Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File:                     I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier:          zdAD7Wg/0NVk7RWM/B+MAuTrkcs9CNAJc2nueXek0WU=
Subject key identifier:   49:25:D5:A3:38:9A:49:2A:C0:41:4F:26:24:04:2C:F8:BB:B7:31:3D
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer:       /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial:       01962F06872FC81CBBF9AAAA755BC0DEC879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: rwUBFnodD6MzdsQy9UjYlN4yMVqPGLPQRAH0KiVPmVE=)
                          2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
                          3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:87:2f:c8:1c:bb:f9:aa:aa:75:5b:c0:de:c8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=4925d5a3389a492ac0414f2624042cf8bbb7313d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9e:fb:e2:06:cc:30:7b:fd:50:52:6e:40:70:
                    1e:c1:19:1a:50:ea:83:d3:fb:3d:3b:b4:8a:38:a2:
                    b1:8c:a9:10:7f:a0:a8:ab:16:30:50:8e:b2:d3:37:
                    d7:65:95:6b:33:0d:7c:ff:86:f1:cf:63:c4:e5:b0:
                    55:08:ba:88:6b:78:b3:9c:e5:10:87:f8:45:14:e4:
                    13:e6:42:77:81:78:2f:45:71:e5:07:93:1d:10:0d:
                    cc:57:70:14:e9:20:8b:fc:f6:cc:25:df:b5:72:be:
                    6c:9f:04:16:48:d0:42:6d:1a:09:3f:65:9f:7c:8a:
                    57:08:60:a0:05:b4:0b:d2:d6:cf:9a:c7:45:0f:22:
                    a7:d1:53:68:62:5b:68:6d:80:71:89:5c:17:06:f9:
                    60:cb:4a:78:07:f0:67:7d:1a:a9:44:88:01:bc:33:
                    cd:e5:af:44:77:af:c8:80:d2:68:53:7a:32:b3:49:
                    54:91:91:c3:38:61:3e:25:48:59:fd:bb:cc:d8:8f:
                    09:94:ec:3d:01:85:b0:50:eb:11:28:e6:64:04:67:
                    b9:be:51:87:1d:71:a8:fa:a8:59:5d:9f:92:08:f7:
                    31:36:95:6f:e4:bc:f7:39:ef:ea:59:48:01:35:bf:
                    31:94:d9:35:3a:e0:b1:a1:4f:c0:62:b9:6e:88:cf:
                    a8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:25:D5:A3:38:9A:49:2A:C0:41:4F:26:24:04:2C:F8:BB:B7:31:3D
            X509v3 Authority Key Identifier:
                keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:93:7b:8d:92:cc:40:1c:07:31:c4:9e:5d:f8:20:16:16:
         f7:d6:e6:85:ff:02:aa:06:f0:88:67:db:aa:cd:5c:0d:2f:11:
         b5:c0:12:8b:6b:bd:1e:f0:8b:6d:b7:0e:9d:e7:c6:3a:a6:ff:
         37:e9:63:6f:30:ea:d1:17:43:ef:bc:6b:4e:4e:00:03:70:4f:
         82:c2:ff:d9:cd:41:e4:44:05:22:a3:02:3b:48:c5:43:9c:4c:
         76:06:94:5c:53:6f:6c:b9:12:80:fd:bc:93:fd:68:e4:ed:79:
         83:5f:36:09:91:70:5e:a2:61:4a:4b:93:55:bc:36:fe:23:b7:
         6b:60:67:61:97:8c:46:2e:c7:32:38:b2:a2:65:cf:02:fe:b8:
         bd:c7:87:9b:82:65:8c:1e:f8:2b:49:2f:c9:a4:94:f2:1b:c2:
         99:fc:f8:a9:07:ba:9b:4f:66:33:50:81:e1:e0:27:9a:f0:39:
         76:59:ec:3e:28:6d:10:14:da:97:ee:d5:5c:1a:9d:2c:2f:04:
         a5:78:db:7e:f7:f7:12:52:fe:7a:bb:47:67:32:a6:d9:86:96:
         d5:17:03:15:d4:92:1a:97:e5:fe:05:13:68:a3:82:36:c3:43:
         57:75:7b:95:97:e0:9e:8e:eb:04:2f:27:b6:93:f7:74:11:ff:
         72:04:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----