Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
File:                     z_XcdutvgU7WAVaP3SyBEO3vjBc.mft (raw, json)
Hash identifier:          6G/pcHs9xHR546edoTQi/Onfu3CGDT3ETwFUs0Zd7d0=
Subject key identifier:   DC:72:5B:09:F6:7C:0A:9F:BB:76:C1:3D:58:E4:BE:56:84:50:11:7B
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Certificate issuer:       /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial:       01962FAB47B40E873A4491C7330F533F13AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
Manifest number:          0712
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: fl9cR0Hr0oLr8djRK-h6E2ObDr4.roa (hash: 93CR6TY7DEqZVxX2jIz+No9D+VOTLrGIoOBFxhhep+M=)
                          2: wey0C1mE-I7Q_DwhL1U5777Ego4.roa (hash: msSNP+OWSu/l7L1W+jddczo39swU6ms6DyPahC8MyPE=)
                          3: yTfvgCzBX5KpMte61Zg26iCGXLo.roa (hash: +V/hMZljZPtxUcKR56JEEYbLGPxCc6haoD/lYyBDsO8=)
                          4: z_XcdutvgU7WAVaP3SyBEO3vjBc.crl (hash: Sa/re6K25rngAMtKM7QmP/Vvc1qUtLPrwMQ+00A8t04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:47:b4:0e:87:3a:44:91:c7:33:0f:53:3f:13:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=dc725b09f67c0a9fbb76c13d58e4be568450117b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:68:a5:4b:11:de:ec:d0:63:78:1c:ba:58:
                    0e:72:8c:7d:8a:d8:d1:05:e8:09:2c:fd:9b:5d:c8:
                    ec:d2:cc:4a:e1:16:5f:4e:81:a1:b5:26:fc:30:c6:
                    90:ad:3a:ba:d4:90:bf:c2:50:dd:3f:d8:35:80:a3:
                    cf:b1:e9:d8:3b:0c:41:f9:49:b9:1f:20:21:d6:9c:
                    37:cd:f8:ac:a4:08:dc:73:3b:f5:5d:ba:bd:37:a4:
                    30:89:06:60:12:65:3d:73:2d:66:0a:b2:0a:74:0a:
                    60:a5:1e:22:38:7f:31:89:b6:98:ad:ca:59:a9:53:
                    0d:fb:2f:3f:24:2b:29:b6:ed:2e:6b:0d:bf:65:d4:
                    c1:b5:59:8c:e9:c8:1c:52:89:d2:c3:16:92:67:a2:
                    8b:9c:b1:7b:cf:45:7f:36:7e:41:6e:c6:11:d0:e8:
                    34:9c:34:e8:42:78:76:4f:4a:f8:80:45:01:9e:db:
                    6c:07:90:1b:f5:81:48:cb:86:5a:97:86:43:86:7c:
                    21:3b:7b:f1:2f:11:cd:a5:06:cf:8d:ab:32:0d:c8:
                    22:a8:e1:13:dd:35:5a:c1:2f:87:5f:fb:b4:a3:b5:
                    a2:40:a1:2f:14:48:80:36:e5:64:69:f7:d9:30:cc:
                    6a:ee:de:1f:f6:38:56:b3:99:08:a9:31:88:62:9d:
                    2a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:72:5B:09:F6:7C:0A:9F:BB:76:C1:3D:58:E4:BE:56:84:50:11:7B
            X509v3 Authority Key Identifier:
                keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f5:e5:2e:49:06:74:b7:2e:14:0d:0d:c7:06:6a:44:4a:aa:
         a3:8c:5d:26:2a:42:1b:d4:91:4f:64:e5:5a:c2:4f:69:64:8c:
         79:5e:6b:e5:c3:8a:41:9f:af:e8:3b:8a:25:42:f4:4c:a0:c0:
         65:ec:84:51:71:a8:bb:0d:07:9b:44:39:81:ea:78:a3:3f:57:
         d7:2e:02:6e:b3:7b:63:fc:34:5b:90:00:3b:dc:d4:49:dd:7c:
         d0:46:44:ba:f8:03:0d:2d:4d:7a:59:8a:68:6c:30:fa:31:74:
         58:88:4f:37:e2:03:50:14:79:fe:00:57:fa:a9:77:37:62:5e:
         11:8b:e0:2d:96:ac:a2:ea:33:67:6c:45:58:17:08:b7:80:9d:
         7e:37:2b:dd:19:e9:95:18:b1:c9:d4:06:46:73:db:9c:68:0d:
         f1:7e:dc:03:8f:7f:e5:e4:e4:9b:4b:da:9a:8e:c5:b3:c8:b1:
         03:d6:da:74:f1:bb:94:df:a1:59:5d:65:d7:ca:93:4c:2a:1c:
         a7:83:ff:9c:0f:11:03:50:8a:04:38:b4:b8:6b:06:2c:48:c7:
         7c:d0:d3:6e:f0:76:6c:75:59:0f:79:fb:24:3b:ac:c1:e1:af:
         17:16:97:b9:1c:96:23:7e:88:26:7e:de:80:b8:d6:6a:3a:12:
         70:30:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----