Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File:                     ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier:          CW4ZVF6866HDsV4mMpG0VxglPorGIoobiHLp33WdIqc=
Subject key identifier:   80:B0:96:A4:08:B5:B0:45:69:41:F2:51:4A:13:8F:E6:D5:3E:95:35
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer:       /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial:       01962E99893C0899A62D4D0DB0D82DEF8614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: 2lhRfHkMgHjBgOEI871xwfstUps.roa (hash: pS6P1vzgUypkZeUsuXFw4LKxiNYTX5RfnQUo/ctpKhE=)
                          2: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: 3H8vGB7tLsFBHpm1lpda2XaVC2YQZyAG5HNgcqhnOyo=)
                          3: uZvIw4DMtYOiY7JlOgb63vTUcZI.roa (hash: g2eHsXH9Y/MXPOSVAzGV6O9aHOUSDc6gHQknS8yIWx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:89:3c:08:99:a6:2d:4d:0d:b0:d8:2d:ef:86:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=80b096a408b5b0456941f2514a138fe6d53e9535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:c3:b1:b6:b2:75:10:8a:21:19:9f:b6:ae:
                    b0:83:be:bc:09:21:46:01:75:2f:9a:4d:59:25:90:
                    25:ce:73:3e:10:ce:38:36:4c:45:75:25:88:87:2b:
                    c8:0a:bd:3e:44:aa:a7:46:70:e3:00:b3:e7:b6:16:
                    30:ab:66:05:0c:69:1b:a8:fe:03:a0:59:bf:66:36:
                    bd:1a:7b:fd:4e:09:85:59:63:8e:47:0e:67:b0:52:
                    b2:2c:cd:44:4c:c5:eb:53:47:5f:92:ce:0f:bd:cd:
                    d9:b6:98:3e:96:ff:bb:87:66:24:8f:1e:5a:c0:62:
                    57:0b:0a:9b:5e:91:79:25:84:39:61:d1:62:3f:69:
                    5e:12:bc:62:19:49:7c:4b:e1:02:95:6c:31:1f:46:
                    2b:28:b0:45:49:54:00:ac:50:1e:e6:f5:a1:a1:2a:
                    cf:88:76:3e:c4:33:02:04:fb:09:61:3c:c9:fa:f3:
                    7e:67:a7:0e:3e:01:fd:89:e4:eb:9b:8e:bc:9f:30:
                    ed:12:e5:35:d4:5a:2e:b7:23:91:f4:5c:a3:b7:cc:
                    58:b9:80:01:e7:a7:89:ba:13:e0:aa:e3:26:5f:00:
                    56:bd:c5:de:b6:c9:ef:d7:d5:ca:b7:f2:cb:af:9b:
                    f1:66:71:d3:a3:89:bc:1d:48:7a:59:4e:03:39:79:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B0:96:A4:08:B5:B0:45:69:41:F2:51:4A:13:8F:E6:D5:3E:95:35
            X509v3 Authority Key Identifier:
                keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:bd:7f:85:f8:a3:a7:c0:1c:ea:58:e0:27:0d:df:5a:01:
         6c:89:d6:3b:4c:6c:bb:98:0b:dc:bf:aa:ac:08:26:87:02:2b:
         b2:64:2e:67:1f:aa:04:be:5b:13:fb:cf:3c:d6:e2:d7:81:46:
         ff:c9:eb:17:92:8a:01:26:c0:8d:e0:0f:0a:16:d9:ab:74:36:
         9e:2a:ec:d9:1d:b0:ee:4e:42:c6:ea:e2:da:5b:c6:8f:97:4c:
         f9:67:60:d4:11:ad:97:ec:76:18:ca:60:3a:df:7f:87:1b:61:
         56:a4:20:d7:60:fe:52:1f:81:65:6b:1a:ba:a8:e2:8c:95:4c:
         89:b6:26:d1:6c:34:e0:99:77:d4:f7:93:ff:d9:74:e3:f3:cb:
         48:4a:15:64:a0:c2:ea:5b:70:a6:3c:32:96:61:1c:86:d8:1e:
         47:a3:f1:10:13:97:34:bf:7c:89:16:36:d1:84:c0:28:41:07:
         49:c0:b3:08:0c:b9:6f:0c:a1:ae:31:5d:01:08:6c:c3:73:f3:
         41:03:5e:96:8f:07:ff:60:07:3f:d0:be:be:58:57:51:a8:73:
         64:db:a9:a5:0d:3c:82:9f:b0:45:17:a4:1b:0d:85:d8:ba:91:
         8c:6b:22:e8:45:88:69:e6:5e:1b:ff:d2:97:6f:ae:24:f5:d4:
         8a:f2:9d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----