Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
File:                     EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft (raw, json)
Hash identifier:          FOZyFmQgZHvaPvH8QKkqJqZTw2N+6dQHJ6AznJX+Fsg=
Subject key identifier:   65:9C:9F:92:CF:CF:F3:4F:36:2D:19:5A:BE:E3:55:CC:49:34:F6:41
Authority key identifier: 13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A
Certificate issuer:       /CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
Certificate serial:       01962FAB3C632750A0CDBF0AF6503FF023C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
Manifest number:          094E
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl (hash: 0bXbNVH4C61wCmR24dE2VE102/W4+BA1G0lLTBgroxc=)
                          2: R1ddoQVjmFWdQ8WN4xWjS6BWjCw.roa (hash: oSyFhN1ovW7xy9oFAp6jlzZPhvsjlMjehmNfek88Rzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3c:63:27:50:a0:cd:bf:0a:f6:50:3f:f0:23:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=659c9f92cfcff34f362d195abee355cc4934f641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:10:25:bc:53:ca:c1:f9:8e:ad:d3:37:e8:
                    01:2c:82:ee:58:d4:b7:43:13:1c:74:42:74:f6:cc:
                    1c:05:f9:fc:08:e7:e1:6a:12:3d:0a:3c:e3:ef:d4:
                    53:c6:7d:0b:42:b6:b9:66:76:f4:a6:28:2c:97:ea:
                    f1:de:78:4d:5a:41:f5:5f:87:af:33:9e:2b:92:30:
                    99:d9:51:a5:44:ca:67:50:4a:81:73:ee:f2:a8:bc:
                    46:a4:95:98:ad:9f:7b:40:54:17:91:4e:64:b7:77:
                    a0:97:82:17:e4:5e:86:58:17:2a:4b:2d:8c:65:bc:
                    c3:24:a3:ba:16:de:13:56:24:1d:c7:32:df:f9:83:
                    7e:4f:41:f7:c5:0e:86:ad:b9:c1:65:82:68:f0:be:
                    03:05:dc:5c:31:11:b7:82:9e:54:aa:5c:c8:fb:ba:
                    85:5f:4d:40:e7:09:3b:9e:dc:db:46:6b:ae:12:cc:
                    ee:86:d1:51:e8:d2:93:87:18:be:76:d0:8f:a0:a2:
                    e1:cc:da:08:d3:0b:27:0b:31:db:19:7e:e6:20:9b:
                    98:db:fb:58:70:3e:91:6e:b5:c6:0a:a5:b0:4b:3b:
                    5f:3d:f3:62:e6:52:d4:3c:91:90:31:94:52:75:99:
                    81:24:0a:28:25:f2:40:6b:e0:67:56:1f:b6:6b:08:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9C:9F:92:CF:CF:F3:4F:36:2D:19:5A:BE:E3:55:CC:49:34:F6:41
            X509v3 Authority Key Identifier:
                keyid:13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9a:a0:2e:3f:21:b6:16:db:3f:32:80:02:b6:ae:60:58:1f:
         c8:ed:20:40:91:56:8a:fe:22:eb:42:f9:88:37:97:0d:49:4e:
         e5:a9:91:5d:12:49:e3:4d:60:15:45:d0:a8:a8:5a:ee:02:8d:
         92:fb:b2:07:16:de:8d:05:8e:ed:4d:f4:c9:5c:bb:89:8a:ba:
         c9:39:d8:14:7a:22:b3:dd:54:f2:f9:49:69:67:ff:c2:0e:c9:
         73:1d:47:5f:7c:7f:b6:a6:33:45:fa:e8:cc:90:6b:be:9c:80:
         8f:b9:84:bb:21:f0:26:ef:78:c2:5d:f6:98:69:aa:54:98:20:
         2e:ef:99:07:7a:67:17:f2:f8:09:a3:5d:7f:31:18:29:79:4a:
         63:37:80:79:98:ea:7b:20:44:da:2d:1d:f1:c0:53:2a:7d:34:
         07:12:77:42:19:93:1f:92:5b:9f:67:78:13:27:31:5e:63:9e:
         69:41:be:64:8a:81:b8:99:6f:91:e3:6f:61:20:5a:b0:2d:e9:
         c3:fa:d9:55:71:fa:2f:7c:a3:c0:b6:b4:65:54:ba:a2:50:dd:
         65:d3:fb:41:d7:35:bf:25:ae:15:d7:b6:b3:09:cd:66:3b:30:
         be:76:d7:b4:46:3b:1d:73:67:11:ce:d4:60:de:99:31:89:93:
         2a:69:73:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----