Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File:                     zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier:          xVxQLKDIqKE1Lp3mR6a4shmxEU2Pm3TVsGPJ6E4IDqw=
Subject key identifier:   2C:29:6F:F1:00:9D:AE:20:2A:49:DE:1C:FA:6C:F9:26:EC:8C:10:3A
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer:       /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial:       01962DF3F5190408BA6DAF3B47B9717AFA82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number:          0B79
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
                          2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: EwUxMK47stm4c3yvrHwv9Z7qxpdn/cHCnMH82uM7Bpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f5:19:04:08:ba:6d:af:3b:47:b9:71:7a:fa:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=2c296ff1009dae202a49de1cfa6cf926ec8c103a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:de:a8:06:34:0d:34:25:fe:a1:4d:9a:42:87:
                    02:38:17:f3:42:6e:84:85:c3:d4:e3:48:30:c1:95:
                    2f:90:2f:ba:1d:4c:27:03:f9:3e:d6:63:4d:62:ee:
                    cb:c2:17:6b:3d:d7:e3:cb:33:34:02:f8:2b:ed:93:
                    0d:58:fd:86:ec:45:a6:01:5b:c8:6f:13:19:4d:b2:
                    65:b8:86:b0:af:a0:e7:4f:96:c5:70:13:22:d8:66:
                    88:a9:74:99:c0:57:d2:45:70:61:2c:ad:7c:49:8f:
                    e8:cb:18:89:3e:56:0d:2e:72:ac:f5:4a:de:44:68:
                    86:db:84:ec:84:da:50:93:7f:b2:6a:75:26:b5:a0:
                    89:ba:39:b1:34:d9:8d:30:f0:1b:45:dc:0c:05:ad:
                    0b:89:64:41:53:81:43:91:1c:41:c3:e2:b1:58:38:
                    00:56:ae:e3:32:b7:13:c8:d4:a4:2e:b6:52:2e:f1:
                    d7:12:db:ec:fa:e6:ec:6f:c4:6b:96:f8:c0:0f:06:
                    18:13:68:6b:2d:10:91:41:68:d9:18:37:b4:96:33:
                    ea:66:97:b3:8f:36:da:ee:1d:c3:a6:a7:d5:28:c5:
                    bd:5f:79:da:c3:fd:14:6c:a5:23:a0:a5:90:37:ec:
                    3f:46:2a:9f:22:26:cf:1c:ac:52:b3:4e:e0:5f:f7:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:6F:F1:00:9D:AE:20:2A:49:DE:1C:FA:6C:F9:26:EC:8C:10:3A
            X509v3 Authority Key Identifier:
                keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:92:17:89:ab:62:c4:ea:54:fa:a1:9e:73:68:83:b6:b6:9c:
         da:a5:a9:f8:fb:1d:d9:83:10:84:52:de:ef:dd:bf:5a:df:30:
         1b:47:f1:08:43:b1:e8:66:8c:f3:cb:b2:5e:51:b2:a1:3e:66:
         d5:88:de:09:2a:65:ac:1f:19:1d:26:31:a8:d3:84:24:26:01:
         81:56:12:23:14:f2:2c:b5:31:a0:13:48:f9:c1:04:8f:c2:a1:
         99:26:e5:0e:e5:c4:9b:5c:a9:9d:5a:c6:19:c0:a5:e5:3e:71:
         a6:36:81:c8:9b:67:a3:87:1a:b0:bd:02:7b:29:89:02:75:53:
         91:ac:d2:2c:d3:38:1f:a8:f3:23:1b:1e:35:44:1d:9f:23:22:
         23:ea:77:bc:21:e0:56:57:ca:b6:88:59:9d:c8:6e:6f:ae:70:
         9e:e2:45:4e:3d:cd:82:19:9d:be:79:2d:c8:1d:1d:ea:7e:3e:
         af:86:28:f6:12:99:d8:da:4b:c3:c2:70:0a:08:c8:dd:37:c2:
         5f:af:64:93:68:28:30:65:d6:62:3a:8f:59:a6:65:a6:a3:a9:
         6e:f4:1f:87:bd:f2:8b:c5:f5:5e:7e:97:cc:42:9f:ec:d0:59:
         0e:fa:c7:43:f6:bc:f5:90:93:7a:45:f5:82:82:71:c9:50:f2:
         3d:aa:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----