Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File:                     ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier:          BqfWDsU7otvjGA21Yi6UYXn1Kbac0417puCEN2F8Zvs=
Subject key identifier:   FF:90:06:28:1D:9C:F3:84:8C:D0:00:F4:23:D6:17:88:67:EB:FB:AE
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer:       /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial:       01962F74301138711BDE094B7E2B2CB23D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
                          2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
                          3: nBzRioAspYogjhuqMfmeJKfieBA.roa (hash: zMCnSjaFE4ydwmXDRAVpua0IoyMIX5RMql4K/75vlGo=)
                          4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: U99UyBQFL6nCBe54C5DZA2Mnv2k5670DodNQCviYiz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:30:11:38:71:1b:de:09:4b:7e:2b:2c:b2:3d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=ff9006281d9cf3848cd000f423d6178867ebfbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:0a:ef:d5:6b:54:c7:fa:bb:62:a6:34:30:
                    6b:20:3e:27:09:d2:ff:8f:4a:54:01:df:e0:fd:7b:
                    bb:ff:a0:6b:f6:80:0c:91:d7:3c:19:35:f6:3c:fe:
                    3e:42:82:16:51:80:0f:dd:e4:ea:7e:ba:62:a4:d3:
                    58:68:db:5e:7e:dc:27:f3:e5:8a:bf:d4:3f:f4:93:
                    6e:ca:54:48:19:4d:c1:2a:a6:85:77:b9:9d:16:10:
                    c1:19:50:44:6d:61:65:e8:28:dc:69:6e:44:f9:b4:
                    33:81:63:07:c0:5c:f6:7b:ce:84:ad:81:ee:8e:9b:
                    42:78:5e:74:a5:d6:e8:d0:65:be:27:b2:5c:99:9e:
                    20:c6:60:37:43:54:f0:cc:c6:8e:0d:8a:13:27:99:
                    f0:95:2b:41:73:97:80:f2:bb:0f:a4:ef:08:2a:2e:
                    67:a8:e7:5a:13:73:de:6d:a7:81:ec:c6:1d:83:c3:
                    a8:1c:b3:6c:34:30:bb:1d:bb:a2:cd:65:c5:e9:b8:
                    07:89:8c:65:1f:bb:54:81:b0:34:65:6c:4c:a6:80:
                    7d:a2:3a:52:97:4f:86:20:92:01:9d:c6:d9:c5:7e:
                    d7:54:18:9d:d2:fa:cd:ab:69:87:2d:cf:9c:d7:f9:
                    4a:52:f6:e7:fd:9f:19:a6:a3:c4:38:f2:d1:27:e1:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:90:06:28:1D:9C:F3:84:8C:D0:00:F4:23:D6:17:88:67:EB:FB:AE
            X509v3 Authority Key Identifier:
                keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2c:8d:25:3f:af:95:83:4a:7b:51:1a:0e:5d:44:0c:48:06:
         c9:7f:25:a9:51:31:a8:f1:33:18:f7:77:96:47:51:47:79:36:
         3c:2c:36:fc:4f:bd:92:cd:a2:3b:2d:14:4d:19:97:a9:0e:b8:
         ef:d5:dd:e1:1d:45:9a:33:b1:e1:ee:d0:ab:cc:96:40:21:75:
         cf:ef:d8:55:0a:14:4e:bc:02:98:77:6f:a6:4a:03:7a:68:32:
         be:14:72:92:ba:7e:71:0f:24:b4:36:fb:83:91:ec:83:8e:d4:
         83:a6:65:95:e1:07:66:ab:51:7c:bb:30:98:04:79:5d:77:be:
         0a:87:33:8c:65:14:a1:b4:d0:6b:90:b8:f1:9e:4d:e4:4d:8a:
         24:af:44:a2:55:8b:df:c4:2d:06:b4:df:52:2c:18:d5:31:b0:
         87:65:fc:f6:f1:f3:77:8b:55:93:bf:81:a4:4b:60:fe:04:5f:
         65:19:0b:d4:cf:b6:f3:0c:ca:41:77:78:b1:d8:e8:29:45:4f:
         17:5e:ae:a9:2a:72:8f:e3:8d:38:42:6a:db:eb:7e:15:0d:60:
         b3:02:ed:c8:4c:fc:8a:33:ae:a3:c8:0e:57:19:35:aa:f4:4b:
         87:d6:43:a9:37:b7:76:cd:54:99:d1:77:40:9f:47:40:cd:1a:
         26:7e:2d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----