Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File:                     znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier:          iqwINQKMCuLxB0vxv0a2UOpxeifIiis43nj7cW+Fww4=
Subject key identifier:   B1:AF:CD:B1:0D:D0:CB:1D:F6:AE:A1:32:8A:91:BD:FB:AB:8F:3F:8E
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer:       /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial:       01962F3DD10C1359CEF54E9719D88A4D05E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number:          0ADE
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: ZIl-tGPYsmILe8aUvhHfFRisBTg.roa (hash: ELX+nfW5VdhOFYsiqhpPo4rEHXv1DoXfvUrKNYNv+iU=)
                          2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: iNDpCr1WDZakfEmSRuPadXJmNyZIQOByLopkYozknBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d1:0c:13:59:ce:f5:4e:97:19:d8:8a:4d:05:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=b1afcdb10dd0cb1df6aea1328a91bdfbab8f3f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:ad:c2:5a:4c:21:52:1b:e2:31:74:e7:2e:
                    83:24:29:6b:6f:d3:f1:23:a6:05:bd:49:8e:28:ba:
                    e8:6a:ff:bf:7b:21:f4:1a:38:08:20:3b:0c:4f:72:
                    ac:c5:64:5d:2c:71:ca:df:ee:0c:34:af:58:53:93:
                    bf:d0:57:92:33:f1:70:8b:eb:e6:7e:7f:38:68:20:
                    68:de:6d:a9:a3:51:69:c4:59:60:b6:a0:61:48:6b:
                    ce:df:db:4a:61:e1:fc:39:e3:35:11:cf:f0:7d:18:
                    d9:93:f1:ad:22:b8:12:05:1f:f7:30:c9:e9:d4:69:
                    dc:40:93:98:c8:3b:92:16:2b:9a:02:0f:e4:7b:29:
                    12:e6:28:28:f3:ff:f1:59:75:b6:b4:a6:d2:19:d6:
                    7c:b4:83:a5:a7:1d:f4:65:9a:16:fa:0b:1e:a3:6f:
                    4b:9d:39:8a:cb:39:dd:2d:96:e1:f5:3a:f9:e3:d4:
                    72:fd:cd:39:2d:43:cc:a6:9a:6f:00:8a:7a:67:46:
                    6b:a1:82:12:d1:7e:c5:95:61:41:26:c7:7c:7a:09:
                    f8:c5:49:d9:d2:ac:30:33:c0:d6:e6:93:11:b6:87:
                    e3:c9:4f:9d:c1:71:46:34:7c:da:29:52:0f:86:13:
                    67:be:27:b4:33:7d:d5:e7:e1:2c:d9:65:1f:4d:1f:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AF:CD:B1:0D:D0:CB:1D:F6:AE:A1:32:8A:91:BD:FB:AB:8F:3F:8E
            X509v3 Authority Key Identifier:
                keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f2:f5:55:26:6b:99:63:8b:4a:08:3b:8d:c1:85:bd:10:33:
         de:36:6b:6b:38:7b:a8:23:c5:d6:8c:3a:9b:72:6b:27:94:05:
         9b:2c:bc:50:f3:f9:dd:ac:fa:5b:be:db:ca:18:69:31:8a:ce:
         12:21:be:b7:9a:80:e6:3c:6f:15:4c:ad:c7:f3:d0:c4:e1:5e:
         cf:71:b3:83:a8:5d:67:35:3d:08:f4:39:32:72:c5:4f:02:4e:
         9d:1d:a7:33:b4:f8:75:84:4e:c2:53:a9:f9:f9:17:61:e6:6a:
         90:42:d6:c2:3f:60:1c:34:98:c2:99:ff:95:47:9a:81:4d:d3:
         bd:5b:55:19:50:15:4e:14:65:55:6f:fc:04:f5:dd:07:04:94:
         f6:1f:bc:c2:fd:6f:fd:7a:9c:17:3e:23:a3:4b:29:5d:0d:3c:
         1e:7a:b3:99:16:7a:8d:dc:4d:6e:28:df:95:9b:6e:44:72:2d:
         e0:08:5b:5b:04:48:d3:d8:60:e3:a4:55:c5:c3:10:85:90:96:
         a4:23:e2:ac:a9:e6:33:fd:d5:2f:0c:87:0b:a0:36:2b:95:2f:
         58:86:0c:a5:68:20:3b:bd:05:77:5f:c5:3b:42:60:ea:74:45:
         bd:d1:a6:86:a4:c4:15:4f:ab:97:9e:3d:7c:dc:0a:ea:f8:6c:
         e3:60:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----