Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File:                     ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier:          +2uHzFDE+BAY+ZtIwpdoHf8Ha7ifYto42As5zeyc894=
Subject key identifier:   AD:10:FC:D1:72:83:94:28:6A:A7:16:58:73:46:01:E8:F4:6A:69:8E
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer:       /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial:       01962F073314483F35989330A74041B5E392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
                          2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
                          3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: SMeQkZuqB1NhcW/5CA+twWCfJzR6ZVoQLKYmUyf/z9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:33:14:48:3f:35:98:93:30:a7:40:41:b5:e3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=ad10fcd1728394286aa71658734601e8f46a698e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:29:43:8e:de:72:9c:6d:d6:a9:2d:cc:46:
                    6b:58:9c:85:b9:42:f1:01:47:61:f4:a6:61:b2:a7:
                    bd:62:94:6a:a5:3a:e0:91:b4:b4:a2:83:67:3f:f8:
                    6d:75:3a:c1:8d:12:3b:1d:6c:49:98:52:f2:0a:60:
                    29:15:41:d6:e9:bd:00:9a:fd:5d:c3:80:3e:fc:3d:
                    f7:c2:2c:03:a7:d6:98:7f:21:23:8b:a1:c6:60:f5:
                    4c:86:ba:64:89:80:e8:4e:05:80:08:89:cd:fd:a3:
                    b3:36:54:24:e5:74:f6:fa:3c:01:44:96:76:43:64:
                    6a:00:59:38:54:0a:4a:fc:63:56:c4:3a:e8:49:61:
                    41:08:34:c6:e0:74:fb:f2:7f:a4:3e:48:be:37:c7:
                    47:b9:8d:12:e0:fe:25:19:c8:c7:4b:cd:9e:c4:1d:
                    0a:d0:ee:1b:18:06:f4:ea:0e:f4:44:37:be:ff:04:
                    06:d8:40:e3:4a:4a:ec:e7:0d:b5:8d:d6:55:b6:ac:
                    80:f4:97:43:fa:3f:81:3e:78:58:da:20:2a:00:40:
                    05:48:7b:b7:4d:c7:e1:33:79:a1:71:0d:93:98:70:
                    69:8a:15:e3:c1:84:51:f2:ad:9c:78:1c:91:62:99:
                    41:2a:e8:4c:b0:d6:c1:af:ca:3a:84:1b:3e:fb:41:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:10:FC:D1:72:83:94:28:6A:A7:16:58:73:46:01:E8:F4:6A:69:8E
            X509v3 Authority Key Identifier:
                keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:35:2f:22:e1:f1:e0:66:94:f2:8b:c6:fd:4d:ab:67:2a:02:
         e4:a5:1e:35:c3:7b:c8:3d:0d:ea:59:49:41:9d:97:f5:8f:0c:
         09:7f:a4:6b:c5:8f:05:7c:0b:87:f4:27:dc:59:0c:57:56:7c:
         35:6d:9e:ac:a6:91:76:53:f9:c3:50:5c:26:52:e9:ce:14:91:
         0c:c4:09:74:8d:4f:2c:72:2c:c7:b9:b2:2a:eb:88:d7:46:cd:
         c2:20:77:77:7e:16:5b:43:c4:9c:ec:7d:26:80:c2:f8:d7:40:
         5d:2b:7b:cf:bb:b5:86:53:69:0a:98:7b:07:36:0e:c8:88:bc:
         49:7d:ce:59:14:2c:50:e3:5d:82:1e:dd:a8:b9:15:dc:d2:5b:
         90:86:31:79:98:6b:dd:89:8a:f8:d4:42:d3:8a:8a:cf:c6:52:
         92:66:17:47:f1:0e:ed:54:5e:46:07:0d:66:1b:3d:ca:80:20:
         00:c3:06:9f:d3:26:33:2c:42:02:40:c4:0d:fe:33:94:ee:bf:
         c0:de:e2:6d:aa:15:4e:3c:75:86:1e:51:08:ba:d3:84:d4:8d:
         67:c0:e4:4b:5a:27:ed:e0:d3:25:3f:a4:35:1f:c3:bd:2f:49:
         b8:f3:cd:12:72:be:08:09:53:b3:56:0c:77:9d:bf:84:28:ec:
         26:3d:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----