Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File:                     dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier:          /GKJyAekWqbaLDS2FIkrirYjlBFlgAQbiz896uOEXhc=
Subject key identifier:   A0:E5:5E:81:AD:29:A5:4D:49:74:71:AC:17:36:8B:40:01:3F:5F:79
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer:       /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial:       01962E61C88909AC286C32C36B81520A5D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number:          14C2
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: NMSBGdXZ3nNbNM6HmAD11nbjUUc.roa (hash: 8ncSaAlvsGwgwEz4IVnirUboMfpzaj3h+0Dd6V+Vjp0=)
                          2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: ARS0/8QAC1tbx7evEsU17EA4/uDGFYjAmc+V4rgSU28=)
                          3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
                          4: sQhT4EcSgUdSOJf-IlcAVbhhanQ.roa (hash: yOHMgQvvnUGeXtEo1mVldnI757iV9L6oiBbCrHJFV5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c8:89:09:ac:28:6c:32:c3:6b:81:52:0a:5d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=a0e55e81ad29a54d497471ac17368b40013f5f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:ad:2e:14:9d:89:d9:ed:7e:b3:31:a8:f2:
                    e2:51:f5:06:df:d6:e2:a7:2a:bb:bd:46:c9:f5:89:
                    99:fc:27:88:d6:3f:5c:36:f4:13:76:42:4d:43:da:
                    78:f8:c3:b5:e2:b1:e9:6a:18:9d:f3:1f:0c:f1:48:
                    37:f2:fc:f6:05:04:77:f8:ac:04:38:37:ba:84:d4:
                    81:2e:f5:62:cf:cb:bd:11:7b:6a:d4:9c:3a:a5:9e:
                    0d:14:63:e1:49:a3:78:0f:02:d0:84:b8:ec:c9:61:
                    b8:44:51:4c:d8:77:83:c4:7d:df:cb:a9:8e:84:26:
                    c2:33:84:3c:48:f4:ba:35:24:7f:65:43:2d:e6:cd:
                    f3:18:e0:11:3d:1e:a3:f5:a3:f4:50:1d:41:59:43:
                    2b:62:12:dc:6e:dc:64:73:25:57:ab:0a:c9:25:0e:
                    0b:2d:ba:ac:e4:28:2b:0e:bc:96:7c:83:6d:4f:1d:
                    23:72:de:20:c9:59:86:e2:a0:ac:f7:7b:fb:2a:8d:
                    9d:2a:b8:69:14:3c:b2:f7:2f:72:56:c9:68:33:26:
                    32:36:aa:5f:73:94:69:8b:c9:de:01:b2:ea:fc:41:
                    1e:15:f3:f5:97:1e:e5:8e:6a:aa:ad:d8:e1:56:54:
                    9f:d0:12:7e:08:9a:4d:44:14:fa:71:0f:a9:ca:06:
                    e8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E5:5E:81:AD:29:A5:4D:49:74:71:AC:17:36:8B:40:01:3F:5F:79
            X509v3 Authority Key Identifier:
                keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:68:f0:d7:86:b2:1f:05:02:9e:5e:97:0c:24:78:75:f2:1f:
         75:fb:d5:e6:18:cf:42:39:52:24:84:62:27:cc:91:77:fc:36:
         a9:d5:06:77:15:ba:1f:15:73:72:a2:ec:81:4b:6d:53:ae:d6:
         d8:83:1e:66:bc:ba:da:3f:0c:c5:fe:b2:8e:7d:a6:b3:4f:c9:
         b8:b1:50:68:88:6b:4c:11:e8:d6:8a:f7:6b:5f:2a:bb:5c:f0:
         44:bd:03:21:bd:d0:79:9a:0e:c5:c7:42:ba:0c:5d:83:65:67:
         ed:61:82:d1:b1:ec:6d:bb:75:f7:ca:22:e2:98:9b:46:a3:e7:
         c1:be:49:6d:90:20:91:e0:05:95:4d:6e:1e:df:4a:bb:2d:b2:
         17:53:c6:ab:64:66:e2:8e:ff:c6:2f:82:1d:c0:e4:35:6e:73:
         d0:a6:89:63:74:61:60:b3:5a:47:7e:b5:d4:ed:a0:58:ef:3e:
         60:b3:6a:c4:cf:f0:84:7a:1f:fb:21:e3:b8:3c:5c:bb:db:1f:
         80:db:b4:f9:9d:5c:60:76:00:26:15:8a:20:bf:28:b7:b8:da:
         4b:e7:b6:d2:f4:24:a6:eb:16:85:80:ea:e0:33:3f:47:9f:62:
         3f:53:72:3c:2f:2e:1a:53:4e:d2:8b:25:31:f2:cb:a5:37:70:
         a8:92:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----