Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File:                     azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier:          FvincLZzeB6baNziRQpa438afaJQFeQcbGvBx9g4ePM=
Subject key identifier:   48:75:09:91:E5:97:C7:65:87:BD:22:19:3E:DC:C0:01:CC:F7:47:8D
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer:       /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial:       01962E2B340F7BF2B14DB6F6A774DCA69C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number:          117E
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: 0ez5-37GJP5iy1QIJwf_IO-WQhE.roa (hash: QEZ8/KPLqz/9+BOZvTWpaYfcSae/bnuyUVUksCn5Y6M=)
                          2: 3t2CVo8lZxK05qVhWuiu4c8sgzo.roa (hash: stXOtWs8A5ImkqXvcLQ61uhzCWwyOQe5BXcDJYFxYKQ=)
                          3: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
                          4: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: /BaSdtXyZnZLirHuDruSNpecqDIidt6QLhzwxVcsPSk=)
                          5: sSpzjHD8juEFwmAVJ-9kZDaT1ek.roa (hash: 7SLV5glKGePLniqHW9rAB95C/r7wSCzkCmA4YMo9QI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:34:0f:7b:f2:b1:4d:b6:f6:a7:74:dc:a6:9c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=48750991e597c76587bd22193edcc001ccf7478d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:5b:6a:9a:95:c2:81:75:d0:6f:33:69:80:
                    55:4f:25:5e:f1:bb:34:59:18:28:5a:c8:84:53:58:
                    dc:6a:2c:d8:63:da:fd:69:87:ab:57:c6:09:f3:5d:
                    63:e5:8c:52:4f:06:7b:72:b8:62:89:63:0e:9f:47:
                    30:3e:ec:46:df:c7:2a:92:1c:1f:3a:fe:19:7b:d2:
                    49:62:d3:dc:9c:40:e9:05:7b:ca:a1:d5:60:75:85:
                    f7:2e:66:c6:b2:40:09:14:b0:0a:5b:bb:ca:b1:0f:
                    21:ae:e4:9f:cf:0d:78:11:b4:6d:19:a5:04:2a:73:
                    1a:5b:98:3a:58:c0:0e:aa:aa:a0:c2:09:af:00:95:
                    17:de:c9:e0:bf:22:f5:41:15:79:f5:13:b3:3b:2c:
                    15:c0:4b:f8:d3:a3:71:8b:ef:fe:a2:ed:16:32:e6:
                    64:2c:a9:b0:4a:6e:73:d1:3a:78:5e:69:8c:87:0b:
                    6c:88:6d:1d:65:4d:6a:57:5a:f1:bc:b8:7c:ff:b9:
                    42:e3:ee:12:07:13:75:77:1c:48:0e:9c:18:fe:1c:
                    43:bb:7b:f3:22:62:e2:fd:5a:cc:1f:09:8f:95:d1:
                    68:d7:b1:26:81:72:3c:05:d4:4a:df:02:c0:da:41:
                    79:30:47:06:fd:c9:de:d0:ae:c5:c3:d3:f6:e2:01:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:75:09:91:E5:97:C7:65:87:BD:22:19:3E:DC:C0:01:CC:F7:47:8D
            X509v3 Authority Key Identifier:
                keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7f:fc:2f:ca:45:0c:fc:c9:60:f7:06:76:65:20:64:60:f6:
         e3:70:04:e7:f5:32:8e:a3:0a:da:0e:fc:ae:68:47:9a:33:aa:
         6c:f5:68:07:2e:93:27:ba:6f:54:3b:f5:f4:fe:d8:6b:97:0e:
         cc:8c:fb:d9:12:34:6a:8f:26:34:18:a5:b4:7c:67:c7:3a:aa:
         62:b5:e6:39:7d:1f:e2:2c:91:71:74:5e:2d:90:19:fa:7b:15:
         2f:27:b7:2e:9d:5a:78:a4:28:56:5b:ac:94:75:b0:09:84:c7:
         b1:d6:8c:84:aa:0a:d0:20:79:39:31:91:0f:16:23:1a:78:3f:
         83:16:f8:f2:18:f8:de:06:68:16:c3:4b:01:b5:b1:18:6c:03:
         1a:50:e3:c8:e8:af:1f:02:60:51:0d:a4:c1:52:24:08:8e:7b:
         06:e3:80:81:ab:1b:f4:fa:07:72:09:4d:f3:b9:ec:12:36:63:
         9e:bc:71:a9:8f:f6:18:dc:09:3d:f5:e5:59:e8:05:de:66:b3:
         23:c9:10:c4:8a:10:b0:89:ec:ce:59:96:a8:b1:f1:69:06:37:
         e2:cf:16:cb:6a:29:36:68:c7:d7:ed:55:f4:97:eb:81:e5:72:
         db:44:ed:5b:57:62:11:8d:5f:2a:80:13:86:a0:e3:4f:1a:3d:
         1f:85:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----