Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          Yg01JTD6/980G2Kp4Kx+OadnzHHF+Fnih8ksZ2k0R6E=
Subject key identifier:   25:0C:D5:64:E2:42:83:C6:92:24:4A:27:0D:33:0F:43:9D:BB:1B:79
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       01962F07169A85E0E262B5284E0EE17DB9BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          0322
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: TP9gFKgxBg6Q0nRcWGidlz7qFCE.roa (hash: jhQI7t+AgP6hvPj91hzIOl0xoOYJULkePtGE660/ydE=)
                          2: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=)
                          3: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=)
                          4: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: DnlKVBJxX1MtYYNpUTHhtKuEiC3wL/PNOm8k3cyUc+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:16:9a:85:e0:e2:62:b5:28:4e:0e:e1:7d:b9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=250cd564e24283c692244a270d330f439dbb1b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:59:a8:79:71:7a:65:c9:1c:60:32:61:ad:19:
                    66:c5:02:c9:17:09:f1:0d:1a:bf:cc:0f:30:ee:79:
                    62:52:fb:06:20:d3:bb:8a:a8:25:cd:d7:6c:22:9c:
                    80:c5:bd:ee:53:28:59:b8:3c:ff:ad:fe:05:93:6a:
                    23:7d:ee:52:78:c1:6c:25:ec:31:bf:4d:8f:f6:b0:
                    ae:78:cf:f7:87:57:99:46:cd:d3:68:25:12:37:ae:
                    a4:66:dd:99:e6:1b:a3:0e:c8:17:54:10:5d:58:6e:
                    31:a5:9a:f7:34:a1:0c:a4:eb:35:91:fb:aa:25:40:
                    9b:35:5f:eb:0b:72:9a:b8:22:36:12:e4:ec:36:29:
                    18:d5:0c:b2:0b:87:46:9d:7e:92:d2:a5:d1:36:51:
                    7e:d2:77:88:a8:1d:9f:25:1b:cf:67:83:ed:8c:22:
                    5e:1a:92:38:ba:be:9d:1f:52:ab:be:f5:c7:3d:ae:
                    e1:86:db:45:73:71:67:3a:8c:18:1f:40:f7:22:9c:
                    1f:e0:09:e8:3e:f8:1a:bd:ad:f9:10:e4:d3:e5:9d:
                    26:74:6a:22:da:3b:79:33:ac:62:03:d2:52:f6:f9:
                    f5:47:8c:e3:7f:0f:9f:51:ba:59:f4:2e:18:09:73:
                    b7:62:9e:c9:77:67:08:97:f2:3b:4a:ce:f8:a1:83:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0C:D5:64:E2:42:83:C6:92:24:4A:27:0D:33:0F:43:9D:BB:1B:79
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:02:29:b3:03:35:d1:8e:26:0a:12:ff:7c:68:03:be:9c:52:
         44:6d:eb:4a:30:d6:63:be:db:7c:a5:b5:4c:3e:be:a7:5a:5e:
         4b:bb:ab:c2:80:aa:96:0c:0f:c4:f7:31:40:37:c5:cb:21:11:
         e3:87:e9:48:69:79:6a:de:78:6b:18:08:5f:47:6f:9b:05:5b:
         2a:92:b3:53:b7:24:ff:bc:58:0e:2a:e7:b2:4a:05:a9:c0:f3:
         57:be:62:09:4f:de:11:40:c1:35:80:84:d0:5c:8a:cf:38:34:
         8a:43:08:32:6d:fa:a9:8c:2a:d9:97:0c:fb:9d:92:fb:ff:53:
         96:11:ac:01:c1:70:5e:53:3b:bc:28:b8:74:44:d7:cd:c0:2e:
         63:e3:3a:ce:ca:ce:fd:c4:9a:27:c5:dd:29:62:1f:6b:38:4b:
         92:02:30:39:c7:bc:df:a1:8d:33:46:2c:cd:bd:64:c6:b4:e4:
         14:ef:51:2b:19:23:1d:2a:22:49:47:48:01:a2:86:e4:ae:23:
         ab:72:76:f4:67:ce:83:6f:27:f1:bb:c6:ae:c6:49:88:5b:17:
         f9:46:27:b7:73:1c:f1:ab:3e:ac:fd:cb:27:b4:e8:9b:9d:78:
         a3:eb:4c:e0:b8:75:89:90:b2:05:77:02:da:ba:de:5f:f6:21:
         ee:e1:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----