Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
File:                     zwL19I4SLlVvm1mK2aYtPD4UQZo.mft (raw, json)
Hash identifier:          dm12UNKNt80dbNIPlhJfHBZEAd4tuhGVf3ps6as4syw=
Subject key identifier:   E8:6E:17:ED:92:9B:85:C8:72:62:E5:F2:20:90:71:D4:5D:8C:88:BF
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Certificate issuer:       /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial:       01962F742B53A9ED37EAE2F4DB1B9EF719A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: 748a2LHN88wONpwbpFWq4xMldnY.roa (hash: eDoYazA4tm3EizecQjyxeeqDwWD+d/nhbBUj2RIPHuc=)
                          2: zwL19I4SLlVvm1mK2aYtPD4UQZo.crl (hash: u8IAIndN0QERDi6/qP6rPD4vfPCu37C241HlR6cIL7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2b:53:a9:ed:37:ea:e2:f4:db:1b:9e:f7:19:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=e86e17ed929b85c87262e5f2209071d45d8c88bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:fc:8b:b7:66:9f:88:be:da:d3:4f:07:8d:
                    36:b8:2d:68:e7:c3:30:39:7f:2e:c7:10:21:b0:47:
                    9c:b9:95:dc:cd:d3:b7:4f:64:3d:72:c0:4d:c0:e3:
                    bb:8f:ea:1e:d7:58:d3:59:2b:c5:32:42:2d:99:9c:
                    19:9f:c0:bf:40:40:5c:c7:ac:52:61:f1:5c:25:29:
                    95:7c:28:5c:a0:f6:40:da:c5:98:7a:ad:5e:73:1d:
                    cc:12:00:fd:a6:27:d7:d7:02:e9:db:fc:3d:aa:37:
                    27:2d:a4:c0:4a:cf:5f:ec:77:a3:81:a4:98:20:65:
                    d2:e0:c8:13:1a:1d:51:e2:33:63:6f:58:33:fc:e3:
                    34:2a:3c:4d:3f:83:8c:81:b1:45:6f:ed:b5:9f:9f:
                    cb:de:04:c1:9e:83:68:4a:7d:2e:1d:da:26:60:ff:
                    74:4d:3d:15:5a:ec:3f:dd:02:ea:ef:83:48:27:c9:
                    30:34:47:f0:64:13:19:6c:29:b2:08:03:a5:0b:0c:
                    52:6c:0c:b7:3e:cf:93:6a:b6:cf:b1:ba:a6:07:f9:
                    25:9b:46:94:60:ae:3f:ba:0f:f6:02:73:95:83:a1:
                    9a:68:74:5a:ca:fd:55:10:d3:d9:fe:a1:6b:47:27:
                    ad:68:2b:ae:1a:78:5d:34:35:dd:1a:3a:24:da:aa:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6E:17:ED:92:9B:85:C8:72:62:E5:F2:20:90:71:D4:5D:8C:88:BF
            X509v3 Authority Key Identifier:
                keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:88:d7:b1:66:37:09:f5:f0:de:d5:46:3d:ff:2d:30:7c:7c:
         43:ad:93:10:b6:96:2d:ac:5d:43:41:ba:45:22:8b:bd:cf:bc:
         8f:22:bd:41:b3:1f:f6:02:85:e0:46:c3:5f:eb:97:08:db:f5:
         13:ca:64:b0:05:a9:dd:41:38:95:dc:b5:29:88:e0:4b:61:0b:
         0d:56:d1:82:87:05:db:35:95:0c:38:e3:dc:0b:f8:1e:21:da:
         fb:c2:7c:fc:b5:73:b0:ff:53:ca:c0:86:63:2e:39:13:6e:54:
         88:d3:f4:2f:a8:78:3d:d0:f0:a4:d8:31:af:c4:5a:58:ed:1e:
         bb:61:94:90:67:71:5a:db:7d:da:c0:2a:45:93:1e:33:f7:7d:
         a9:53:43:01:8f:54:c4:9c:3d:c5:8f:aa:66:7f:b0:69:0c:b1:
         09:84:63:d7:77:cb:a7:38:ee:9c:3b:89:ee:39:3a:aa:5d:80:
         d0:07:23:59:35:bf:2e:15:81:64:4d:ea:11:48:7b:71:af:58:
         43:e1:55:a7:dc:99:0a:74:88:44:bb:5d:79:2a:19:d5:0c:3d:
         d7:78:60:a6:fb:4f:c6:1a:8d:4d:da:28:ed:1f:d3:21:b8:87:
         05:6a:d2:0f:95:ac:ad:df:2e:54:55:ff:e6:7b:83:a7:95:3c:
         6e:7c:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----