Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
File:                     I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json)
Hash identifier:          1pEXEgW/wnF0tFumT9+Me1Pv6hBubXIxpwbjJQtCw7w=
Subject key identifier:   DE:90:64:FB:50:B0:6C:A1:80:5E:A8:F7:C8:6C:03:F5:BC:1A:F5:7A
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Certificate issuer:       /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial:       01962F0702C819190F46B60692E87B3CE379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
Manifest number:          1215
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=)
                          2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=)
                          3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=)
                          4: Aqln2oXW1vmV-PUzF6Cd9Q8xD70.roa (hash: KUC6ZVgJ309wVObTlhs383nGmhCFSSEIPpt/KXrwLus=)
                          5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: I1/PrHgAHhuLtIM8ZS5iwxfIxn1S5b370FVzNMWAoec=)
                          6: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=)
                          7: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=)
                          8: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=)
                          9: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=)
                          10: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=)
                          11: mdNDH8tOemdbUwlqRGs3hb1Hrm4.roa (hash: WKtl9/rCVdqattn0ipGNumFRIFTCx0VUypyRv/GA3Gw=)
                          12: uIweupJOqhNaFZ9FFVay5RTc__M.roa (hash: t7JJhUA0yW4Du8+W3we/rUkzjJyZFVBXiW73J3eZJK8=)
                          13: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:02:c8:19:19:0f:46:b6:06:92:e8:7b:3c:e3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=de9064fb50b06ca1805ea8f7c86c03f5bc1af57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:ce:36:37:6c:89:73:51:83:d1:2c:95:96:
                    93:79:44:c0:53:3e:bb:29:c9:9f:a1:f7:6e:d9:ba:
                    9f:61:b0:04:5f:f3:64:d0:66:22:b7:1a:be:3f:e6:
                    03:10:9b:64:be:b9:ec:ab:ce:92:af:03:49:7d:bf:
                    84:85:0a:be:d7:21:70:76:fa:30:ae:90:d0:63:b3:
                    ee:4c:22:3e:e4:20:95:b0:8a:e9:c6:67:fb:e4:87:
                    2d:ac:8a:d8:bf:e4:99:73:1a:5a:7e:a8:fb:49:4a:
                    3f:31:01:25:15:b6:13:c7:c9:3e:53:d2:b1:a2:c8:
                    6d:8c:ea:13:6c:84:80:f6:3b:cc:41:1f:47:86:dc:
                    ec:9a:7d:a0:6d:37:ad:c8:d7:7c:bb:ca:55:ae:74:
                    a9:b7:ba:2f:52:53:8e:bc:a6:9a:64:66:53:42:32:
                    8f:d8:16:ad:e2:1c:0f:74:02:bd:ae:1b:a9:68:e7:
                    8b:7b:1c:96:e7:c6:a2:eb:32:6f:c0:d6:51:0c:ac:
                    08:8b:24:cf:a8:80:6d:05:51:12:4c:81:98:cb:a0:
                    ed:f2:86:09:4f:67:67:d9:fe:21:3d:86:7e:32:87:
                    ed:d8:e9:09:f1:f4:ea:d8:56:7c:13:7d:7a:40:03:
                    3e:10:94:6e:6e:85:9c:b2:09:4a:bf:af:7b:b6:e7:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:90:64:FB:50:B0:6C:A1:80:5E:A8:F7:C8:6C:03:F5:BC:1A:F5:7A
            X509v3 Authority Key Identifier:
                keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:03:f9:2e:6b:ab:f0:a7:67:b1:1e:51:b5:d3:20:72:b7:ff:
         5e:73:30:12:7c:27:90:b4:cf:d7:7a:c2:b0:94:b9:4b:c0:3c:
         c9:a1:b5:c2:32:de:87:f4:79:90:21:5f:bb:40:56:5d:b1:23:
         1c:d4:3e:39:42:50:44:40:78:db:2f:0e:7d:e3:38:43:09:b0:
         aa:96:ff:ed:ff:b4:06:6f:de:42:70:fe:d8:b0:69:d7:09:65:
         b9:b6:a2:ac:be:5a:f0:40:92:2d:bd:e3:a9:db:67:27:54:1a:
         0d:c3:77:f1:23:d6:e3:ca:59:a1:8c:ce:54:d0:0a:37:b4:79:
         35:fe:60:d6:c8:bb:dd:5f:fd:7d:6e:73:49:ab:ad:6d:05:c5:
         0d:08:3d:f0:7a:ba:6c:f6:a3:99:6e:ed:43:ca:d3:75:77:8c:
         48:a6:88:4c:a6:9f:94:ff:0e:75:56:e4:0a:c1:17:3a:a9:e9:
         da:18:0b:f9:20:d2:0c:df:1c:0f:ee:55:4d:03:c8:8b:53:64:
         42:87:eb:8d:b3:3e:ab:6d:4b:a2:ce:47:fb:b3:75:b7:4b:d3:
         08:34:bb:93:9e:1d:3c:ec:0c:d6:9a:b1:31:6b:a7:4a:85:95:
         55:a3:ca:37:d9:13:cc:07:91:9e:d1:ef:ec:e9:cf:9a:79:d3:
         3c:5c:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----