Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File:                     zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier:          I27wYUxBRzx7JvK70HFwi18harST7HORp+nU27ICM5I=
Subject key identifier:   DC:35:D7:60:39:BF:0B:ED:12:58:4D:04:C9:3D:E8:D5:CE:14:56:3F
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer:       /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial:       01962ECFD5D24A1790D8B7D774CEAF499A90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number:          13EF
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
                          2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
                          3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: cdB6Ve+Bsz5LEkP/Cx2qVfvtD3fBMvKP8UigxQYrAKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d5:d2:4a:17:90:d8:b7:d7:74:ce:af:49:9a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=dc35d76039bf0bed12584d04c93de8d5ce14563f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:b3:0c:d7:c3:b1:08:85:87:cd:01:1d:47:
                    10:c2:21:6c:94:28:ee:d1:98:0f:51:fb:a0:28:ad:
                    9a:b4:e0:b6:16:86:5a:ee:34:48:b5:94:c3:0a:df:
                    32:2c:b7:71:87:64:58:eb:50:27:44:19:61:ed:df:
                    cc:71:58:8f:18:e4:dd:2b:f1:0b:4a:05:33:45:34:
                    7e:1e:e8:70:05:2b:2e:29:56:c1:9d:a0:29:65:49:
                    a5:cb:73:81:6a:e0:da:36:01:63:1e:f7:32:3b:59:
                    17:3e:66:df:2a:28:f4:40:a1:67:20:a2:de:6a:be:
                    76:93:d3:db:2b:e8:44:a2:14:dd:3b:fb:d8:04:a8:
                    f9:32:dd:90:67:55:0a:a7:67:d2:ba:57:08:b1:31:
                    51:ba:4d:90:88:38:6c:93:3b:f9:c6:7c:da:a0:d2:
                    ae:16:f7:8f:66:a6:86:b6:4d:95:ca:66:7e:27:3f:
                    11:60:6e:f9:7b:12:14:d8:7e:95:dd:b4:b4:4b:f9:
                    f9:50:6f:86:06:d5:5d:96:42:21:e6:10:68:68:e1:
                    aa:1b:99:31:66:cf:3f:01:dd:fd:9a:d0:fb:18:db:
                    3f:c7:84:26:67:35:30:ee:92:85:bc:dd:99:92:5c:
                    58:b2:b5:58:a4:bc:5c:b5:0c:46:20:68:28:ab:85:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:35:D7:60:39:BF:0B:ED:12:58:4D:04:C9:3D:E8:D5:CE:14:56:3F
            X509v3 Authority Key Identifier:
                keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:45:ae:fe:57:24:3a:0d:24:e3:8c:94:19:87:d8:f2:72:
         85:df:c8:10:00:96:12:45:d0:65:28:62:c5:12:a3:ef:6c:16:
         d6:03:ba:0b:ef:4a:75:1a:2c:30:91:1d:a0:22:4a:f9:50:cd:
         4e:3b:d3:4a:f3:0f:c4:0e:ed:f4:a4:f1:95:2a:ad:74:ed:e5:
         68:7c:f4:a0:04:2e:d5:67:23:f4:cf:45:24:6a:ce:b0:b5:cd:
         ae:24:31:1b:2d:f7:0c:88:4a:ae:29:64:13:dd:1f:39:59:76:
         62:57:77:50:6e:15:15:3f:24:ff:1d:74:5e:c3:aa:12:a7:9e:
         22:22:e9:af:e1:13:ca:cb:ea:7f:8e:5c:ae:88:58:b9:0a:65:
         24:b5:0b:5c:a3:ea:6e:fc:a8:d7:a6:c4:de:3c:44:41:79:36:
         b3:df:93:a8:6f:8f:42:f2:b3:2b:2f:92:19:2b:08:35:9a:c9:
         d2:42:58:3e:60:4a:2e:c5:30:57:55:7a:58:a9:a6:86:da:2f:
         c3:47:54:e5:48:6f:b6:fb:40:25:b1:2d:5a:e6:99:d6:6b:2c:
         d9:25:f1:3e:40:19:07:cc:c2:3f:54:36:f8:07:a5:18:86:56:
         28:44:4a:46:8b:ed:66:d2:68:1c:8e:20:ad:89:49:d7:53:44:
         17:11:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----