Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File:                     Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier:          BrnjUWs17sTGMD9MlvtMHwKjckvFW6jWNlvRQLsnhxY=
Subject key identifier:   99:F6:9D:D3:1A:83:95:F2:B6:7A:33:39:33:EA:16:88:E1:6D:D6:06
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer:       /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial:       01962DF3FE1896FF8F7047E8804DB9332354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number:          27
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: 2hDPatYNHQhIPlvymgRA-xmm86U.roa (hash: 8kdVjJKDXzBN5JG+XGLJqwndIaq/0FXixJOUEgyTy9Q=)
                          2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: x+DbNPR/QsFn+Hzvhb44j2Ej+jJJyHTR5xw8WKj+v/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fe:18:96:ff:8f:70:47:e8:80:4d:b9:33:23:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=99f69dd31a8395f2b67a333933ea1688e16dd606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:04:3c:23:e8:7f:b3:b8:b7:7a:e4:81:92:6f:
                    d9:e8:1d:c0:98:29:f1:74:51:ee:34:25:1c:f5:ab:
                    b4:d0:62:af:1b:00:dd:8f:35:5c:d2:0d:06:2b:d1:
                    24:a2:d1:c0:87:86:e0:73:3c:17:40:eb:23:ed:09:
                    97:1a:d7:e9:91:34:4f:c2:b3:e3:bc:fd:64:ad:38:
                    24:04:08:43:c2:eb:9a:db:41:e1:1d:56:14:f9:9e:
                    f0:84:f6:b7:83:1a:5f:41:a0:da:ad:5c:d6:69:68:
                    e6:32:77:ca:58:f7:6f:dc:24:be:50:31:d4:e3:7e:
                    a9:6f:b7:85:63:57:81:ca:ce:8b:c0:37:fc:cd:aa:
                    10:72:03:b2:e1:ec:cb:1a:6d:42:bc:6b:39:94:bf:
                    75:d0:75:ff:7c:3f:f2:78:2e:60:6d:11:70:53:b5:
                    82:de:89:20:28:a8:d6:6d:ab:e1:e1:f4:28:1c:89:
                    95:d1:71:ec:ba:90:c7:4a:eb:dc:b3:d4:8b:ed:fc:
                    aa:e7:81:d9:5a:12:1d:fa:1c:7a:22:df:81:d0:65:
                    c3:7d:2e:54:0f:03:7a:9b:dc:c2:af:66:fd:dc:e0:
                    f3:f7:eb:db:70:ee:a2:bd:92:1b:fe:f4:0e:69:dd:
                    de:7d:3b:c0:dc:7a:3d:e4:f4:63:fd:e1:b9:06:b4:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F6:9D:D3:1A:83:95:F2:B6:7A:33:39:33:EA:16:88:E1:6D:D6:06
            X509v3 Authority Key Identifier:
                keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:eb:57:d6:88:c2:1a:0a:90:c3:96:01:8a:83:ba:ae:04:8d:
         b6:88:b0:bb:12:ae:92:00:fb:b8:ee:be:51:4b:53:ed:11:13:
         8c:b3:eb:3d:2a:02:52:18:fa:2f:b1:f7:4d:93:20:53:05:dc:
         21:c4:9d:f8:33:67:24:2c:aa:5d:d1:15:b1:39:45:2e:da:d7:
         25:d7:eb:26:99:73:f4:0c:5f:13:61:39:c9:12:ea:82:9f:fe:
         52:b1:c2:ea:3d:65:26:a6:83:c7:82:91:4b:53:90:a6:49:5a:
         c0:06:1c:ce:1c:43:22:3b:54:cb:1e:75:79:05:97:46:51:44:
         49:ac:ea:4f:8e:4d:4e:9d:83:0e:54:88:7d:75:9d:13:c3:c7:
         6c:5e:12:b8:5a:5a:cf:7d:da:dc:4c:e9:40:fb:3f:5b:32:a5:
         ac:53:3c:97:2f:8d:01:db:b1:b3:c2:da:40:79:70:9f:6a:bf:
         5b:3d:5f:00:d5:e1:94:ed:2e:95:17:ce:80:c5:7e:14:ec:5c:
         17:44:29:d5:58:61:4e:25:bd:c1:ac:79:80:e7:bd:04:b6:14:
         ed:3a:3e:f5:93:6a:46:68:b9:b4:01:06:13:ab:55:bd:00:c8:
         47:bb:1a:0a:a3:02:71:d9:23:3b:46:ac:6c:26:27:11:d0:40:
         e9:ea:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----