Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File:                     zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier:          +mIQ80yjZfjnCE/LrxxEFH1SdF54XFpxu9ZAgQo1kmI=
Subject key identifier:   E0:A0:15:EE:83:30:78:88:AC:E4:84:62:20:02:67:31:60:33:2C:95
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer:       /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial:       01962E6195F0ADB9416E7EE182F6B7A235DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number:          06E7
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=)
                          2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: sW5IOOH2OHQZBi5m+r6yO2bT6Kpq6+G11R/aiUlNKh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:95:f0:ad:b9:41:6e:7e:e1:82:f6:b7:a2:35:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=e0a015ee83307888ace484622002673160332c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:62:6d:48:7e:40:0d:d1:84:74:32:dc:3a:be:
                    72:53:d7:6c:18:90:60:7b:ae:3e:ec:e8:42:d5:46:
                    de:b7:c7:92:a4:f2:21:94:ed:18:7c:9b:b1:cb:09:
                    b0:94:5c:20:e0:e2:61:33:c1:88:ec:a3:10:c0:8d:
                    64:5e:7b:37:35:c7:9a:0b:a9:d7:f2:f4:74:d1:89:
                    22:e8:f5:70:d9:58:a3:f9:3c:99:00:53:dd:23:94:
                    ab:81:dc:32:4d:ce:9a:42:99:9a:bf:87:42:1c:dd:
                    b1:cc:80:c8:2d:9c:3c:fd:df:f3:09:ad:da:93:d5:
                    9d:69:79:f1:fc:ee:57:7f:9a:66:4b:95:74:fe:be:
                    e7:72:13:ab:49:cf:a9:fc:2f:39:e4:d8:c3:f2:08:
                    11:0c:4d:e6:0d:0e:30:4b:ff:fa:21:74:c5:90:e1:
                    71:38:89:5f:fa:e7:85:b9:60:90:7b:67:7b:92:30:
                    58:72:27:1d:f7:d1:08:a3:af:81:39:7b:45:fd:76:
                    6e:c1:a4:ef:b6:d8:f9:dc:b0:64:74:42:ad:a2:56:
                    0b:93:ff:49:29:33:e2:2c:08:7a:7d:7c:4a:ca:aa:
                    57:ef:89:9c:86:f9:71:18:02:3d:86:70:10:57:e0:
                    ac:ba:13:c5:7b:26:f2:cf:a1:61:3c:d3:e5:a8:02:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A0:15:EE:83:30:78:88:AC:E4:84:62:20:02:67:31:60:33:2C:95
            X509v3 Authority Key Identifier:
                keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0f:f4:cd:a3:3a:d7:d6:a9:b1:5a:52:d2:8a:81:d8:bf:1b:
         69:8b:79:86:55:26:4d:e3:42:4e:8d:bb:66:fc:ba:25:72:fc:
         c0:1b:03:97:9d:80:79:51:36:e0:ee:ea:9f:48:86:70:5c:b9:
         15:ef:12:14:3c:a6:9c:60:74:64:b5:e8:b8:0d:07:d0:5e:26:
         0e:12:0a:bb:90:56:a9:b8:9a:f3:68:2a:30:f5:96:45:82:1d:
         f4:a4:04:e7:0c:44:bb:e2:5c:03:4b:b0:1c:a8:38:6e:f0:9e:
         e9:03:3e:68:b5:74:ad:77:48:31:a2:ed:00:d9:fd:39:d4:84:
         0d:4a:b5:2c:5e:30:eb:98:00:89:03:a6:ad:24:7d:2f:2f:64:
         c6:81:6a:59:f5:c9:d2:5c:a0:82:23:f8:07:7e:62:eb:19:71:
         9f:6b:80:42:2d:05:c1:0e:b1:e2:0e:d2:13:32:db:5c:97:96:
         06:12:b9:21:b7:12:7d:9b:0c:f7:30:f3:2b:1e:94:a2:43:7a:
         b3:21:0f:cc:ef:6f:69:75:03:20:0f:04:56:42:f7:49:de:5e:
         54:96:fa:3e:b8:9c:ca:23:a3:e7:25:c2:14:48:31:cc:3a:d2:
         ff:db:7e:28:8f:ee:31:f9:02:88:56:82:3c:74:1a:54:2b:ed:
         25:3d:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----