Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File:                     Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier:          LZQ+PtTi5H7Z52VbaMICCPc1yoqVwQvhy1Xg6L64FrI=
Subject key identifier:   D5:43:C7:13:73:7E:92:CC:B5:D4:11:A2:EF:A8:B3:83:1E:3E:81:C5
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer:       /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial:       01962E2ADED880F6FBA2DC78EB012929DCE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: 8f0/Q/Q3oImVA1CZFWber3qtuRLd5wTdtGeMJiUqOrM=)
                          2: lAuSQuDFdUBMNl3lAy120twR4Nc.roa (hash: JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:de:d8:80:f6:fb:a2:dc:78:eb:01:29:29:dc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=d543c713737e92ccb5d411a2efa8b3831e3e81c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:98:d4:ef:9b:fa:f0:4e:73:43:60:5e:84:
                    ed:57:21:44:7f:11:2e:12:30:78:f0:36:f6:4f:28:
                    fc:5a:42:b0:cb:b6:95:ee:19:74:53:60:4b:aa:45:
                    d4:7d:c3:09:49:13:46:98:19:15:3a:ff:59:a7:44:
                    36:53:ae:c4:bf:ef:ca:b9:bc:b1:98:b5:4f:a7:6d:
                    e3:a1:68:85:51:af:e8:87:c6:0e:ac:77:8d:63:3a:
                    a5:ca:e5:e2:0a:9e:54:8c:2b:10:56:f1:fd:ae:10:
                    03:0d:9e:27:63:ae:0d:73:0e:72:2a:6c:bb:5f:09:
                    c6:06:7d:bd:3d:e8:1d:fc:fe:f0:c6:0f:64:c8:f4:
                    8b:60:de:e4:2d:ba:97:46:bc:f2:d7:3a:44:f7:63:
                    31:60:db:4a:1b:86:3f:b2:ae:97:39:9b:bf:d5:6c:
                    86:db:86:4d:5b:f2:1e:17:0c:be:aa:92:5b:46:15:
                    78:a5:8d:f1:34:13:66:52:de:83:25:b3:1c:b3:ba:
                    2f:56:4d:c4:5d:72:02:94:bf:52:61:55:c5:ce:30:
                    e1:54:b2:9c:e6:3e:10:79:0a:d5:86:7e:2e:c9:66:
                    0c:0e:25:f0:c0:a0:e6:ce:f3:48:1e:94:a2:97:fb:
                    f8:91:76:19:5d:1e:61:01:87:ea:c9:4b:9a:d8:b0:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:43:C7:13:73:7E:92:CC:B5:D4:11:A2:EF:A8:B3:83:1E:3E:81:C5
            X509v3 Authority Key Identifier:
                keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:dc:df:d6:81:fb:74:72:7a:a3:0c:ad:3a:bd:91:3d:50:c4:
         6c:a8:b2:b5:4f:64:59:06:ed:c1:31:c0:fa:82:7a:f5:9a:e5:
         35:6f:e2:76:5e:c3:9b:a0:56:87:aa:e1:9d:38:47:9b:52:6e:
         40:f0:e8:02:e2:c8:76:76:9e:e7:3c:fa:90:25:9b:36:27:e1:
         48:f2:fc:7c:5b:2a:c3:0c:b6:97:6b:4d:b5:7e:2d:d5:ad:a0:
         d8:6b:72:1c:ab:88:b6:34:fc:42:05:eb:84:64:bc:c5:c4:3d:
         91:4c:f3:4f:c2:3f:46:36:e3:ee:e3:6c:4f:c1:ee:e6:23:c6:
         18:ce:15:ef:bf:e3:cb:f5:87:13:45:78:57:f5:aa:db:54:d3:
         d6:10:d2:7f:c1:19:ef:66:68:31:25:b5:e1:43:94:de:ef:21:
         22:bf:78:5b:1e:83:16:84:b2:89:f2:0a:e7:33:de:79:28:c3:
         a4:c1:2a:90:87:c6:b7:fe:a5:24:a4:a2:51:2a:9c:16:f1:f0:
         4f:9a:ed:e6:50:59:9d:be:aa:d9:b5:f3:e4:31:54:74:ea:af:
         40:90:51:44:c1:4f:71:24:28:14:d1:0e:47:63:d3:aa:c8:bb:
         bb:54:a6:b1:6d:9d:6b:37:27:f7:ca:41:85:1d:9a:62:4b:00:
         08:63:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----