Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File:                     ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier:          xQxi+JG/IcemQUXVoYsPf0PHz0oTA0859BX7XcFaj2M=
Subject key identifier:   55:2F:63:FB:F9:9C:E8:6C:F2:CC:F0:C3:D3:4F:82:9D:8D:5F:3F:F2
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer:       /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial:       01962E997E5C47F7C937ED9E9C5634FC4913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number:          0574
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: rZS70bieY8c92RDSoGrYoKCZcelIdLw38TSd54q6jY8=)
                          2: b1zoobQuYRirw6zOe3ZiWtlB_Fs.roa (hash: yoTkr3Ydr4cxPjwyqyjdE6QfCIuZ05Im31loM47LoN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7e:5c:47:f7:c9:37:ed:9e:9c:56:34:fc:49:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=552f63fbf99ce86cf2ccf0c3d34f829d8d5f3ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:12:38:bd:ac:73:db:fe:d2:f0:e9:fd:56:
                    bd:fc:ad:a3:78:8c:dc:08:28:5b:b0:56:ba:ca:3c:
                    9e:2a:aa:06:2d:84:0f:22:cb:c2:bd:fb:e1:f2:59:
                    42:a2:e0:4c:69:19:ab:d5:36:ae:c7:ae:c6:dd:1c:
                    73:af:bb:81:60:85:05:31:52:9c:7e:78:61:86:f9:
                    27:7b:73:0b:72:ac:07:62:1b:2c:0e:4d:f3:77:40:
                    6f:42:8f:9f:b8:e4:dd:ea:31:d9:05:e0:6f:be:73:
                    98:d9:be:a4:a8:e1:e0:49:f4:9c:4e:69:24:b1:0a:
                    09:71:36:12:1d:72:f6:46:f4:0c:72:f1:2a:10:8f:
                    87:42:8b:32:c0:d6:c7:9e:d5:e7:1a:0c:af:7f:c9:
                    cd:b5:f1:b0:85:f3:3f:d1:ad:2f:17:1d:0e:55:3a:
                    84:bc:5e:23:59:d9:45:d9:9a:8f:f4:b5:20:b6:89:
                    c4:d2:93:e1:35:db:e7:79:18:6c:b1:0e:ee:bf:13:
                    a9:57:a5:a9:90:9f:ce:cf:8a:ff:7a:44:e4:ca:57:
                    6e:20:48:85:1d:3d:18:9c:7f:86:cc:59:0f:13:e6:
                    b9:0c:93:7d:32:ec:44:57:c0:8e:80:b7:af:87:71:
                    79:4e:6a:e7:b6:c4:f2:56:6b:0c:41:d5:8c:7c:93:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2F:63:FB:F9:9C:E8:6C:F2:CC:F0:C3:D3:4F:82:9D:8D:5F:3F:F2
            X509v3 Authority Key Identifier:
                keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:a1:c9:b6:e3:cd:53:3c:fe:c7:ea:80:3c:67:7e:fc:37:
         6c:86:7d:66:1a:03:fc:e8:d4:35:83:ef:13:0a:9b:a2:b7:a6:
         5c:77:6d:18:13:72:7c:52:72:94:a3:aa:b6:25:c0:ab:8f:d3:
         98:05:e7:73:1a:94:1d:24:10:3a:c8:fb:39:7c:ad:98:fe:99:
         f4:8f:2c:72:82:4a:1f:af:5d:de:48:6a:39:8e:e7:d6:fb:29:
         08:d6:48:6b:3f:16:7c:54:0d:bf:ec:02:e7:32:c5:6c:4f:8f:
         1b:05:35:6a:f6:c5:39:17:de:bd:70:8c:43:74:ee:44:cb:b1:
         f1:b1:33:30:a9:c1:3b:55:94:c1:99:ce:bb:7e:c4:67:c3:31:
         44:c8:a1:7a:7f:54:56:b6:fc:aa:5d:64:9c:e7:96:25:10:84:
         53:04:f9:01:9a:ec:e7:19:30:80:a1:7d:41:90:11:88:e4:a4:
         87:6c:cf:1a:bd:c2:3a:70:9f:19:ff:7a:67:7f:33:37:98:31:
         74:c7:17:2c:f1:35:b0:5e:82:a9:7e:cb:98:29:da:56:19:07:
         ed:67:2d:bd:62:ca:83:2d:58:4c:0e:a1:6f:3d:3b:dd:45:fc:
         a5:32:3a:5a:50:bf:3c:68:fc:31:a8:cf:80:38:3d:84:0e:f3:
         83:82:ba:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----