Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File:                     Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier:          r0iAgTYAuTZP2TVTRRTyh10ogeaNefG2z0PCkv3/Yds=
Subject key identifier:   CF:DD:D8:E5:09:78:B2:C0:75:F0:99:44:59:D6:AB:EC:18:BC:5F:37
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer:       /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial:       01962ECFA80694139CF0F1546E0D90D4DDB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number:          B5
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=)
                          2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: joo0KELw1G/p9DHc7yy5Za0+5cxD3jNU7Nl4gdS/ROQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a8:06:94:13:9c:f0:f1:54:6e:0d:90:d4:dd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=cfddd8e50978b2c075f0994459d6abec18bc5f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:60:0b:8a:34:07:70:99:a2:49:1e:fd:29:9c:
                    2e:6e:db:1e:73:f4:bd:02:f5:99:ab:c8:51:61:d6:
                    ef:b8:e8:f6:74:ee:64:96:9a:0a:18:6c:ef:8d:7d:
                    66:86:db:7c:87:e2:00:a1:17:03:8c:cb:6c:b4:30:
                    e5:0f:11:a6:10:eb:da:30:f9:ea:67:96:25:52:43:
                    e4:21:6f:0d:ff:e3:26:4d:6e:0f:39:ba:19:4d:a7:
                    81:a9:01:71:78:ef:98:fa:5b:1a:ef:62:5f:5e:28:
                    15:57:4a:46:49:41:89:27:a7:3f:af:d5:21:61:09:
                    ee:b0:6b:e9:87:8f:c9:31:ff:6f:6d:85:2b:e3:2a:
                    28:2a:26:35:0e:cf:6c:c8:f6:a8:38:fb:74:f6:ba:
                    47:08:02:ab:64:c8:ab:46:4c:3c:02:c0:9d:6a:89:
                    c4:4c:9e:2e:7d:6d:82:fd:b5:3a:0c:23:e1:2d:49:
                    b4:90:59:34:5c:ef:64:05:72:07:ea:3f:09:97:7c:
                    ab:cb:bd:08:07:f2:c3:6e:80:32:2a:8d:6f:da:57:
                    e1:9e:cb:67:f2:7e:0c:16:fd:f5:34:07:ed:12:f7:
                    5c:e6:2f:2d:b7:5d:d5:26:53:2b:23:e1:27:dc:0c:
                    85:40:0f:59:42:03:b2:e6:6f:21:07:d7:30:2a:b0:
                    b4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DD:D8:E5:09:78:B2:C0:75:F0:99:44:59:D6:AB:EC:18:BC:5F:37
            X509v3 Authority Key Identifier:
                keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0c:43:b5:75:9e:71:8e:a8:3c:f7:75:9b:53:6e:6e:30:5f:
         da:f8:55:6c:61:fe:54:6b:92:b1:bd:9a:65:ea:62:5c:28:b0:
         55:73:cc:dd:31:e6:ec:8d:4c:b3:9f:42:ea:71:3d:ec:95:25:
         21:2e:e6:ed:8e:fc:30:d2:34:17:f3:76:0f:a1:f9:c4:f8:a8:
         ed:e0:87:1f:da:b8:97:dd:70:ae:08:01:47:0f:30:8b:02:e7:
         46:82:f5:d1:4f:4b:e6:f8:72:27:a5:c4:6b:3b:b4:eb:90:01:
         8c:ff:1e:71:79:a3:1c:67:f2:51:3f:39:00:ca:8d:d8:2f:46:
         ed:78:0e:eb:ed:56:e5:2e:29:53:e7:25:f2:79:18:15:2d:5f:
         1a:4a:90:41:ef:e2:e0:ee:37:78:06:2d:31:21:b1:2c:b1:2c:
         c1:5b:2a:9d:5f:fd:eb:18:9d:60:7c:05:a1:70:ce:24:07:5d:
         eb:f3:fc:8c:31:96:80:c5:ea:95:41:ee:d3:2e:5a:5e:65:76:
         77:7b:aa:0a:77:84:d3:7e:a8:00:1e:dd:8b:1e:be:c1:62:2d:
         7d:70:e9:1d:02:3a:ca:18:b2:1e:9e:69:3f:56:d5:c1:d4:72:
         f0:82:02:01:55:7a:fe:e4:47:44:dc:0f:2d:03:d1:4c:de:db:
         62:71:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----