Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
File:                     rzA4pxexVOHPpHEWgy2ibyiyowQ.mft (raw, json)
Hash identifier:          Aih8+lU4HGVr1ZXM21gPWyIyEJeL1ExXKl5P9OI/t38=
Subject key identifier:   CF:B5:D1:D2:70:8A:E8:96:4B:CE:F8:21:09:39:C4:65:CB:04:83:F4
Authority key identifier: AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
Certificate issuer:       /CN=af3038a717b154e1cfa47116832da26f28b2a304
Certificate serial:       01962F06CE5B26841B81AA9918D05F301526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: 9-nqsKi4Ev5jKkuKWzG_WIBo83k.roa (hash: SHAm2ssxR7ZkFZ7Brw788jEHfHi8MZS6JxMLuTDqDJs=)
                          2: rzA4pxexVOHPpHEWgy2ibyiyowQ.crl (hash: 1y+BoPHgo7Smax3Z9rpKSUjGRNRCbLobmatJ1Z/Kb6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ce:5b:26:84:1b:81:aa:99:18:d0:5f:30:15:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af3038a717b154e1cfa47116832da26f28b2a304
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=cfb5d1d2708ae8964bcef8210939c465cb0483f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:91:33:1d:84:48:0a:a7:6a:33:2d:50:b4:a9:
                    96:ce:00:8b:19:45:f1:6d:52:c2:72:b7:35:ff:1e:
                    4a:4b:64:ef:87:d2:a6:7b:65:ff:b9:c6:b0:47:a1:
                    34:d4:2c:90:a2:63:cc:1e:33:35:08:57:15:f8:3c:
                    72:82:d6:17:c3:62:fb:94:91:4b:1e:7d:3e:fe:0a:
                    4b:d8:a7:cb:8a:e8:ce:da:56:83:4d:16:8e:de:bf:
                    58:cb:f6:4d:dd:79:8d:a1:d1:24:a7:b4:ac:43:bc:
                    2a:aa:96:d0:37:6b:19:a2:0b:4f:7b:1b:6f:20:a2:
                    8d:c9:46:56:3b:6c:ae:be:e9:eb:7c:f3:4f:41:45:
                    de:25:76:53:ad:d2:75:8d:29:c7:49:2c:c4:7a:4c:
                    20:40:ce:11:da:08:e8:dc:45:d7:8e:b9:b8:ca:69:
                    ed:57:63:72:d3:3d:0e:82:44:e9:6f:14:fb:f9:7b:
                    41:ab:bd:49:f0:e2:ae:44:1b:6f:b3:55:86:4d:93:
                    60:e9:04:e5:83:22:b0:f9:83:03:a4:87:eb:f4:0e:
                    9d:c6:84:51:1f:0e:cc:e2:43:53:5b:bb:5c:a8:33:
                    4c:96:a3:07:69:0b:e5:05:9c:94:15:22:93:5a:3b:
                    2e:2f:56:79:04:61:78:c1:16:30:ac:a7:e5:92:bb:
                    47:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B5:D1:D2:70:8A:E8:96:4B:CE:F8:21:09:39:C4:65:CB:04:83:F4
            X509v3 Authority Key Identifier:
                keyid:AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e2:af:36:f8:c8:fb:a9:cd:40:43:e9:78:84:38:1f:d2:bc:
         84:c0:57:eb:b6:0d:ca:ab:87:3b:04:1e:ce:14:fb:31:f3:b5:
         ca:41:67:a7:7c:4f:76:9e:f7:58:d9:3d:81:97:b2:77:b7:ea:
         ff:83:13:8c:32:68:e9:67:14:ff:e5:f5:4b:58:11:dc:eb:96:
         57:c5:38:4b:6b:4c:a0:72:16:09:c0:e1:b5:a3:de:a7:f2:dd:
         31:31:20:bf:81:86:b4:93:41:e8:6b:06:46:21:56:6c:6d:f8:
         19:91:69:91:10:eb:e1:a4:13:f3:a6:6e:0f:40:09:3a:1d:cf:
         e0:09:59:49:86:82:20:cc:01:d9:05:0e:87:03:74:e4:30:50:
         25:68:56:a6:be:0f:42:45:61:aa:f4:60:77:2f:19:f8:96:61:
         ef:d5:8b:ca:b9:7c:b9:57:ee:5f:02:4d:d3:87:97:21:52:8b:
         d7:58:d6:b0:2b:eb:24:a1:1e:ad:44:0c:e5:4c:65:bc:49:0b:
         f0:78:a4:db:53:35:f3:6e:b6:ac:c7:e5:a7:40:bf:89:57:fb:
         56:97:7e:d7:e7:ac:05:0b:d6:e9:7a:64:69:09:3c:5b:42:5a:
         ae:8a:18:ac:82:e3:c6:8a:13:b7:9d:0f:9e:aa:67:13:70:0c:
         b9:40:ca:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----