Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File:                     z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier:          nkZRrLY+/z436lcPVoVW8D8dbyZMOS/Ud2060YNXjq8=
Subject key identifier:   DB:73:D9:9C:95:ED:B9:31:99:1B:6B:D2:A6:CE:9A:4A:F7:C3:7B:CA
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer:       /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial:       01962DF3D67393E077762D55B7F48F55F8D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number:          0E2B
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
                          2: IaXnlnHxVgoEX1UTLs1DE8GtJn0.roa (hash: vQAYnVro3YqKas8+EITAndDR2jmhTfit27limCUGo58=)
                          3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: rzm7AZpsKYc1LT5tBlttbiNEYmhp9/+MWOb6MUfA0RM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d6:73:93:e0:77:76:2d:55:b7:f4:8f:55:f8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=db73d99c95edb931991b6bd2a6ce9a4af7c37bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:8c:b2:8c:ea:45:c5:dd:8a:07:9e:85:ab:
                    b8:9c:7e:bd:0b:2f:12:3b:f4:39:d5:61:d7:01:2b:
                    19:c1:2b:2e:34:9c:44:17:12:ea:74:7c:de:bf:34:
                    ea:41:cf:34:62:4c:59:14:9f:2a:e5:03:01:e1:10:
                    a2:61:4c:e7:06:3d:c7:44:9d:22:a3:9f:66:d4:b9:
                    52:9e:76:7b:02:81:fa:c9:cf:9d:82:95:93:43:a9:
                    1c:4b:1a:d6:b2:d7:05:b0:cf:c0:6c:ad:74:04:8c:
                    a7:2a:fd:21:fa:75:2a:20:63:83:5d:d1:f5:aa:38:
                    c2:30:d0:04:c1:f0:23:3b:bf:86:8c:d0:6b:d2:75:
                    82:94:35:c3:82:f3:b4:c8:8f:bb:70:f8:a8:14:97:
                    8a:4b:d3:56:2c:85:80:35:42:b1:fe:78:33:16:f5:
                    b6:ba:ad:03:ff:71:3b:f4:4f:70:69:78:c9:52:39:
                    56:b6:6e:00:7b:e1:5d:50:37:cb:5f:ed:6f:6b:d2:
                    bd:92:23:10:ed:20:43:f7:81:e1:d2:b2:99:80:98:
                    65:19:a2:20:1f:2b:be:42:42:dd:53:73:16:9e:ab:
                    f4:92:86:c6:b2:57:c6:72:b0:96:37:56:f0:90:a0:
                    dd:fc:c8:d3:ab:02:ca:b0:10:99:74:b2:1a:2c:d8:
                    c4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:73:D9:9C:95:ED:B9:31:99:1B:6B:D2:A6:CE:9A:4A:F7:C3:7B:CA
            X509v3 Authority Key Identifier:
                keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c9:83:d2:4d:7e:ce:ee:8a:36:f3:4f:83:d5:0a:9d:31:99:
         2e:0b:aa:01:67:1b:e1:5a:1f:dc:71:35:bd:34:62:20:9c:43:
         3a:14:7c:97:47:68:3f:14:9e:6b:e2:ee:4e:84:aa:de:58:4e:
         a4:7a:60:bf:48:f4:3a:f5:7e:3a:da:bb:7b:57:af:d8:4c:49:
         56:ce:a4:61:75:69:95:05:30:c4:c0:f7:19:48:35:00:5f:4e:
         d8:dc:bf:ea:80:47:59:82:a8:ce:2c:55:bc:33:6b:24:4b:16:
         8b:33:8c:00:11:fa:30:f5:b0:f7:40:eb:d9:e8:5e:63:70:c4:
         97:72:af:78:ba:a4:40:75:2d:fa:10:77:60:82:87:6b:d1:cb:
         a1:a6:1e:89:f1:c9:06:d1:6b:7f:e8:f1:38:81:cd:88:3e:ad:
         bc:58:91:7f:38:c0:17:76:55:b9:c1:e3:50:1f:0c:4c:0c:5e:
         85:5b:dd:b4:9c:bb:b8:eb:c3:b2:a7:47:ad:66:34:7b:c5:58:
         e1:2b:d7:3a:6f:c2:65:00:97:d9:65:32:bf:4d:7a:ee:97:38:
         7e:fa:0e:6a:29:76:53:e3:e4:d7:c3:45:9f:e4:90:5f:5d:41:
         07:a5:3d:52:1f:82:3a:d3:5e:34:6f:a8:78:10:57:8f:28:cf:
         1c:d2:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----