Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File:                     Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier:          2cn2ZzM5BBmesQBCrYXskdUXCPjMTaueEq6IdOh/b34=
Subject key identifier:   50:83:E5:6E:65:A0:F1:19:2A:DA:EE:38:3C:0B:F8:FC:4F:53:71:97
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer:       /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial:       01962FAB665ED44E297FDA25D6EFA4B36649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number:          0DC3
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: V9rIQ2WAkP9ZwmYguRaudzmbob50y4sxG07W4AAhjFU=)
                          2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:66:5e:d4:4e:29:7f:da:25:d6:ef:a4:b3:66:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=5083e56e65a0f1192adaee383c0bf8fc4f537197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:b8:8f:6d:86:cb:1c:a6:89:99:79:6c:eb:
                    a5:6a:7d:ec:9d:e1:69:f9:71:d6:7a:db:96:50:bf:
                    ad:57:5f:8d:a5:b1:ab:05:2a:8f:61:56:a5:05:16:
                    a7:65:02:0e:84:e1:12:5a:ea:04:62:f6:f3:7b:18:
                    a7:6d:13:48:b0:91:78:fd:c7:79:25:2d:db:e0:7c:
                    ba:a8:b5:4e:d6:2a:41:52:af:45:60:2f:b0:e7:af:
                    96:af:be:c0:b6:17:a7:3e:f5:c5:6c:a5:83:68:91:
                    89:d1:3d:3f:e0:32:1f:95:14:b5:34:98:4a:7d:c2:
                    de:cd:99:11:53:e2:10:33:22:c8:ef:e5:35:d1:fe:
                    0f:df:5a:57:28:5b:e6:15:ad:57:de:7a:d7:c9:93:
                    df:f2:63:b2:0d:ea:f9:9b:75:b3:1a:0a:b3:19:03:
                    2c:c8:36:6e:2a:5f:71:c8:ff:c5:0a:ab:7b:fb:6c:
                    9b:45:f5:f3:b5:d5:e6:3c:41:e5:8a:09:6e:db:75:
                    01:e4:c8:66:c3:ae:a8:8c:8f:72:64:ca:7f:91:15:
                    9a:7b:82:67:4d:67:f7:bb:27:af:e1:63:ce:85:9a:
                    7c:7d:7a:5e:6c:ce:ec:a1:cc:a2:fe:d6:1e:00:8a:
                    fa:3b:6d:82:b7:55:29:80:a9:be:be:57:e6:fa:db:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:83:E5:6E:65:A0:F1:19:2A:DA:EE:38:3C:0B:F8:FC:4F:53:71:97
            X509v3 Authority Key Identifier:
                keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b6:fd:c0:e9:e4:2b:c5:ea:d8:07:b3:f7:3c:64:60:1a:4b:
         7b:f5:d0:69:55:cb:a2:31:52:76:74:0b:94:47:84:60:2e:ff:
         3d:47:73:21:94:16:8b:2e:8f:51:94:ce:d9:d2:84:ef:ff:87:
         6b:0e:a3:ab:43:c5:c6:8e:2c:05:6c:3c:49:12:eb:0b:4b:e8:
         46:d2:ce:ff:91:24:f2:be:8d:a4:d9:df:ec:7e:11:ad:93:56:
         49:40:a7:5d:bc:44:89:0c:c5:e0:23:01:28:ba:df:02:c5:a3:
         38:4d:02:1d:87:cd:e3:ab:2d:01:e5:f8:25:b3:a5:81:1b:c2:
         ad:e8:6a:76:85:0c:c1:e6:4c:04:cf:fe:87:d4:b8:fa:ec:75:
         9b:07:6e:21:5c:84:6a:a5:e2:a4:8a:4b:49:e3:86:2e:89:01:
         9c:dd:cc:fc:9d:23:63:66:95:95:2f:b7:bd:3a:ce:c1:51:00:
         3c:4c:83:04:46:62:23:50:02:c1:d1:3a:88:46:d0:30:f6:fe:
         ea:7e:47:e8:25:f9:5b:b6:0c:3a:4c:90:bc:c8:d2:96:24:05:
         5f:66:80:12:91:28:9a:9b:3b:e7:ad:9b:87:55:c9:30:a9:17:
         70:8a:12:19:5c:15:2a:c4:48:73:38:0d:57:36:2b:ca:68:96:
         a7:09:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----