Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File:                     zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier:          fjVbMzpV3bh4RVpJwCN159VVRSFN3Ow5Wo5rVwHoqsk=
Subject key identifier:   5A:A3:2B:E5:21:D2:54:69:E1:1C:EC:35:66:CC:BE:93:B7:B9:00:B0
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer:       /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial:       01962FAB2D02A534469C1BA411E17CEF76B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number:          04A3
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
                          2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
                          3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: mlb+MUDtRdOQzjOFHDHLTX6CwzMH30qd9efcfCtjM8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2d:02:a5:34:46:9c:1b:a4:11:e1:7c:ef:76:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=5aa32be521d25469e11cec3566ccbe93b7b900b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:e8:25:c3:86:a5:e1:3f:38:0b:17:a4:ae:
                    b9:64:bd:35:a0:b8:52:ea:11:fc:48:22:3d:35:a9:
                    1a:cf:9d:16:f3:f9:8e:19:30:c7:e5:cc:6d:66:66:
                    c5:65:fd:68:83:0a:d2:08:4e:c7:19:bf:48:fc:61:
                    c8:30:71:8f:42:64:12:ff:b7:24:fc:4b:1c:56:e6:
                    0c:47:a0:fd:c9:4f:f8:8b:8c:53:56:74:83:18:2d:
                    7f:25:00:b2:e2:85:7f:e0:91:97:23:4f:66:90:6a:
                    92:3c:37:a2:a0:f3:40:38:4f:48:27:87:35:a9:8b:
                    8c:55:0a:85:2a:d4:d1:58:a0:36:4e:cf:ad:5c:45:
                    dd:32:14:af:58:36:a6:58:47:b9:9c:52:50:42:a5:
                    ca:df:f1:ef:66:69:5a:35:2a:e9:55:9b:3d:5d:e0:
                    3e:ce:0e:10:8d:a9:76:db:dc:1d:5b:f0:90:9f:bc:
                    c3:cf:05:e8:ce:ca:03:4d:db:ef:3e:a6:07:33:21:
                    a7:d2:e5:3c:b7:c4:94:eb:9e:eb:28:d9:50:fb:2e:
                    e5:51:ef:b6:58:1f:40:0c:15:fb:58:47:e1:0d:96:
                    36:e2:36:e2:70:2c:8e:94:78:3b:dd:41:27:22:67:
                    85:bd:72:2d:05:78:76:08:3b:30:6b:cb:4f:33:79:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A3:2B:E5:21:D2:54:69:E1:1C:EC:35:66:CC:BE:93:B7:B9:00:B0
            X509v3 Authority Key Identifier:
                keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:72:74:c5:f8:32:de:9d:cd:c1:b5:f8:a7:b0:26:86:81:9a:
         11:15:df:db:bb:22:d3:78:46:cb:b0:c2:3c:49:0d:f4:82:7e:
         b4:d2:c7:6a:2f:d0:57:fb:1f:ab:3c:a2:16:11:4a:14:d2:1b:
         2b:96:9c:45:a5:68:3c:b3:d6:2d:57:3f:89:7d:8b:db:e5:05:
         fe:b0:81:c2:92:f1:e9:50:e4:a5:25:b6:4b:b4:bf:63:97:eb:
         bc:c5:b7:c6:f3:dc:3e:e2:0e:82:2c:1d:98:9b:ac:5f:38:b1:
         62:00:53:4c:c6:3c:b5:a8:ae:50:d6:23:c2:cc:31:3d:5e:81:
         9b:f4:a7:f3:cb:f2:81:ab:4f:d3:4b:05:b5:80:04:e1:b9:d1:
         fc:9d:d1:7c:40:31:ae:ef:ed:cc:27:9a:c9:ab:4d:b2:d3:bc:
         59:5f:e9:f5:c9:66:6f:df:08:62:5f:d1:71:95:fe:21:75:18:
         10:f5:97:ad:b1:1e:08:b7:f8:e5:85:c1:23:e8:e9:6e:72:24:
         6d:e3:72:3b:3a:80:64:36:95:38:f2:e8:9f:fd:1b:bb:ab:b0:
         18:cc:25:08:fb:2a:d8:37:70:aa:ef:fb:4d:34:00:61:e4:f0:
         4a:79:3e:08:80:aa:9e:61:8d:96:e2:74:14:3e:bf:f2:92:3f:
         d6:01:e8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----