Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
File:                     z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json)
Hash identifier:          uidGe3R8REB30PJ+sHV4RwfJfkoHv40zt4ykegmudH0=
Subject key identifier:   E5:12:46:17:1B:5C:AD:E0:30:3C:DF:EC:19:CE:4B:48:7D:D2:E3:56
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Certificate issuer:       /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial:       0195E1905B1C19D6612AB3D5FAB39D90B279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
Manifest number:          14D2
Signing time:             Sat 29 Mar 2025 11:01:28 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:28 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:28 +0000
Files and hashes:         1: 2OW5pDkmmu8Gc-65c3roUTUPVVs.roa (hash: 1ABKmhyp4ry/QyLfT8X5F8Aya9/+M8AUJSL8pb/4I7s=)
                          2: 5J7FT5T4iCPWgHROhsbqdNaMT9o.roa (hash: jBmkmJYpsApJkLfRXsG4ALVIn6TGuuaI6YuyIgvxPnE=)
                          3: 7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa (hash: RijcUGVaqbGizL+PJrBNxXCQgXj+yEg1FEmyC/akSl4=)
                          4: C3eiydvfu8zDQyZJ5caLapaTTPQ.roa (hash: Laj6Npa1ifE/Zjf7ICEhvgeUyo4o6/IxywpuMaNuLhw=)
                          5: MWd_zJCCtky5uU44fppjHNR26hg.roa (hash: Oyiv4lI5Gy71tNRNOQYH2bTYTyT8/iMpyrW+5LZJMbI=)
                          6: PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa (hash: L9jMb4xMearWx1pMpG1UZIzS3btc6sPfJWcVjCfkqnQ=)
                          7: QNUdrvwe6lyFAsywdVJfIRLAKlY.roa (hash: r5d8TXirwEC36NvrWyANl8uE9Nb8babrGApX6K62/5s=)
                          8: afUuePiQxrQoYV-7jzE19aHNGDU.roa (hash: k5M8PCW1P+XYROynza56iTnybz7UFVRtIfTB7o18aN8=)
                          9: eM5alpFd9FlCD3E8JB4HBxFpQAM.roa (hash: tGtdx4JuLesxtVc1CFVpEvoeAxYCq06KeJuOY4gZL6U=)
                          10: iX79BvpLXjPp1zRHv-56Jb28iUo.roa (hash: 5izyKa6j1NS60f2KCWMjeYm2w4JWGdeNSlmJ4IkN45o=)
                          11: mxTVUqpOL4wnWbrVTklVfLePHRs.roa (hash: +cuq9xTWysBMQ3/uZNCA0qqbD2i04SKRPZsJzG6pUDo=)
                          12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: GHDKjRjDsfPpD4ZQMzt2v6bKOVjlx4x6ySMOAKP81EQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:5b:1c:19:d6:61:2a:b3:d5:fa:b3:9d:90:b2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
        Validity
            Not Before: Mar 29 11:01:28 2025 GMT
            Not After : Mar 30 11:01:28 2025 GMT
        Subject: CN=e51246171b5cade0303cdfec19ce4b487dd2e356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:53:eb:9b:75:70:54:e1:cf:36:f5:12:6d:
                    d0:d6:23:44:6f:7a:73:19:ff:a3:f1:af:a5:68:4c:
                    d8:60:ad:ef:57:a9:b6:78:75:44:e2:d8:af:79:ed:
                    d9:ca:1e:be:e4:2d:24:7b:c2:13:ba:1f:8c:f6:64:
                    0a:cf:16:ed:8d:a2:f2:fe:2a:8b:52:66:79:59:c7:
                    f4:9f:17:31:e6:59:7f:1a:ef:74:6a:af:40:e3:41:
                    3e:a0:5c:c2:d4:f8:a5:51:ab:e3:47:ac:f3:54:77:
                    d5:75:63:38:90:54:90:31:c4:ed:b6:85:4c:7b:c3:
                    26:ec:ec:19:31:60:6c:d8:b3:78:f8:74:39:23:7c:
                    2f:dc:94:ba:ec:18:b2:d4:90:3e:6e:20:22:8f:04:
                    28:98:c3:91:63:27:e8:86:e7:7b:1c:2e:cb:d4:c3:
                    b1:96:a6:1d:af:99:37:50:84:0f:a9:d4:a8:c3:67:
                    37:3f:9d:8f:b3:2a:31:0a:4a:b2:b3:88:9c:88:cb:
                    d3:a5:fd:0c:81:b3:6d:a9:98:16:43:e7:0b:9f:09:
                    06:a1:1b:7d:28:2e:89:bd:c1:0a:b4:3a:09:38:25:
                    25:7f:c8:39:58:9c:13:3a:ba:81:e6:09:df:75:39:
                    9d:cf:5b:b0:5c:12:75:05:53:8b:af:5c:92:50:fe:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:12:46:17:1B:5C:AD:E0:30:3C:DF:EC:19:CE:4B:48:7D:D2:E3:56
            X509v3 Authority Key Identifier:
                keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3f:67:07:74:df:fb:f7:80:18:cb:b2:49:e1:3e:30:70:81:
         af:8d:4d:f3:ab:56:24:70:35:4f:9f:7c:b9:9d:97:07:2e:bf:
         3e:dd:e9:20:6e:20:34:6e:5d:94:b8:6b:d3:96:55:b3:33:b4:
         3a:3e:09:60:ff:cf:74:09:a7:49:8d:01:93:61:05:fe:57:9d:
         a8:22:00:89:20:74:26:72:7f:44:16:5b:ec:62:cc:1b:c5:91:
         cc:db:0d:ad:0f:aa:1f:79:50:14:80:e4:23:99:9a:62:77:95:
         22:dd:2f:67:1f:a3:4a:07:d3:50:14:e2:e1:19:c4:e1:8a:06:
         bd:f4:55:43:cd:9c:b3:8c:78:a1:a4:e4:75:20:c4:e6:82:28:
         a5:62:2e:d4:d6:38:03:ca:2b:e4:34:7b:21:fd:25:6f:c8:3a:
         bd:e0:ef:f5:54:58:18:63:73:40:13:5b:45:e3:bf:71:ab:d5:
         44:76:6f:79:0a:fc:a3:88:1c:83:a2:4a:85:09:bc:1b:a9:9e:
         62:68:5d:99:45:10:2d:df:fb:44:7d:b3:55:35:99:04:d6:86:
         4b:1e:49:00:96:15:e4:c5:ea:36:44:69:6b:50:f1:0a:c1:a8:
         d1:33:50:6e:c2:aa:28:c0:1f:26:6f:44:fc:a5:84:17:e7:85:
         7f:4b:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----