Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File:                     ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier:          enW5G3MaEi/C2Ig6DQUHcd0pTSzvFZq9NHGlyAEMkjQ=
Subject key identifier:   0C:1C:DF:22:AF:7F:F1:BF:07:0F:6D:C8:DA:A3:EA:72:07:50:45:DC
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer:       /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial:       01962E98FBEE00999A69FB31E299D672BDAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number:          111C
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: TYgRDOKblF78CpH0t/GF7+pRM1TXuXrP+uUi3pN86aU=)
                          2: rJRxxRneTTHrBiouHAwe-Vj2hOM.roa (hash: pnxg6ZPXerYJRTKN22NAobx2yMJvSslv4M+/PffiHGo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fb:ee:00:99:9a:69:fb:31:e2:99:d6:72:bd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=0c1cdf22af7ff1bf070f6dc8daa3ea72075045dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:5e:fc:e0:c2:3f:10:e6:31:00:57:f8:da:
                    c7:58:89:01:bf:9b:11:e0:c2:ae:ec:fb:b3:73:ae:
                    7a:2a:c7:01:a9:b9:94:25:80:38:1a:5a:7a:70:42:
                    98:2c:87:8f:8f:57:c3:3b:39:a1:2f:75:d5:6a:a8:
                    09:41:c9:47:80:ef:24:04:82:4c:89:70:ae:8e:aa:
                    4f:6b:c5:b7:ac:8c:6f:96:2f:38:49:6a:2c:08:59:
                    d2:3f:ec:dc:2b:d7:ed:10:9f:3f:f7:9e:5d:1e:91:
                    0c:db:db:91:37:b2:11:c0:dd:ea:cf:bd:de:93:10:
                    e0:ec:f7:8c:9c:2b:35:c5:fb:54:5f:49:72:4f:06:
                    01:ba:5f:16:44:65:8e:43:da:bd:a7:40:25:9a:84:
                    0b:84:4e:93:e9:08:fc:ab:c3:4d:37:31:ff:4a:4e:
                    0b:68:8c:6b:ec:d8:84:0c:ad:22:4f:af:23:7d:68:
                    9d:cb:a7:95:ef:f4:6b:5c:11:be:b0:8f:ca:03:73:
                    ea:f4:d6:94:c7:89:e8:ce:61:fe:5b:af:60:c9:d3:
                    35:55:9e:c1:bd:91:21:22:f9:37:55:64:44:73:79:
                    90:65:d5:6b:66:c7:35:5a:03:ca:1e:2d:8d:5a:47:
                    51:01:be:e0:ab:d1:6a:84:61:e3:1d:34:1f:ef:75:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1C:DF:22:AF:7F:F1:BF:07:0F:6D:C8:DA:A3:EA:72:07:50:45:DC
            X509v3 Authority Key Identifier:
                keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:47:0b:82:f7:25:8c:26:2c:3f:b1:97:f2:53:6a:39:e0:df:
         8e:ca:f2:4f:07:71:f5:13:a7:15:40:33:62:da:11:1a:53:d5:
         b3:82:45:95:83:96:14:35:63:dd:0e:b8:97:c9:f6:ab:5a:e4:
         d8:6f:73:46:7b:bc:c4:2c:f8:54:9e:d1:2e:5d:76:f5:2d:1e:
         27:99:6c:95:e4:91:6c:6f:9a:ce:1b:d4:f0:f5:8f:7a:ed:b2:
         9a:14:92:a5:d5:f4:42:20:fc:1e:28:87:47:05:15:4e:59:ed:
         d2:8f:cd:b6:32:4d:a8:92:d1:63:b3:8c:86:7c:93:07:70:2f:
         3d:e7:38:31:05:bd:07:09:2e:cd:6d:1e:f6:e4:3f:09:1a:4a:
         b3:92:7d:40:b0:7e:98:03:17:59:51:e0:c3:15:67:9b:0d:f3:
         79:41:79:fa:a0:52:5f:ed:66:0d:89:b9:1d:87:d2:04:8e:cd:
         52:41:97:3e:7e:82:2c:4a:85:b8:7d:d5:32:f6:49:70:47:45:
         64:81:29:cb:5d:65:18:08:35:fc:3b:3d:07:a3:2c:12:56:0e:
         ac:46:ca:6e:1b:31:f1:91:1d:db:f3:97:f7:bf:ed:9d:e3:de:
         43:a1:bd:d2:a7:84:3b:48:05:4f:50:55:3a:0e:c4:6c:98:b8:
         ae:0f:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----