Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File:                     ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier:          cAcGozqPcOlYrpnC7UQpcoh9BDGu6Mg2Uzs5vfduHzI=
Subject key identifier:   AD:EE:4C:3E:1B:1C:65:28:BA:AD:FB:9E:76:B2:81:05:66:34:33:1E
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer:       /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial:       01962F06CFE3AE3F6C3C4CE9184076C59EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: +LtVqqCLJGqY1qXCn5Km6OAclt0nI3ZXrKer76eUkS0=)
                          2: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (hash: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=)
                          3: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (hash: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=)
                          4: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (hash: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cf:e3:ae:3f:6c:3c:4c:e9:18:40:76:c5:9e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=adee4c3e1b1c6528baadfb9e76b281056634331e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:f5:4d:5c:d7:c9:4f:11:62:2c:7f:51:ab:
                    af:6e:a7:e4:a9:bc:1d:80:cd:7e:e2:ee:6e:ef:b6:
                    0a:2b:b3:8d:b2:9c:00:d8:59:23:f5:47:fe:80:cf:
                    f8:e7:3c:b2:2c:02:76:ce:c1:58:77:bc:ec:d8:93:
                    7a:d2:ee:f1:e4:4c:ef:97:77:f7:11:f3:37:ee:2a:
                    d8:e5:91:8d:3d:8d:ab:9e:da:e2:5d:61:3f:d9:cb:
                    4b:4e:e3:5a:ef:aa:5d:4b:66:ff:0a:49:73:1f:0b:
                    2a:5a:28:21:00:84:54:f4:ed:41:e5:f6:9f:02:e3:
                    b9:17:61:0e:1a:f7:fb:0f:60:03:65:d0:fe:6d:a6:
                    b8:00:d1:88:30:ed:ce:49:d9:17:cc:90:79:83:32:
                    07:82:a9:a1:2b:1d:fb:d4:60:2e:45:2f:72:24:f5:
                    f6:2b:30:db:bd:33:16:3d:5d:26:e7:e8:3e:cd:f5:
                    f7:b2:fa:4f:1d:b2:72:db:00:19:de:fc:bd:7f:34:
                    ea:df:76:fc:5d:a8:42:63:ae:6c:03:30:d2:a1:ff:
                    ed:96:63:c4:cf:3b:ad:75:1d:0c:e6:e5:88:86:78:
                    f7:d9:0b:89:7c:e0:29:57:e1:be:cf:89:73:a3:ef:
                    07:53:3f:dc:d9:36:69:37:90:d2:75:79:38:6b:64:
                    24:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EE:4C:3E:1B:1C:65:28:BA:AD:FB:9E:76:B2:81:05:66:34:33:1E
            X509v3 Authority Key Identifier:
                keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b9:41:98:5c:1b:4b:e0:35:bb:8d:7d:25:68:35:13:aa:de:
         55:a9:d9:23:f2:72:bb:05:a4:01:8f:6f:41:0b:77:7a:32:83:
         bc:e9:d6:0c:d0:e6:45:fd:50:9d:17:73:ed:2a:42:d2:ff:5b:
         3c:bc:d9:92:20:ec:72:e5:a0:44:c2:2a:b5:33:28:be:37:e6:
         ce:06:1f:a1:90:a1:3a:b8:06:1c:17:de:3f:fb:cd:26:8e:b7:
         96:1a:35:f5:7b:a3:f9:a9:e2:45:a7:ed:e0:83:9e:c4:04:0d:
         4c:a8:57:13:89:c2:5b:e5:ad:47:15:4d:3d:49:2b:71:59:34:
         74:fb:8e:b4:30:55:51:c4:76:3b:35:cc:e3:4b:f6:05:3f:21:
         10:b5:47:e0:c1:52:81:b1:5f:20:cf:aa:1a:1d:5c:8d:ad:fa:
         0d:91:8a:91:b6:c0:20:48:07:c1:7e:92:1f:06:d1:3c:b0:bd:
         a9:86:0d:55:fc:ff:b7:1e:cc:39:95:35:2c:03:76:a9:8b:69:
         12:32:18:dd:a4:a0:ac:f3:fb:8e:65:bd:1a:0b:9f:fb:af:01:
         fa:bd:4b:30:88:ab:a0:19:40:28:13:92:24:88:d5:5a:98:21:
         cd:b3:71:74:6e:cc:21:ea:e7:aa:29:41:07:ee:0f:5e:77:4b:
         88:fd:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----