Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File:                     DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier:          AFNxH8eEJLz/kC/rpcavbdcKAxFV9m3pIXnatSYtz4o=
Subject key identifier:   C7:89:2A:C1:62:3E:74:F1:BB:45:32:7E:B7:D6:F4:C4:3B:BD:14:E3
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer:       /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial:       01962F3D3982050F43FCF7D6671ED4ED4D50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: lOHnZFwsL5KWs0XZX3stD/gRn93XTkGGHzubYWs+iAs=)
                          2: OKYG51ny4JzR_NLTt0NMC5jjs5w.roa (hash: q7wWYvvmDZVEwvT4mSRrL9j7EyJqRlFav3ZfehvFtAs=)
                          3: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (hash: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=)
                          4: qLpskkGdWMp75uesslOqcJ0MWnE.roa (hash: X4MuNwdwba0DvT/WVM9tY1i1XGTLnQOuEconDao1Nw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:39:82:05:0f:43:fc:f7:d6:67:1e:d4:ed:4d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=c7892ac1623e74f1bb45327eb7d6f4c43bbd14e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:eb:a5:89:c2:f9:1a:17:bb:f2:fe:1a:0a:
                    67:e4:ac:a1:08:ed:4a:a4:d2:d0:f7:a4:67:66:44:
                    48:ce:59:cf:0c:e0:d3:c4:3a:3f:52:12:b5:29:2b:
                    0b:de:d8:ef:5b:a8:7f:2c:12:0e:3a:3e:56:b9:ae:
                    77:32:d0:8a:3e:9c:88:b3:58:13:74:41:7f:77:27:
                    58:a6:31:29:cb:61:a3:77:ca:da:2d:fa:e4:1b:e3:
                    27:36:10:a5:78:3c:74:39:30:a8:e5:58:4c:b8:d5:
                    97:c8:ff:5f:61:f0:e5:3a:9c:ef:d6:bd:80:14:03:
                    85:56:a5:08:36:cd:e0:f4:51:9f:65:4e:11:0f:cb:
                    f4:8d:ea:35:e0:d9:f1:61:ae:c8:29:c6:d4:ef:86:
                    ee:d7:54:f9:4f:fc:a7:bc:48:c0:85:e5:16:1f:5c:
                    d0:e9:68:35:63:2b:f4:63:6d:88:c6:ba:fa:4a:14:
                    bc:f5:99:5f:e0:66:01:82:a5:6d:66:45:06:c6:cf:
                    b8:fc:73:6e:61:3d:db:41:68:92:62:3c:dd:77:00:
                    ec:39:f6:68:e3:ac:73:7f:d6:3d:46:bc:5b:49:fd:
                    56:ce:50:c8:c2:b7:d3:32:ec:8c:13:c1:07:06:34:
                    46:4d:e5:de:1e:19:ee:65:47:b0:2a:a2:6f:e2:ad:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:89:2A:C1:62:3E:74:F1:BB:45:32:7E:B7:D6:F4:C4:3B:BD:14:E3
            X509v3 Authority Key Identifier:
                keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3f:92:31:b9:ce:63:ba:c9:8c:79:2d:2e:76:84:31:fe:a2:
         8a:31:9b:b6:b1:c7:cd:cc:af:82:ee:b1:21:63:58:2f:15:f8:
         b1:39:44:26:ef:52:35:dc:2c:26:e1:96:15:9c:c5:e2:30:77:
         b5:35:f5:ff:df:65:b7:89:54:34:13:4b:26:47:91:27:53:0d:
         ec:8e:ef:08:3f:bc:f0:f5:dd:d4:b5:aa:bd:b8:d6:39:87:4e:
         e5:ed:0a:20:c4:a6:6e:c5:7f:0c:6b:66:71:04:89:2e:ed:ab:
         75:59:1e:dc:90:bc:71:c5:4c:d3:c3:37:86:8c:7a:d8:89:ca:
         80:15:df:8c:e0:57:1a:93:ac:43:9c:1f:c9:99:9d:fe:22:97:
         5e:11:0d:cb:cf:43:dc:1d:74:d1:06:45:9d:eb:f5:e5:f7:66:
         8c:5c:c0:be:49:48:2d:d0:31:9d:74:fd:a1:4b:b5:73:ab:4e:
         66:e6:a8:cf:23:31:77:7e:21:83:2b:7d:52:a5:eb:7f:91:a9:
         8f:64:c6:01:f9:a8:e4:f9:2e:4f:e2:9e:c9:67:f7:28:f4:5a:
         67:1b:57:03:ed:f9:ab:90:00:63:09:92:04:a8:68:a4:3e:89:
         7e:00:e9:db:9b:d3:96:3a:da:53:ac:ea:d5:10:f2:2d:49:b9:
         be:58:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----