Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File:                     zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier:          bBOfoYdMNTI8ky4qce9YwGRLdaD1TnX5HGBNGKkcngw=
Subject key identifier:   EC:73:58:21:06:91:D5:0B:87:8D:38:74:9E:E1:A2:CE:F7:F6:AA:1F
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer:       /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial:       01962FAB80D2106530FF7E4C7528F99AED1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number:          07FD
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=)
                          2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=)
                          3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: UgakfB60ppdR+QvpvIfAlNtbIHCRXZ5dIlOPicrkLPc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:80:d2:10:65:30:ff:7e:4c:75:28:f9:9a:ed:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=ec7358210691d50b878d38749ee1a2cef7f6aa1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:b0:cd:73:fd:b9:a1:c7:1b:16:5c:e7:28:
                    25:f6:49:31:1f:16:3c:63:dc:48:8c:04:af:07:50:
                    b3:4e:82:d8:23:f8:8f:87:7d:48:7e:da:5c:fe:18:
                    d4:97:5f:20:d9:6f:f5:05:f4:b3:da:c5:39:b0:c4:
                    44:8c:90:ff:3a:60:17:25:7d:32:6f:72:06:36:fa:
                    7f:3d:ff:3d:09:e2:e5:96:0b:e9:d0:79:1a:e5:91:
                    64:39:6f:fb:b7:57:0d:18:23:25:64:56:44:10:53:
                    23:37:02:30:d7:8f:4d:ec:e7:cf:8e:e1:e6:06:de:
                    48:a7:16:e0:ca:94:6d:9d:0d:ea:f2:00:a5:5f:79:
                    ee:27:ad:51:b3:2d:8c:15:ad:e8:e8:4d:dc:2b:66:
                    7a:52:05:29:59:24:97:91:1d:da:49:db:3a:9c:29:
                    bf:c3:44:e8:84:06:9e:c6:ae:20:14:45:1f:90:01:
                    ab:7f:34:82:03:a1:27:c7:e1:b0:87:8f:59:83:d0:
                    8b:96:48:2a:bc:30:f9:7a:e8:48:bd:d1:8a:57:4b:
                    e0:12:c5:54:b0:71:90:8b:ae:09:8a:49:c3:33:4f:
                    72:03:3c:b7:5d:1b:11:52:4a:89:72:c4:8d:c9:d0:
                    dd:1f:fe:20:7f:66:e3:63:82:32:64:6b:3b:19:7a:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:73:58:21:06:91:D5:0B:87:8D:38:74:9E:E1:A2:CE:F7:F6:AA:1F
            X509v3 Authority Key Identifier:
                keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:14:9e:5c:ef:98:c8:f2:1c:06:46:39:6a:c3:3b:d0:f1:
         0b:1b:6b:08:e6:11:36:b7:d3:ce:9e:33:ef:23:71:66:ba:47:
         62:66:55:44:e1:2a:5b:33:3a:22:d7:ea:b4:ec:64:69:48:2d:
         b9:ba:81:07:2f:3c:8d:2a:0f:73:64:07:2c:55:8d:1e:7a:a8:
         37:43:b8:01:c2:0d:6b:4c:2a:1b:7d:3c:76:01:30:da:26:56:
         b8:15:cc:71:ec:13:5d:56:61:45:61:79:5e:0d:a9:a2:dc:21:
         f5:9b:de:a4:3f:f6:1c:0c:b4:a3:0d:89:8b:a9:82:7b:72:5c:
         f9:e4:b4:b1:b6:8e:78:93:28:98:12:82:9e:3d:ae:82:e7:01:
         f0:2b:f4:f0:34:a1:a4:1b:83:fe:22:4f:9c:86:bf:7f:fd:be:
         e7:39:67:f2:d7:ed:6f:e7:f0:8f:82:d3:76:80:98:08:a5:5e:
         2c:e6:95:be:98:44:78:61:81:3f:b0:23:1d:32:8b:ce:89:30:
         24:b4:dc:91:2e:fb:0e:a9:0b:fd:43:83:5a:3f:4e:3c:ad:dd:
         6a:16:94:c7:a7:35:15:e8:b1:aa:5d:c2:27:87:3b:18:20:bb:
         15:57:2e:64:64:0c:2e:c2:b7:67:c8:f0:00:66:5a:43:92:e5:
         6b:94:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----