Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File:                     Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier:          gg9WnvoHbkjHwLbq0GmwUDo+zAoVN+DbBKckh80HZzI=
Subject key identifier:   5C:EB:99:AA:1C:79:ED:78:DB:D4:2F:11:CC:35:B5:50:D0:7B:27:FF
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer:       /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial:       01962E98CD8DC08F79A670868324B540831C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number:          0526
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: sCjGxR95s4M4r+OY+0fNOgMa/Dg2y+dDffHKI84O89I=)
                          2: z_g_oyYscLU1IVMsubV8om2IHIM.roa (hash: TMMjkM/DLDsCF3bsXeBPNo5kbzaCJniVgP9Feba83Jo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cd:8d:c0:8f:79:a6:70:86:83:24:b5:40:83:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=5ceb99aa1c79ed78dbd42f11cc35b550d07b27ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:84:3f:32:b7:31:31:b7:11:d7:cf:7f:12:8e:
                    fe:c6:26:44:f0:48:54:dc:3c:e1:3d:6f:12:ab:1b:
                    90:17:87:bd:9b:13:0f:ca:15:d5:6f:bd:66:28:70:
                    4b:81:f1:9f:2c:bb:f8:14:5c:41:ca:d8:f4:05:e6:
                    7b:35:09:dc:34:b2:14:db:12:c7:1a:2b:98:0d:ad:
                    67:94:98:5f:db:9f:24:82:a4:da:64:55:7f:cb:0e:
                    60:69:63:eb:eb:86:65:b6:d2:69:fc:8b:25:b4:d7:
                    41:39:2c:9c:7d:d2:8d:57:1d:dd:04:85:1b:09:c1:
                    36:79:1c:31:58:4f:b9:1b:00:55:33:d4:d6:75:0d:
                    dc:b6:49:16:78:f0:e0:b4:33:8b:c1:1f:9c:4a:92:
                    9d:cf:d6:0b:c3:7c:7c:7e:54:7f:3e:78:dd:64:fb:
                    0e:9d:53:1c:eb:7a:59:5c:bf:c0:8d:74:f0:86:d0:
                    aa:7e:ac:32:4d:4b:f6:6b:c7:06:17:d7:e8:b5:ad:
                    b1:df:2a:c9:d8:a2:d0:da:fe:1f:4a:bb:2b:77:cb:
                    8b:e6:76:e2:a3:38:27:8a:2b:b9:e0:8a:b6:45:82:
                    69:20:3e:d0:8c:8f:c1:ae:0f:be:f4:5f:82:d4:c1:
                    5f:a8:5d:7e:a8:27:c0:a0:bf:b4:4b:37:e5:8b:b7:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EB:99:AA:1C:79:ED:78:DB:D4:2F:11:CC:35:B5:50:D0:7B:27:FF
            X509v3 Authority Key Identifier:
                keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:8a:24:89:e5:af:ef:16:de:65:83:f4:30:70:35:39:ae:
         e6:fe:b2:3e:03:f5:48:e9:97:50:db:f5:6f:62:1e:0d:e2:3b:
         82:3e:c1:63:95:28:1b:e3:a4:06:dd:15:9b:23:18:a7:3d:48:
         9d:9c:16:d6:5f:5a:1e:97:1c:6b:cc:6c:15:02:72:27:04:b9:
         24:e4:b9:9a:fa:bf:36:73:1d:68:89:01:af:c0:d7:03:fe:0c:
         70:a3:04:f0:b1:74:85:34:ae:a7:16:fd:9e:fb:6b:45:40:72:
         e2:6f:fc:f1:2a:d7:9c:77:57:fe:e3:d1:c7:f8:d8:92:b3:60:
         50:36:69:74:85:3f:b0:7c:a5:54:d2:11:e6:3d:94:31:78:4c:
         6a:77:eb:d1:08:a5:e9:1f:93:29:92:9b:63:87:a9:79:7d:48:
         b3:98:37:14:4c:35:3f:67:a3:f1:73:34:d4:50:e3:70:3a:87:
         48:3a:f3:8c:01:24:85:ef:80:87:29:31:bc:29:f8:a9:c9:d4:
         3d:80:e8:60:97:a6:b1:2b:77:33:2f:b4:eb:18:c1:e0:2e:f6:
         bf:ce:80:4b:69:76:e2:5e:36:a4:8a:f5:37:ff:5f:f0:3a:4d:
         ad:c0:a7:97:21:19:08:b1:27:61:a4:39:44:3a:45:f4:1c:e1:
         e5:a2:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----