:5c:2c:93:7a:8f:ad:79:36:17:15:7e:0c:11:
         03:31:60:3f:d5:07:e6:fd:e8:c7:85:ec:99:7e:53:be:32:ba:
         be:14:67:64:f7:c3:c3:04:88:b7:f1:03:ea:69:20:ee:22:d9:
         4c:e7:cd:3b:a2:34:d7:bb:e7:8a:d3:2c:83:f3:d6:44:84:5f:
         75:e8:51:dd:1c:0a:54:f0:25:20:7f:9d:80:c5:ee:b9:d0:a7:
         da:c6:d1:56:21:34:14:8e:d5:50:c5:d6:ec:b4:e5:5a:c1:c8:
         7a:d1:6f:ac:ff:31:da:db:21:7f:68:6c:7d:c2:c5:74:43:de:
         a6:db:f0:78:28:fd:0c:47:ba:90:d8:b0:1a:65:9d:f5:4e:83:
         2d:33:06:b5:b3:51:ce:4a:80:f6:1a:78:ae:d5:c1:8b:8e:d8:
         ae:45:df:a1:e3:5f:c1:53:45:65:ca:89:82:27:f7:d9:30:09:
         f9:f8:87:88:d6:90:83:d8:3c:72:91:b3:05:07:18:00:39:de:
         25:8d:5e:4f:c7:cd:19:b8:2b:d8:2a:59:7e:61:14:c7:33:be:
         f2:00:b5:1e:60:65:7b:72:a7:5c:2e:c2:44:29:07:52:bb:03:
         49:a1:66:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----