Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File:                     z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier:          i91H3QlXdk6dP7nIqf/yxuGO9xFSNFMMGqgqxe4PXLI=
Subject key identifier:   61:A7:F2:7E:D1:EE:99:7D:17:46:72:5A:D9:39:9A:D3:F4:43:AA:72
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer:       /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial:       01962F06FA31A9D280C25F99D57F244BA0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
                          2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: xFjAsioHTyRdJTyXa7N5USkzizvRKIVDE8vwn20dpZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fa:31:a9:d2:80:c2:5f:99:d5:7f:24:4b:a0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=61a7f27ed1ee997d1746725ad9399ad3f443aa72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:72:ac:c7:ae:98:77:57:f3:8b:28:6f:48:
                    10:22:a3:8c:a7:08:d8:39:14:4b:6e:5b:8d:0e:57:
                    4a:6d:b6:c9:b9:49:a7:84:fe:5c:0e:8b:f3:9d:b2:
                    6c:5a:e2:a8:61:f8:d2:f1:1e:50:7b:4c:c1:0e:9b:
                    15:f1:62:a2:68:12:89:d9:6c:93:93:64:ae:ed:03:
                    3d:64:90:3f:58:97:4d:61:e2:ad:ac:1a:ed:bf:8e:
                    ea:34:0a:10:c2:61:a0:36:c7:ed:c3:a8:ea:06:5b:
                    5a:e6:23:2c:d0:ea:70:f8:68:f4:1f:31:b7:20:00:
                    cd:e3:8a:93:ac:91:65:83:d9:1b:4e:f8:d8:e9:07:
                    92:e0:06:13:47:8b:34:23:4e:59:de:bb:fe:f9:d9:
                    b4:4a:b1:cc:e5:73:ab:a3:78:27:56:0b:79:7e:68:
                    97:57:aa:c1:6a:3f:e7:7e:2c:a1:80:51:1f:28:04:
                    74:0b:08:c9:85:a9:c0:dd:cf:56:6d:ad:fd:7b:8c:
                    91:6f:bd:61:df:d5:a5:be:c1:6b:b6:71:88:c0:38:
                    92:99:e7:15:3f:bf:9c:ea:ba:cf:67:e9:dd:1a:c4:
                    61:d6:ce:71:62:86:b1:63:fe:f1:4f:1e:06:ab:40:
                    9d:52:55:5d:0a:75:71:98:f2:65:2c:22:a5:fc:3b:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:F2:7E:D1:EE:99:7D:17:46:72:5A:D9:39:9A:D3:F4:43:AA:72
            X509v3 Authority Key Identifier:
                keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5d:3d:8e:39:3d:00:c2:ea:22:2e:0a:9d:22:82:f0:0a:4b:
         6d:f0:c6:af:e2:4d:a4:40:28:30:01:76:3a:ee:c6:28:ad:07:
         1b:bd:7e:37:9b:b2:69:2b:9a:ed:28:bb:aa:77:6d:76:3f:d3:
         58:a4:36:c6:5c:7d:ea:55:cf:e5:04:72:ed:bd:73:22:8f:72:
         a3:d4:ee:88:33:d4:f2:ee:c5:6b:3e:8f:65:e8:38:d9:15:5e:
         ad:ca:5c:0e:ae:11:27:ca:28:55:9c:3a:bb:1a:97:21:94:02:
         65:b1:d5:cc:48:a7:71:e6:f6:fa:92:ac:6a:da:77:cc:0d:d6:
         27:d4:7e:6a:75:33:07:9f:2d:c5:52:ef:f1:5d:7e:ab:00:04:
         47:c4:7f:5c:68:73:d7:45:6e:59:52:f5:11:58:86:eb:06:db:
         d7:19:db:cd:d4:3a:5a:67:1c:f0:f6:dc:2c:d4:99:a2:1e:3e:
         4b:aa:ca:05:7d:f4:41:18:25:06:e4:e8:75:e8:95:36:2e:f0:
         f7:14:e4:c0:74:e0:62:36:e2:15:bb:e7:56:59:68:a5:12:f2:
         d2:c3:b8:6d:d4:ee:00:ac:b0:32:38:09:e5:32:44:c8:12:e0:
         f0:61:24:1b:2b:15:8b:e2:dd:e4:da:32:49:92:9c:8a:88:e1:
         f7:69:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----