Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File:                     Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier:          Uak5ydJlb4ZjrZODk+OKu8DVkEACj/3rwHE7G0Yuc3E=
Subject key identifier:   80:F6:E8:A2:8B:30:86:A1:4D:B8:6C:DC:EA:18:60:93:82:A1:75:44
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer:       /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial:       01962FAB824C4D2FA69784F8FBDC48660755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
                          2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: mnXgG5ED1wfaHMe28+wlaEOzeIOhZ7UcKmQlAX5AjIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:82:4c:4d:2f:a6:97:84:f8:fb:dc:48:66:07:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=80f6e8a28b3086a14db86cdcea18609382a17544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:db:b4:aa:f1:08:9b:90:d1:ca:d1:ee:1d:
                    67:1a:ec:86:b0:84:0e:96:39:be:50:9c:cf:6c:97:
                    1a:1c:c5:27:70:68:e5:63:65:6f:88:d9:af:aa:3c:
                    4e:cb:f6:18:7b:bf:a0:b9:36:ae:4a:fe:a8:f0:cb:
                    de:75:b6:70:5f:52:32:fe:1f:ca:04:58:8f:10:4d:
                    84:6c:47:0d:1e:c9:c9:bc:19:25:3a:12:71:bd:fc:
                    eb:b5:15:68:3a:d8:37:b8:7a:ac:e5:d2:66:ad:ac:
                    4a:01:ca:71:2d:29:e7:27:6d:f1:71:8c:4b:d8:cb:
                    33:ae:2b:62:35:e7:be:8e:8f:4d:8d:51:18:c0:44:
                    9a:01:13:48:67:b8:a3:a8:bd:34:34:42:2f:0c:a9:
                    d5:a7:7a:52:ef:9b:ab:53:6b:f3:9d:b8:d1:e4:94:
                    ab:cd:ee:97:c4:75:72:37:c6:04:12:9e:f3:d9:f7:
                    b7:18:16:8c:64:1e:fc:a6:16:98:d3:89:b6:47:9b:
                    fe:69:4f:22:71:84:c9:c8:9c:e0:9f:92:27:52:18:
                    5f:63:09:f5:b8:88:3a:0c:bb:2a:b4:e2:8b:d2:06:
                    be:7e:7d:ff:82:48:dc:0b:36:a7:82:82:9d:24:45:
                    62:70:ba:a5:c3:94:45:39:8e:f5:47:d4:cb:06:63:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F6:E8:A2:8B:30:86:A1:4D:B8:6C:DC:EA:18:60:93:82:A1:75:44
            X509v3 Authority Key Identifier:
                keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:93:a9:20:1f:ef:d3:c5:03:ba:78:1e:e2:17:1f:3a:9d:73:
         76:f1:23:f6:f1:cc:7e:d6:d3:54:7d:69:34:c3:1d:0f:8e:d0:
         10:59:07:0b:fd:2b:56:47:b3:37:40:56:ab:2a:34:bb:3a:95:
         06:be:b3:c2:04:a1:fe:40:3f:a3:8c:01:16:aa:29:f6:02:df:
         ac:ee:43:4a:fa:86:79:58:02:b2:bf:14:4e:38:48:d4:1d:bf:
         51:96:dd:72:b3:88:02:83:89:bd:91:5a:af:36:c5:cf:57:bd:
         5b:55:f4:a1:12:df:87:27:62:4b:e7:98:93:62:6b:67:06:89:
         fe:8f:f0:fc:df:8d:02:63:18:0e:47:1d:26:ac:aa:5c:1e:65:
         c0:e7:5f:3a:ce:d4:86:7c:cd:fd:69:33:4e:62:6a:d9:40:67:
         62:30:dc:d9:e2:3c:44:ef:67:49:74:77:63:1c:89:53:31:63:
         72:78:9a:51:6a:ba:ae:01:48:36:e0:37:ee:9c:1f:98:85:84:
         98:bb:a2:28:f3:df:0b:30:3f:6a:f5:7d:62:b0:a4:2d:c5:2d:
         b5:21:4a:31:95:5a:b2:fa:fc:01:52:3d:b7:26:97:5e:b3:ff:
         c5:54:1c:1e:ef:7d:19:77:db:ed:b5:86:a3:26:47:7e:34:35:
         7b:f2:53:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----