Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File:                     Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier:          uJUny0oq3elewNp9/Vm1K2xFguwqG3+Mgh37huxjkEM=
Subject key identifier:   47:CA:1F:9B:58:FB:3B:9F:4C:D6:33:40:C4:9C:08:F1:11:75:7C:F6
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer:       /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial:       01962F3DA1EA9AEFB80977D46245BF27E384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: 90E-kBjO5zMPh_CjvoGF6X6gBPo.roa (hash: CtoUcToSQH/z7T8Z7IC3trmKUCXpBxtjD/8pAoHxgVE=)
                          2: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: jZMRj5pz1f9XR405D1VGjqeAwQvgh7rPcBw65DTiK/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a1:ea:9a:ef:b8:09:77:d4:62:45:bf:27:e3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=47ca1f9b58fb3b9f4cd63340c49c08f111757cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:91:c0:11:de:4b:01:9f:45:a8:44:b0:43:05:
                    cf:90:43:38:ea:47:29:e5:ff:fe:70:ef:31:99:7e:
                    ab:e5:36:cd:83:44:6d:93:38:04:b2:44:b3:f8:fa:
                    08:1a:91:8c:3a:06:02:45:06:90:5f:2a:77:02:bd:
                    9b:65:e5:38:8b:dc:3f:75:d4:42:29:bb:6d:84:5d:
                    60:5f:5d:63:96:13:06:05:f3:8a:7e:bb:0d:3d:f8:
                    aa:de:96:5d:20:c7:f3:b6:2d:05:d1:58:a3:5c:44:
                    e2:94:be:2f:56:94:81:ad:de:b8:ad:79:b1:46:53:
                    d0:fb:2e:57:b8:d4:e0:5d:39:d7:12:c9:00:eb:c4:
                    86:9c:d8:bc:51:73:ec:b0:3a:30:be:c4:e1:a9:9a:
                    a0:de:da:05:05:2d:ac:8a:d3:33:f1:ef:44:7a:d7:
                    00:7d:2a:1c:1e:fc:6b:70:8e:b4:58:c4:ad:32:bc:
                    53:90:c6:5e:08:f6:28:e3:34:88:d3:38:9f:55:ed:
                    15:10:e1:5b:86:3d:ee:9f:ff:87:56:75:9c:be:94:
                    2e:63:07:91:a5:05:49:4f:84:00:29:76:de:49:96:
                    ab:82:ce:d7:28:4d:f3:fe:ca:44:ed:4a:f6:4b:2f:
                    d1:7b:71:50:23:ae:82:b5:fe:48:c9:c2:0b:2f:b8:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CA:1F:9B:58:FB:3B:9F:4C:D6:33:40:C4:9C:08:F1:11:75:7C:F6
            X509v3 Authority Key Identifier:
                keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7f:f1:fe:84:bb:c5:d7:b2:b6:4d:7e:68:f2:6a:b1:25:7f:
         31:98:c8:21:48:0d:26:b8:92:ac:51:c7:ed:f8:9f:da:aa:5c:
         bf:85:70:80:ce:ba:77:d2:2d:c7:6d:b8:9b:0b:17:d7:a6:64:
         a8:b4:29:f3:ae:ae:95:28:09:a6:5a:b3:81:9f:1d:22:24:bb:
         8d:9f:c5:88:fd:61:9a:46:f8:0b:a7:fa:61:49:1c:b2:7d:7f:
         30:d6:50:93:39:23:97:47:34:9d:23:2e:2b:cc:01:c3:f0:03:
         5f:00:13:11:36:b3:02:24:7c:de:1d:b6:27:d4:a1:f8:48:ba:
         2a:e8:9c:14:f4:0b:94:77:b6:55:23:f8:08:b9:70:eb:3d:c1:
         f0:63:b7:c8:b9:b9:e0:59:6c:f3:bf:ec:7a:20:ba:eb:90:84:
         6b:c1:ad:cb:e3:e5:b4:d5:29:e8:b9:66:92:1d:76:18:ff:ae:
         96:b2:7c:c8:6c:ea:47:d8:16:89:b1:c1:79:7e:68:2c:95:27:
         c4:29:86:31:40:a2:a5:63:b0:4f:69:9b:c0:22:f0:13:ca:d6:
         f1:ad:3a:02:f2:86:ef:f2:8b:57:ad:95:d4:c0:ff:52:4b:41:
         bc:6a:d2:b8:20:b5:fd:1c:33:9f:e3:63:02:93:37:b4:95:66:
         17:7a:1f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----