Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File:                     Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier:          P7p9UZ0lGQLHNXd7Yh57MFIabFZcZTAh2Z7xwCJNpcg=
Subject key identifier:   2E:FC:19:2E:3F:7C:FD:E5:7A:12:50:AF:5D:F1:99:D7:FC:93:99:F4
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer:       /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial:       01962F3D484D6B81D80EF93EE53A6F296384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: pVvjzoxMQorJfHLjRFSqAbxuD7qbKBSFmF686Bng4Zg=)
                          2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
                          3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:48:4d:6b:81:d8:0e:f9:3e:e5:3a:6f:29:63:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=2efc192e3f7cfde57a1250af5df199d7fc9399f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:22:bc:69:cc:33:3c:33:3c:3d:19:75:39:
                    71:6a:df:1e:89:69:b0:64:52:fd:34:16:0b:85:3f:
                    84:10:7d:2d:0d:1a:09:cc:35:bb:cf:d9:05:ef:17:
                    30:15:b7:a0:b2:21:7f:6a:68:94:70:30:88:bd:46:
                    68:23:67:34:62:e9:f5:4e:4c:dd:87:70:68:41:55:
                    b3:40:69:65:9a:b6:a2:e4:5b:79:9e:ba:4c:c4:a2:
                    b5:bb:02:0c:2d:88:82:f7:27:a4:6f:38:9c:8b:6d:
                    a4:55:68:06:3c:64:4f:cf:a5:9e:d6:dc:78:8e:82:
                    88:7f:41:f3:31:9c:50:7d:d5:d4:fc:0d:6e:e1:0a:
                    9f:d1:b0:23:d4:a2:f3:8a:d9:6a:6e:2e:0f:de:14:
                    9d:24:b4:e7:03:01:03:bb:01:74:95:a0:e0:31:73:
                    b4:40:42:db:22:7e:d6:60:d8:11:50:ae:69:ee:c6:
                    6f:a3:a7:5e:70:1b:6d:1a:44:c7:d0:61:48:d3:8c:
                    a6:65:22:8f:bf:3d:65:85:12:cd:e0:57:a8:86:e4:
                    f4:58:d7:fe:e5:ee:64:55:57:f0:c5:89:97:fd:ec:
                    a3:65:96:62:c9:e7:ae:a4:8d:7e:5c:d6:3f:d8:aa:
                    ce:ad:45:2a:ff:1d:fe:a3:03:b6:fd:bb:db:e1:3f:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FC:19:2E:3F:7C:FD:E5:7A:12:50:AF:5D:F1:99:D7:FC:93:99:F4
            X509v3 Authority Key Identifier:
                keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:eb:20:2e:31:64:be:bf:52:a3:9a:57:ea:c3:03:c2:68:9c:
         fb:94:63:3b:0a:e5:0f:7b:a4:60:1b:80:97:cb:84:12:59:0c:
         d8:e6:81:6c:50:93:48:ee:0e:2a:99:5b:c9:0c:6d:02:2e:3b:
         7c:37:9b:08:59:a8:1f:a3:ae:70:79:6c:82:62:a0:1a:c5:2e:
         8d:00:f3:cf:b9:4a:ee:0a:76:06:4b:41:b6:48:58:22:fe:9b:
         71:98:03:1d:3d:45:c9:0d:f6:b5:3f:f7:46:4f:54:5c:13:52:
         b1:fc:ec:16:a3:c0:50:1b:35:49:fa:5d:3a:af:21:02:ac:41:
         77:38:4b:05:d0:b5:41:ff:5a:ab:86:70:f9:6c:ca:5f:36:2f:
         11:75:4f:1a:92:d3:01:11:16:15:bd:e0:8c:c7:5f:e0:c1:8c:
         4e:7a:4f:38:fd:26:fd:38:07:63:c4:b0:20:97:59:44:0d:b9:
         ed:3c:23:40:90:2d:b2:9c:17:dc:19:32:9f:a5:53:49:d8:f0:
         f1:3a:c5:79:21:72:83:11:ef:ef:45:73:a0:84:c7:c5:8c:9d:
         26:b3:d9:ef:5d:d2:80:c9:b3:0d:da:f9:3f:4e:5a:4a:eb:95:
         60:f8:91:c8:21:3b:b3:95:a3:d7:f8:94:4a:07:d8:f8:84:13:
         0c:ba:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----