Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File:                     zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier:          Ty7nvA8v1oIFZ2D5imT1PJghEm7VKT7D+EJiLwe7YOE=
Subject key identifier:   27:C2:E5:D2:9C:76:39:FB:D3:A6:6E:6A:C7:FB:4E:BB:19:F6:A0:FD
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer:       /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial:       01962F3D4A06C50913F58F14A5B35D4F07BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number:          0D94
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: KV7R1N_V77pOGNFqnvFI6VhE9Go.roa (hash: ih2S77Xnd5LfWtkG7w1ATz4hnQOa5DPl2XBfQ5D61xc=)
                          2: YoriHP_16arPHdOvDoMYO04hQkM.roa (hash: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=)
                          3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: y8bfeo9KwXc7VbHMtCDKdKJB8ojNtmSSwsn8geSlaY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4a:06:c5:09:13:f5:8f:14:a5:b3:5d:4f:07:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=27c2e5d29c7639fbd3a66e6ac7fb4ebb19f6a0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7e:c1:e9:6d:70:40:9e:e4:ea:82:de:22:ad:
                    75:13:90:fc:0c:99:b2:5a:eb:b9:42:5d:48:16:88:
                    bd:be:e6:4d:3f:c5:43:98:51:84:5f:c8:32:ba:18:
                    de:14:4c:42:74:ee:e3:57:1d:29:9b:fd:20:89:a1:
                    fa:91:7e:ed:02:45:cb:ec:97:0c:8f:65:21:fe:93:
                    98:0e:b1:c8:1a:a6:5d:73:e9:8a:a8:9f:52:ed:f5:
                    77:5a:e6:75:0b:ae:7c:e1:1a:64:21:b1:66:35:07:
                    f4:20:03:01:4d:66:b9:da:71:0c:11:f6:95:10:bf:
                    ba:93:ee:d1:8c:b8:66:80:a3:19:84:81:94:5f:39:
                    9c:90:45:ce:a0:3e:97:8a:3e:d5:ac:97:ef:c3:60:
                    b8:a0:90:3d:c0:88:d0:c2:27:32:85:51:41:b1:0c:
                    91:73:6f:82:de:25:d3:8f:14:8b:53:b4:3f:79:7d:
                    49:e5:36:62:66:2e:6a:4e:ba:df:15:a6:d8:09:0f:
                    20:c2:06:da:06:c4:b9:b0:1c:c8:62:72:9c:3b:e2:
                    48:1d:10:89:ee:2f:79:b8:90:21:4e:73:a5:3f:83:
                    75:0a:c2:e7:0f:75:ec:90:1a:6a:3c:7b:7c:6e:e6:
                    b7:cf:46:23:1f:68:59:b8:f6:a0:12:d4:ce:76:e8:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C2:E5:D2:9C:76:39:FB:D3:A6:6E:6A:C7:FB:4E:BB:19:F6:A0:FD
            X509v3 Authority Key Identifier:
                keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:98:0a:fe:e8:96:52:93:d9:da:9d:e8:9b:25:f9:56:66:fd:
         8f:b0:56:ae:2a:c5:34:08:07:14:86:38:23:cd:d0:e9:cf:e1:
         f9:2b:bd:6f:e5:4c:1c:58:f3:93:69:fd:61:6d:af:b4:c7:5c:
         72:e9:8a:b5:f0:a0:67:56:5e:bf:81:8a:56:ac:11:c0:29:b4:
         63:28:23:83:9b:98:3e:ed:37:71:a3:ff:b2:82:74:1e:66:8e:
         94:3f:2b:f3:76:8d:32:3f:87:cb:dc:43:62:ef:73:43:4c:3f:
         44:86:a4:01:1a:02:25:d9:e0:03:67:3d:f7:75:d5:05:1c:d7:
         29:e6:a2:f8:61:6f:3a:10:8d:82:d4:7f:08:e9:63:7b:b2:f0:
         e5:19:f1:89:7d:d1:0d:6e:20:a1:dd:c1:70:2e:9a:ff:75:a8:
         83:bc:71:67:fd:6e:21:5d:01:ab:cf:50:5a:af:19:ad:8a:03:
         d3:c8:f0:91:d1:e1:72:d1:bb:65:7f:8c:d3:7e:53:82:7c:14:
         1e:d0:6a:ed:b8:b9:c5:11:92:2c:b5:16:5b:ac:40:2e:5a:04:
         bf:d6:6b:40:2a:cd:95:be:df:f3:ca:bc:84:0b:42:54:69:ce:
         76:80:fb:3d:a2:4b:39:9e:94:cc:35:bc:d3:33:a7:bc:9b:49:
         46:e1:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----