Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
File:                     Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json)
Hash identifier:          snXchrRGKSbujD1/s3zxUsRpbTEnR1vxkbV4PrtFewg=
Subject key identifier:   4D:48:35:1D:31:78:24:AF:4E:DC:C0:BE:F3:C6:A1:13:D2:92:14:63
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Certificate issuer:       /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial:       01962E2B2023F187918C628D8810EBC8B3FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
Manifest number:          1533
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 7yi59puiWkIeEaYK8KBYKDR-rpo.roa (hash: KNlMvuBi1t2lnTe35OCJi3EadwQprB/heYmGKWj9YxE=)
                          2: IsxMtNlQJ4J5OkWPRRyBdod8aQg.roa (hash: G37zdezcJTNVKE89wqIfwLZT3BTcN0qsQ2l0rpiM6Xo=)
                          3: OBU8vlVFbNJaELvdSh6f-vm8Wi8.roa (hash: Dlm8O3K+/DDrDwWaVhCzSl+5X2EyncHNpdnVYLNwB+A=)
                          4: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=)
                          5: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=)
                          6: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: 5s8aHWPKD8OCRTnx5zu00+iiYQ6jbGoEY0SwZHKLMcc=)
                          7: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=)
                          8: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=)
                          9: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=)
                          10: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=)
                          11: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=)
                          12: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=)
                          13: hywnu8WYT2nlwz43odSJDrRW-kI.roa (hash: fmRjbmK2i86QP0T+gwCHNnfXkIciPJ7caNHOaYsr8bQ=)
                          14: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:20:23:f1:87:91:8c:62:8d:88:10:eb:c8:b3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=4d48351d317824af4edcc0bef3c6a113d2921463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:b5:37:ae:f6:a6:5f:a1:13:b1:4d:f5:a3:
                    d5:7e:59:c6:c3:5f:ed:43:b8:3f:63:dd:9b:c1:0b:
                    e0:5f:37:33:52:91:0e:b6:db:02:6b:ad:6a:14:4a:
                    09:7b:ca:dc:ae:44:e6:78:46:09:19:e8:a5:c3:92:
                    17:e9:77:d8:6c:24:05:0d:6f:94:46:07:a5:46:a1:
                    28:65:21:47:74:62:b6:a1:33:0e:a9:6a:8d:04:f3:
                    82:c2:d7:c8:9c:75:ad:67:90:6a:41:07:fc:35:b4:
                    d3:33:55:20:32:91:80:d7:ea:6d:4f:47:fe:26:8f:
                    d3:44:9f:d9:e6:df:26:b5:d3:9e:f4:c9:40:23:8e:
                    2b:de:b0:79:9d:88:9b:8c:4c:8a:1f:cc:53:ba:42:
                    2e:0d:93:29:5e:59:42:29:d1:b9:17:dd:4b:26:ad:
                    6a:25:cb:c1:e0:93:eb:5a:8b:62:f0:d5:11:00:e1:
                    ce:31:5f:89:d9:36:32:d5:ba:2a:5f:e7:8e:15:28:
                    63:15:40:ed:ea:22:23:5d:7f:b8:e5:15:c8:c0:c9:
                    b9:77:f7:d7:9b:e8:84:9d:3d:2e:6c:ba:79:94:c9:
                    c9:c7:63:69:f7:3e:90:4d:95:c8:2d:93:77:a5:63:
                    97:da:38:41:10:8f:b2:8e:e5:49:81:66:65:b3:55:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:35:1D:31:78:24:AF:4E:DC:C0:BE:F3:C6:A1:13:D2:92:14:63
            X509v3 Authority Key Identifier:
                keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bd:1f:8d:e3:85:70:4e:f9:bd:18:5b:3b:47:07:82:dd:71:
         a9:c7:92:4a:f4:e6:d5:e4:56:56:23:b4:7c:42:79:68:01:c0:
         5c:3e:46:36:35:70:93:fd:62:bc:5d:db:0a:3f:75:29:69:a3:
         8b:81:e8:7d:b6:4b:83:28:4c:52:62:9d:6d:b6:b9:0f:a8:ba:
         cc:98:97:1f:4a:17:47:ae:98:a5:c4:3e:be:01:d2:1a:5f:a9:
         e6:e5:4b:9c:2f:ad:8f:d5:a5:d4:c0:b1:08:7f:c6:79:64:fb:
         56:c9:10:9a:98:77:24:1b:c5:96:63:90:e6:a1:25:29:53:d7:
         64:4d:3d:8a:84:20:56:af:ed:21:c5:46:c2:8a:9f:6c:5d:ef:
         ec:ff:89:a9:46:94:0b:96:6b:cc:1e:d4:43:04:6b:30:a2:91:
         5a:b1:f9:20:9f:74:78:94:57:ee:d9:0a:28:96:8d:b7:e4:ee:
         76:ae:8f:e3:59:b9:7a:25:7b:db:47:48:a1:6b:28:49:20:ca:
         f0:44:3c:fc:2b:e7:6e:c9:0e:e9:33:d9:55:a6:b4:ef:3c:a6:
         9a:70:ff:f9:62:0d:c2:0c:33:7b:3b:ea:65:1f:b8:2f:30:e9:
         1e:21:cc:c8:b7:b0:31:2f:3f:f4:da:9f:eb:d9:84:e8:ec:c6:
         3a:7a:15:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----