Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File:                     ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier:          mUESIUesOyY2Aj3ZGZKphwtuTwzztZyaYKl2vMpuwe4=
Subject key identifier:   5D:4C:55:AF:19:2C:AC:67:84:93:C1:AB:7C:EB:E7:CC:5D:D6:85:9E
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer:       /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial:       01962ECFC266D010B92A61EF6DAB032AC7D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number:          102D
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=)
                          2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: PfPbKgzuPMvX8Q6axjMD5uB9Hwio/QuC8qcANAEYFyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c2:66:d0:10:b9:2a:61:ef:6d:ab:03:2a:c7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=5d4c55af192cac678493c1ab7cebe7cc5dd6859e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:80:91:b6:8b:71:42:54:84:77:2d:3f:13:b6:
                    f5:8e:37:b9:01:68:75:7f:c8:31:65:da:71:a2:ef:
                    07:da:84:d6:b0:9a:8f:e3:64:91:ed:d5:71:8e:3e:
                    cd:35:73:84:92:d3:81:3c:a7:67:35:50:d3:d8:bb:
                    5f:e3:2b:47:15:e6:55:95:54:3c:9f:b6:a4:a0:80:
                    37:90:56:24:59:c1:8e:14:06:17:05:87:4a:c0:b5:
                    92:ac:3d:77:f6:a4:c5:9d:d7:a3:a5:fb:8b:d3:9c:
                    49:b6:7b:fa:d2:e7:3f:08:67:5b:59:f6:b2:89:46:
                    e8:e1:6a:12:14:9d:b7:7d:cd:d7:db:5c:77:2d:23:
                    ab:44:d7:cc:b1:29:8d:45:54:e0:0a:88:02:8e:9e:
                    3a:b3:af:26:a6:ab:4f:aa:3b:1e:8c:da:8e:97:64:
                    9f:bb:91:e5:2d:1c:d6:0f:36:50:b1:69:81:6a:6c:
                    26:ab:ee:37:23:13:d8:b7:d0:b9:ec:e5:99:3f:0f:
                    ab:b8:bd:5c:b3:8f:ba:ae:59:b9:d1:2b:c0:58:c2:
                    e4:2d:d0:cd:a7:23:e0:f9:76:a9:b2:08:10:2a:ee:
                    d4:fa:de:5c:42:96:23:96:7b:44:a4:98:a3:0f:52:
                    00:4f:bc:09:d7:8b:56:0b:ca:9c:70:05:67:95:8e:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4C:55:AF:19:2C:AC:67:84:93:C1:AB:7C:EB:E7:CC:5D:D6:85:9E
            X509v3 Authority Key Identifier:
                keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2a:2d:35:cd:2d:31:0f:78:9a:87:72:0e:11:a6:8d:8c:a0:
         bc:7f:f2:17:1e:cd:6c:94:1c:fc:f6:34:b9:7c:58:16:8f:09:
         6b:81:4a:d3:9b:65:3c:07:a1:11:64:f7:d1:b2:b6:74:71:92:
         c5:7c:66:f8:2b:ba:16:7e:ad:9e:ab:c6:9b:8f:59:20:f2:ec:
         04:1d:0a:3e:97:87:89:d0:11:77:bf:a6:cb:1d:e5:fa:3c:cf:
         cc:4e:d9:83:23:fc:c8:2f:91:3c:fd:c1:2d:a5:45:2a:f3:26:
         c0:a0:6b:cb:d7:45:71:46:e3:f8:32:e4:17:19:b2:45:15:50:
         af:2d:75:56:2d:18:f5:61:27:9f:2c:d7:c9:15:41:77:6f:34:
         e1:e6:3a:1b:9c:e0:29:82:60:ce:e7:66:22:2e:37:a8:2c:32:
         9d:ab:15:28:27:78:7c:44:6e:89:82:ff:a3:89:a1:e3:f1:b0:
         a1:76:d3:c8:87:91:80:12:3a:07:30:71:5b:00:36:a2:c5:f7:
         a3:48:35:60:4b:c5:e9:7f:5c:15:73:1e:85:c8:c2:4f:8c:c1:
         a1:cd:92:99:b2:0e:c0:aa:d1:d1:fa:e3:a7:83:66:81:82:30:
         31:10:e7:3a:69:a3:e9:b5:ac:7a:3e:ba:b5:cb:ba:37:c0:2f:
         a4:5d:db:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----