Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
File:                     Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json)
Hash identifier:          1y4CbxfkYiU6DyYq3Uf3GTNT9e/FLTUeo5gdiJHCE1s=
Subject key identifier:   05:E2:96:B8:E7:28:97:0E:70:6D:CE:F4:07:44:9B:AE:44:61:8F:EB
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Certificate issuer:       /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial:       01962F06FB4472C92F819956500601500C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
Manifest number:          120E
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=)
                          2: 3vr6MmTJusXLHnoomZaTFzf2R_Y.roa (hash: wwVRXCGEVqcIpkBMKuCLGQDGcvT246U/Ud4fDza9yz4=)
                          3: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=)
                          4: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=)
                          5: Q4p-qYS2sgvt0GJ7uYJPvsOIkIg.roa (hash: j/H5JWeQ0CkSOjcFdGwjX75ybxoyKIcMgX/vQel3jRk=)
                          6: Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa (hash: K94v285TvMOOo7AcPioAGeK/gkVuCpfkO4FQfselq2s=)
                          7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: qzya2RQBtmgqP+Za3DQakBaPnfMubzkzQ5jO9L48B7s=)
                          8: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=)
                          9: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=)
                          10: lOoV_awaoXNj1bfhx0bx4WIBK_o.roa (hash: Oj6EJtwaCyCNiMtSUcVlupYUT3Tc0ATPehxbzKeY1zw=)
                          11: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:44:72:c9:2f:81:99:56:50:06:01:50:0c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=05e296b8e728970e706dcef407449bae44618feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:fb:f6:e4:1b:6f:2a:bf:00:8f:42:e0:2f:
                    63:c3:99:ba:d6:ac:39:a8:87:e1:29:40:df:db:02:
                    a8:c3:cd:d3:48:24:f8:59:1e:b5:5e:5d:7e:ea:14:
                    4b:3d:33:d9:40:f1:97:51:27:6b:55:79:27:74:1d:
                    13:e2:59:09:23:e3:41:61:27:f2:c1:df:02:7d:a8:
                    9d:cc:72:82:d7:d6:6f:93:f1:bd:ef:e0:4e:9e:a5:
                    78:09:bc:68:b4:a3:f1:33:26:a9:a9:91:5b:49:20:
                    9a:ae:35:87:9f:86:95:0a:85:e8:95:66:77:85:c6:
                    18:82:db:00:4c:96:79:33:4c:e2:ea:89:b0:46:d8:
                    67:c9:ae:04:ba:d0:c3:52:e0:8c:f3:a8:ee:1d:d5:
                    fc:d0:9c:7a:a1:0d:a3:54:6f:79:8d:22:66:1f:a8:
                    8c:0d:bf:17:42:94:ef:ee:d1:cb:2c:5f:69:6e:28:
                    9d:3d:1e:c3:f2:78:b9:1c:66:27:fd:ea:b9:5f:78:
                    46:2e:e2:54:39:4a:64:6f:af:f7:b0:45:ee:3e:d0:
                    d9:19:bc:df:97:66:d8:6b:55:2e:5d:77:a5:21:19:
                    a9:1f:55:f1:09:f3:1f:48:1b:8f:ec:4b:28:e0:76:
                    43:0f:31:15:4e:b5:4d:3f:7c:a2:8e:e2:2a:6e:e2:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E2:96:B8:E7:28:97:0E:70:6D:CE:F4:07:44:9B:AE:44:61:8F:EB
            X509v3 Authority Key Identifier:
                keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:79:b2:37:03:72:75:ba:4c:22:91:3d:4a:47:6d:89:47:
         aa:ca:26:4f:8c:5d:3e:1e:88:09:37:68:a6:e8:51:3a:19:90:
         37:a4:35:9d:01:a1:9e:76:05:7f:e6:e1:03:60:9e:6f:d6:ee:
         8d:85:99:ae:24:16:3f:e7:70:0d:e6:ac:b7:fe:08:e0:a0:1f:
         8f:e2:2c:6d:0e:cb:37:4b:fe:70:25:99:b6:3e:5a:42:a5:f8:
         a7:5d:32:91:dc:6f:94:a0:3f:05:3b:3c:2b:54:ac:6e:03:de:
         b1:8b:55:1c:d8:69:94:eb:dd:8c:b6:69:2e:5b:51:40:b9:d2:
         bc:7a:e0:73:22:e8:2b:5a:76:07:86:68:48:51:68:b0:96:5e:
         7a:75:78:ed:7b:98:8c:a0:27:b8:a4:d0:2a:1b:fc:2c:d2:6d:
         a3:49:58:fe:f3:ee:a7:25:18:95:7a:19:9a:58:8f:c5:a9:2f:
         1d:52:b0:b2:60:8b:c0:5f:82:fa:61:85:fe:a9:f9:24:44:8f:
         cf:6a:4f:4a:9a:e4:59:c1:bf:25:89:ef:1c:e3:c5:ba:ab:d8:
         4b:2e:6e:fe:e3:4e:ff:b9:69:f2:3b:9c:f5:7f:9b:e6:4d:72:
         06:56:6e:a0:7d:22:73:57:7c:6a:9a:76:7e:ea:1c:16:b8:f2:
         43:b6:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----