Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
File:                     cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft (raw, json)
Hash identifier:          6kkPUkp7iSsy0uWvp77Hd0qsWwQAxGNs88LGw0uTAak=
Subject key identifier:   F0:FC:B4:92:35:F7:37:47:31:80:C2:38:2E:68:CD:B8:F6:FA:8C:86
Authority key identifier: 71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
Certificate issuer:       /CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Certificate serial:       01962E61DE469B2AD76615C02B26DFBA521F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
Manifest number:          135D
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: 0uVokjA0n-IKYM4dLwrHfcYoXtI.roa (hash: h5xCuikP/FGyLSLux1dmHiJam1SLoPwDAncSRikSHHc=)
                          2: cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl (hash: dEQOd8TyLCTPQXqqn8dlMOL4VqxCHCWgQ9rgIIL9/WQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:de:46:9b:2a:d7:66:15:c0:2b:26:df:ba:52:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7190f5d5f92a486362177a42b3d5efda20e220e1
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=f0fcb49235f737473180c2382e68cdb8f6fa8c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:61:d6:8e:89:4d:c6:eb:6c:aa:2a:1b:44:73:
                    f5:90:74:1e:5e:23:de:db:84:20:3d:db:7e:93:56:
                    15:7d:20:c9:3b:33:84:5e:cc:ba:69:55:fa:86:97:
                    a7:86:1e:80:90:42:5e:49:ce:7f:7a:5b:bd:78:0d:
                    4c:17:de:b2:12:44:0e:a5:d5:b7:0f:b2:2a:ac:54:
                    83:d5:9f:c0:1a:b5:52:91:db:15:0a:f4:d1:6b:64:
                    77:af:1a:03:f9:e1:29:cf:7b:80:f2:6d:7a:30:c7:
                    91:e1:a8:53:68:ce:d2:3c:a2:5d:7b:96:e4:18:ed:
                    74:6c:81:62:61:9e:03:f7:bd:d2:6a:1f:c6:f1:2e:
                    3e:e1:0f:40:3a:49:d7:78:a0:fe:38:ee:d2:3e:a1:
                    88:fb:46:1c:16:28:42:fe:74:f7:b8:62:62:da:dc:
                    a6:d4:66:62:1e:9b:fd:6e:a9:0b:10:87:e1:28:73:
                    38:c7:09:4a:dd:e6:01:4f:24:d7:6f:39:89:46:16:
                    96:b7:7e:a2:de:60:26:72:9a:8e:fc:53:aa:e1:fb:
                    a2:b6:cc:46:61:d2:14:9e:ec:fc:1f:2f:7f:e4:63:
                    47:82:6e:fc:e5:a4:46:85:9e:11:78:1b:fb:23:92:
                    8d:35:d4:73:31:7c:3d:28:e9:2d:52:0d:4f:13:c8:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FC:B4:92:35:F7:37:47:31:80:C2:38:2E:68:CD:B8:F6:FA:8C:86
            X509v3 Authority Key Identifier:
                keyid:71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3f:0d:62:d2:ce:a4:fe:64:86:37:7b:6e:3e:59:9c:41:fa:
         94:d5:4b:2e:fd:ed:80:93:5d:e4:7a:3b:c2:91:0a:4c:66:60:
         de:ca:9b:73:51:31:8f:9f:8b:ee:e0:3d:ce:94:33:a7:72:06:
         58:ab:17:ea:d5:c6:4d:0c:90:ba:56:74:c6:0e:99:b6:91:a0:
         fe:88:18:a3:9d:25:72:9c:cd:f1:68:81:04:cf:e6:ff:c8:e3:
         33:49:ce:02:8d:e0:f6:1f:67:06:30:bf:7a:d1:dc:8d:0d:c5:
         a5:ff:cd:44:55:38:e5:9a:d5:80:58:dc:91:ee:41:72:80:e7:
         c3:aa:1f:da:01:8b:79:6f:de:53:2b:e8:03:e5:35:30:f0:dc:
         e6:6d:a8:5e:50:60:42:c0:3c:8c:c2:3b:e8:eb:e9:65:b4:b8:
         30:31:cf:c7:94:71:40:22:b3:68:13:d0:0e:52:84:26:d8:cd:
         c8:c8:c0:c6:1a:b7:db:15:f1:20:f1:c0:45:60:ab:ed:f7:2d:
         c9:91:a0:06:5a:b7:ce:7c:30:fb:0a:e6:17:86:33:cc:2b:8e:
         58:71:44:29:70:8d:41:8f:e2:a5:1d:52:0f:1a:cf:32:bd:33:
         51:f0:bc:9e:53:8f:23:af:ae:d2:9f:f4:e8:9d:dd:7a:15:2c:
         81:33:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----