Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File:                     ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier:          SFGCTBKnGsCTR+/eSwt0amOzcVEXuxUoICKZ7apljlI=
Subject key identifier:   EB:66:70:78:1E:9D:9C:12:11:E8:39:3C:E0:56:0A:B7:73:6E:73:5E
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer:       /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial:       01962F7438EE8B251969EE0DF1AF297F00B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number:          0241
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
                          2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: X6hYtS/yHF8Hk0u1TBKwsOolOrNOoOWPbu/+eZmOdvQ=)
                          3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:38:ee:8b:25:19:69:ee:0d:f1:af:29:7f:00:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=eb6670781e9d9c1211e8393ce0560ab7736e735e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:c2:6b:9c:3c:19:4e:62:11:25:45:f3:9d:
                    c3:d7:42:29:7e:8b:db:8b:9b:0b:fa:a7:6b:e6:6e:
                    29:0d:08:4c:51:34:2a:34:cc:f9:6b:a4:72:97:ca:
                    b9:ba:86:e5:4d:25:b0:20:d4:99:e2:ca:88:5f:75:
                    69:0a:45:5e:a5:4e:c9:33:04:25:04:72:73:d9:42:
                    46:7d:7a:21:a0:32:0f:a2:27:bc:8e:d3:78:29:fc:
                    9b:5e:81:48:a3:01:c6:3b:ce:a4:5c:a3:64:22:92:
                    80:c9:69:5f:51:67:dd:3c:dc:fe:bc:fd:44:b8:44:
                    9a:b4:f4:19:39:05:07:4a:c7:17:f9:3d:fc:11:28:
                    c7:75:7c:df:fb:de:6e:67:91:89:30:13:51:a9:6d:
                    ba:65:00:11:19:40:fd:90:c2:7b:f1:bf:10:f8:8d:
                    9a:12:de:9e:3f:df:af:58:2b:32:94:59:5f:2e:02:
                    d5:a2:e6:b1:79:8d:5e:13:06:d1:25:3a:36:c7:30:
                    02:14:5c:2b:19:ab:9f:5e:35:64:f1:b0:bf:d3:dd:
                    3f:a2:2d:b1:59:a6:9a:29:a9:db:ec:bf:c1:e2:bc:
                    4f:93:68:80:64:73:18:f9:cf:f4:f0:2b:74:df:d1:
                    88:2d:18:6e:a7:7e:25:bf:7c:12:ce:b2:ff:49:9c:
                    2f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:66:70:78:1E:9D:9C:12:11:E8:39:3C:E0:56:0A:B7:73:6E:73:5E
            X509v3 Authority Key Identifier:
                keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:84:77:cd:bd:57:71:96:9b:ae:99:b8:c0:f6:f8:a1:9d:ad:
         65:0f:ec:bb:f3:1a:b4:a0:74:44:27:71:c9:9a:30:29:cc:4f:
         f5:5b:0b:86:fc:1a:95:2d:88:cd:65:35:c3:71:2c:7c:5e:76:
         59:b3:8c:96:3a:8c:12:3c:41:e9:fa:ff:64:11:26:cf:e0:ce:
         d9:6f:49:11:b6:62:be:c8:f3:8a:d4:9d:df:9a:fa:a4:8a:69:
         21:ba:fa:7a:b2:7b:6a:6d:24:35:de:9e:be:bd:e5:28:b4:a6:
         af:b6:f3:f9:cc:f1:e6:9d:2d:28:7a:7a:46:d6:36:b5:0f:a9:
         ff:d4:94:6f:eb:62:6f:f4:ef:ce:9e:43:87:af:b8:7c:4e:d8:
         dc:d4:95:f2:07:ba:3f:27:1d:29:f3:21:f5:31:74:83:53:dd:
         6e:d9:5d:56:a2:22:f8:6f:5b:dc:1f:e2:d0:5a:1d:03:40:47:
         f0:fc:25:69:20:c9:ff:9f:df:75:df:87:23:c4:8e:b6:fe:ce:
         31:d7:3e:2c:fb:34:0e:ae:fc:73:57:71:2b:5f:7e:5c:c1:35:
         63:f4:57:11:89:7a:00:00:d6:ac:7e:13:22:56:f7:85:33:24:
         75:74:3b:ed:ae:ef:b5:00:23:e7:3e:5d:44:65:74:47:83:7f:
         02:92:25:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----