Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File:                     zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier:          cr7G5LJgSZQg34Iq/BkzGt9gF73zvIM1cBqXlVzgchc=
Subject key identifier:   95:AD:D8:7F:55:16:FA:83:DA:F7:BD:4B:90:35:23:F9:20:37:4F:D3
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer:       /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial:       01962E2B0ECF6E29907C17E0A0DDBEC35D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: 4IRJfTOXaKsLO79AGo1JoJbZxnI.roa (hash: z5NYfWatjYuL33vBwldK4hifLGzdry9JPmtM091yFpE=)
                          2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: CJZis4w/OxpQdch/0vaytzhmz43F3nv7aEh8OJu5pIg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0e:cf:6e:29:90:7c:17:e0:a0:dd:be:c3:5d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=95add87f5516fa83daf7bd4b903523f920374fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b3:f5:1d:92:53:4a:49:49:86:ec:6a:06:c6:
                    2b:cb:99:6d:ea:d4:3b:42:17:23:4c:76:95:0b:d4:
                    8f:5d:4f:ba:d1:a4:5c:b0:b6:38:6e:84:d8:27:3e:
                    f7:b0:e9:22:ae:3d:28:c1:af:80:f6:97:ec:11:85:
                    e5:fe:5a:66:b9:4c:46:19:17:95:b3:ae:c6:08:f9:
                    6f:4a:3b:cc:d7:0c:24:4b:a0:cc:e7:0f:63:1b:f4:
                    62:ea:cd:79:c3:22:ee:d0:69:7c:6a:23:36:19:d0:
                    cf:5d:17:65:2a:74:11:ab:37:62:80:9a:d3:11:09:
                    43:9e:84:ac:05:99:bf:71:69:e6:ad:d2:4c:a1:89:
                    7c:1f:51:03:85:27:aa:90:6a:12:11:92:9a:00:0b:
                    a6:4a:c0:11:42:0a:2d:f1:c4:83:e5:5d:e1:0b:8e:
                    3f:35:cf:49:59:23:7d:fa:0f:4e:e3:8b:39:75:ed:
                    2d:36:09:db:c0:7a:c6:81:65:d5:39:d5:1b:ca:64:
                    ff:04:3d:06:5d:0e:63:8e:0b:ca:f8:0a:ea:92:cc:
                    f7:a5:44:22:c1:b9:3b:6b:37:2e:af:17:66:e7:36:
                    5e:0b:b4:19:d6:bd:fe:28:ab:7f:7f:43:30:f1:b5:
                    22:45:73:d8:1a:cd:06:a7:f5:98:ce:08:82:43:4e:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AD:D8:7F:55:16:FA:83:DA:F7:BD:4B:90:35:23:F9:20:37:4F:D3
            X509v3 Authority Key Identifier:
                keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:18:3b:7b:1a:51:bc:76:ae:fe:d9:3a:c6:c9:8a:2f:79:
         a7:c8:e7:02:ef:b8:cf:7c:75:6d:8b:87:df:19:c2:f0:93:58:
         4c:23:94:0a:cc:dc:f6:0d:c1:e6:e0:0e:1d:c5:7e:51:e9:92:
         ef:55:e1:0a:35:4b:be:d7:4b:aa:71:ee:24:ca:f4:dd:03:35:
         08:c9:db:c9:aa:75:1d:69:6f:41:19:a5:7c:aa:8b:97:9c:1d:
         eb:30:db:d1:cc:ed:ec:e1:53:81:fd:44:76:61:43:7c:03:79:
         d3:9e:dd:26:cc:e5:21:c6:75:dd:81:14:45:39:f3:69:aa:17:
         a7:e9:ed:12:03:e1:c9:d4:98:20:80:48:c6:3e:84:1f:de:ab:
         6b:72:23:37:02:c9:2b:1d:4f:e3:20:f1:5e:40:e7:4f:8a:77:
         8e:a2:2e:6f:6a:4d:1c:76:2d:a1:ba:cf:41:f8:18:af:f4:1a:
         93:eb:dc:ec:b0:93:34:a6:2d:4e:6f:63:61:bb:01:9d:8a:9f:
         e3:e8:5c:e7:7e:26:3e:f8:75:d2:ce:14:ec:ee:ad:42:0a:2c:
         c2:8b:c4:f1:7c:e2:70:a2:4a:4b:a3:43:c3:71:52:6f:93:6d:
         9a:ee:11:a5:9f:2a:bb:d5:c1:af:83:f4:15:41:9c:ea:cb:f5:
         db:b3:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----