Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
File:                     z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json)
Hash identifier:          imumiQqY8Rc/2Vxp8gD4LT/5ldnMOJf02N3+TM28Gkw=
Subject key identifier:   27:07:DC:3A:25:CA:2F:68:1A:2D:D6:93:30:E1:6A:08:DD:D5:D4:F1
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Certificate issuer:       /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial:       01962F74C1A47CC73BBB60741F157B598E84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
Manifest number:          07DC
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa (hash: ZdFCYWIasaf//f4zgLVM9d1VQcq8sWh/cpG9mNzIlnw=)
                          2: Y_bp31HDq8uAy4l6THmKPbLCNsI.roa (hash: 9XEelD2ZciA/ZipA/uoYFFsArdGQrDybFJa5ScNreOg=)
                          3: _wDpItSC0HSOgvkQZmYWMWTXQro.roa (hash: /5YtbpUy82u+cUJWT1RGpyakzo95z6EKYbAFHFrfUcw=)
                          4: xe1Xtte-l4mWDxVWnZUVoJfv978.roa (hash: eTv/lTHlf1G7tnxCPkM7+fpZ+Fnfpfp4hidvIU4UnJU=)
                          5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: PAI3ZjvbRiivwtKKKG0py9+YoF2fs/lCdnPTdnhROhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c1:a4:7c:c7:3b:bb:60:74:1f:15:7b:59:8e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=2707dc3a25ca2f681a2dd69330e16a08ddd5d4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:96:b4:e8:f1:e3:f7:f4:3d:31:8d:4c:cb:c3:
                    7c:fd:98:e5:20:cf:1c:ea:09:2c:71:e6:a0:93:ed:
                    51:66:a2:85:af:de:4b:3a:c0:3a:4b:41:a0:c6:22:
                    46:44:e1:1c:b5:0d:84:52:0e:51:7e:c7:d2:fb:04:
                    88:95:22:3c:5f:13:24:eb:28:cb:29:bf:2d:bd:e3:
                    be:da:1f:a7:5d:c8:46:fd:3d:b1:85:fb:64:53:5d:
                    e5:6a:bb:69:cb:39:76:17:36:d8:1f:b5:10:74:30:
                    75:7a:44:53:d5:62:1d:19:ac:04:f4:4b:8a:2b:c0:
                    bb:a9:e1:b1:7d:97:38:13:aa:1d:f7:97:4a:a9:f3:
                    fb:4c:13:ea:d9:d8:0a:d6:f9:7d:ed:9f:6b:0a:47:
                    03:74:c9:2f:63:cd:2b:b2:f4:62:99:eb:b3:4e:49:
                    00:9f:b5:f2:b1:f3:c8:8d:0a:a1:2b:75:12:01:96:
                    b7:29:4e:56:0e:5e:bd:ce:aa:20:cc:3a:3c:17:3a:
                    f2:99:ac:13:e9:33:9e:8e:64:47:02:41:1f:a2:b4:
                    48:9d:5d:7b:3a:d9:45:64:7b:a5:3e:3f:a1:ac:aa:
                    3e:15:b5:fd:0b:9e:b8:d4:94:12:06:a4:86:cf:27:
                    06:7b:f8:6e:51:97:53:ae:a0:01:73:9b:eb:bd:40:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:07:DC:3A:25:CA:2F:68:1A:2D:D6:93:30:E1:6A:08:DD:D5:D4:F1
            X509v3 Authority Key Identifier:
                keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:64:cf:14:7b:3b:73:9b:3a:f0:e1:1e:2a:86:a5:02:38:b8:
         c2:61:87:b7:06:76:b5:5b:64:80:67:b3:7a:a7:62:12:c9:11:
         c8:ce:26:55:aa:bc:49:ca:f8:40:57:e9:1c:61:97:40:74:e8:
         19:b2:8b:b8:4c:18:ca:2c:97:cc:d5:81:03:56:2c:4e:40:85:
         91:03:cb:c9:88:28:9e:3e:e3:b1:57:21:0e:bd:21:9e:9d:a7:
         61:5d:28:88:e7:2d:cd:95:6c:40:2e:7a:63:db:e8:2a:5d:94:
         48:d7:0a:ee:fd:a8:64:9a:a8:dc:b2:0d:44:a1:90:e6:04:6e:
         9a:aa:b7:7b:e5:00:82:95:2a:af:12:8f:a3:2c:a4:8b:aa:d2:
         1b:b9:03:39:a5:8a:4a:c7:83:fd:db:63:23:c8:ca:46:fe:99:
         9a:c1:f1:01:12:14:68:4f:b2:d6:97:01:b1:1d:91:52:b2:de:
         95:22:e5:3b:e0:a6:ee:29:96:a1:99:04:e6:c7:ec:48:0e:14:
         26:27:85:98:84:49:cb:5c:00:94:f4:21:1d:55:75:c2:63:ed:
         c7:91:a7:b8:b7:56:ae:fc:cd:94:7e:0a:fd:9f:82:42:df:fd:
         d0:f1:6a:4d:48:4c:11:3c:d3:56:a1:05:8e:d6:08:32:89:72:
         51:72:78:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----