Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File:                     Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier:          vV5SrCv84T5OjC2mzrc8sqPYitmwoWID0YJOLLvQMJ0=
Subject key identifier:   EF:AD:E3:5B:41:00:C0:B5:6C:E9:14:2D:30:24:C5:43:C1:38:A4:20
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer:       /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial:       01962E9997B3AB3901B5B664A2CDAEFB731C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number:          80
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=)
                          2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: Js+TJbkSfg+7d3oEON6KX9yHD6JXh5Y2zF95xQqGfJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:97:b3:ab:39:01:b5:b6:64:a2:cd:ae:fb:73:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=efade35b4100c0b56ce9142d3024c543c138a420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:84:32:3e:3f:f0:ea:09:6b:8a:a4:28:b2:
                    49:40:f3:a9:4e:47:84:81:63:2c:e2:a5:85:bf:a0:
                    c0:87:44:0c:51:23:ae:a8:89:96:49:db:82:06:23:
                    62:83:61:8e:8e:3f:08:25:5d:43:10:f9:64:f9:ca:
                    c2:d0:85:de:70:3d:1e:b0:21:34:9d:e5:63:6d:44:
                    39:0b:ca:ec:3d:59:fa:00:3f:81:3e:19:75:a8:e7:
                    a5:ba:20:57:5f:68:5d:01:cd:03:68:c3:11:91:a5:
                    d9:40:69:3b:8c:47:92:3f:6b:fd:fd:2b:d9:2e:92:
                    38:1b:0c:ed:cc:21:23:15:d8:89:df:27:36:b0:64:
                    6e:d3:02:9e:0a:b6:92:53:9e:9d:48:35:6a:c1:13:
                    1e:7e:17:d7:57:62:bd:10:6d:8a:28:a4:95:98:bc:
                    59:c1:70:35:22:3c:49:fc:30:5a:8e:97:84:02:24:
                    9a:86:c7:3b:b9:cb:1b:67:da:78:ac:a9:96:e5:48:
                    e4:4f:f1:8d:6c:a8:b8:b7:82:d9:85:26:ce:c9:ce:
                    df:72:26:83:d5:b7:e5:a2:e1:0e:6e:67:84:de:65:
                    69:61:04:48:cb:b2:43:3b:0e:9e:86:8f:73:fe:f9:
                    f4:dc:c5:1b:88:1b:61:d4:1f:eb:fe:a2:00:09:54:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AD:E3:5B:41:00:C0:B5:6C:E9:14:2D:30:24:C5:43:C1:38:A4:20
            X509v3 Authority Key Identifier:
                keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fb:42:96:eb:de:d3:7c:bb:81:a5:ae:f4:ca:c5:fe:f1:b6:
         a7:42:cf:7f:81:c0:71:f5:df:9c:40:4a:89:24:1e:35:3e:4a:
         6a:a6:cd:20:73:75:09:e4:a5:1c:d7:89:71:ce:e7:fb:22:1a:
         72:9b:c5:00:24:55:80:f0:b2:38:f9:04:1d:d2:0e:1a:c1:1e:
         69:2f:7b:13:e2:5d:a9:d2:ef:9c:1e:ef:c8:b7:1d:78:8b:85:
         8a:89:c0:2a:d4:ee:82:28:25:ed:ea:28:ee:24:87:10:83:7c:
         73:84:da:01:1c:f1:21:80:08:95:79:d2:e8:98:df:63:91:5c:
         6d:6d:36:d1:65:df:e6:5f:a6:e0:ee:eb:71:17:f7:16:9e:22:
         9b:71:5c:c1:86:cb:5c:ce:d2:d9:89:69:8d:ce:50:93:13:1f:
         7e:bd:85:c7:bb:46:17:2a:bf:81:d8:7a:97:01:cc:a0:b3:b0:
         c3:ae:91:a4:f8:69:74:01:8d:36:d9:f6:48:07:15:ee:52:ca:
         03:0a:6a:55:9b:9a:65:27:1f:f4:54:99:d6:1f:c2:09:ce:7f:
         12:f5:89:3b:6d:1d:d2:dd:b5:84:f0:f8:22:23:eb:5e:71:34:
         4d:e6:99:9c:a8:66:23:87:01:66:bd:e6:6a:90:b7:0a:32:95:
         0c:a0:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----