Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File:                     z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier:          Rkf97sEFyo9k9TVR4DtIA+TEArPXgTA2eakGMP7veB4=
Subject key identifier:   AD:22:8A:4D:3E:52:B9:22:4B:69:09:07:3E:96:69:7C:24:B5:E7:D9
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer:       /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial:       01962F7490D58BDCE3FDDCD9080ED9545A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number:          130C
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
                          2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
                          3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
                          4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: f+QFsmo+TBCcKeXdMF5VvWgPXRCWHi9+DnWL5v8ouV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:90:d5:8b:dc:e3:fd:dc:d9:08:0e:d9:54:5a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=ad228a4d3e52b9224b6909073e96697c24b5e7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:47:54:cf:33:f3:c7:52:27:4c:3c:e5:70:c4:
                    c6:ad:88:5c:ad:ba:28:26:1b:13:93:06:2d:a4:2c:
                    bc:11:83:dd:54:b4:3d:14:27:38:7e:93:b1:e2:03:
                    ee:ca:0c:24:d0:3a:b0:0d:3b:21:ed:17:1e:ad:c3:
                    93:a4:7d:3e:c4:8b:83:02:bc:c3:8e:43:4a:ad:99:
                    d6:33:cb:8e:b2:fa:2d:a4:45:be:20:d1:4a:9b:ee:
                    03:11:97:8f:fe:df:2c:9a:f4:eb:01:48:3a:0c:f8:
                    85:a0:17:f2:95:93:46:26:9f:cc:4a:4e:86:d6:ed:
                    cb:f1:85:4b:dd:c4:b5:1a:4d:b7:1d:0f:a4:71:54:
                    81:08:da:0a:22:09:02:a0:c9:e2:ce:54:ec:28:d7:
                    65:cf:fb:75:19:0d:d9:ab:da:87:aa:dd:0d:23:f5:
                    e8:b0:bb:5f:3b:7e:ad:3a:0a:a8:89:9d:c8:86:39:
                    35:60:b5:a8:59:5d:5e:93:fb:c2:9f:30:92:66:1b:
                    06:04:e7:fb:e5:c1:d8:58:37:dd:c1:50:7a:ec:42:
                    48:51:2c:c6:75:a3:3b:b1:7d:06:1b:89:bd:5c:49:
                    75:67:42:3f:c2:ee:39:3e:6b:11:2b:82:24:15:78:
                    76:8a:a6:33:c4:c1:49:3d:eb:1d:d8:17:13:16:77:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:8A:4D:3E:52:B9:22:4B:69:09:07:3E:96:69:7C:24:B5:E7:D9
            X509v3 Authority Key Identifier:
                keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:67:5e:72:48:d2:51:9e:81:42:6e:d2:cc:c7:89:18:38:
         95:d9:7b:27:86:66:f2:0f:c8:4d:dc:a4:7e:48:f7:27:33:41:
         a6:e1:29:b4:b6:4e:39:49:b8:8f:cf:9d:f7:17:70:7f:5a:f6:
         45:53:fd:4a:0e:0a:d7:3b:da:38:3d:7c:f5:7b:ff:11:58:7b:
         b5:c2:72:f3:20:93:1b:3a:08:fb:c7:c8:55:12:9e:29:cc:58:
         9b:d3:98:90:1b:a8:e9:83:1c:c9:9b:4d:c9:6b:db:ed:54:e4:
         9f:94:2c:51:6a:27:3f:8d:33:0c:ce:49:e4:2f:5b:67:75:94:
         89:34:10:0a:c6:11:36:6a:07:2f:d3:f5:1f:c5:b1:ad:d2:7b:
         c7:3f:98:b2:7f:30:4e:b3:d1:36:56:0f:cf:5a:8b:f8:df:22:
         71:1e:89:33:4b:46:a1:6b:d6:c6:d4:0b:72:ef:5b:ab:4f:1b:
         60:03:50:17:d0:0f:21:1c:ff:cb:8a:9c:ec:e0:fa:98:4a:58:
         85:72:f3:93:f6:b6:3c:18:5b:8b:2a:b2:55:f9:f4:1b:51:f7:
         10:b1:de:ad:09:26:fe:92:3d:e4:7f:f5:c3:00:70:85:fc:55:
         02:4d:2f:51:aa:3a:58:86:a7:a2:eb:4d:39:93:5b:af:b9:5f:
         79:a7:0a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----