Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File:                     Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier:          sHMIDxvm6Yf3bFtW86b1I0uGVdLiwRQ25KapA3e0coo=
Subject key identifier:   44:65:19:99:34:9E:4C:33:BE:1C:62:5D:54:54:19:15:E8:AE:19:55
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer:       /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial:       01962F06F737F3B5B6206BED1CA3F2E48B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number:          1224
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: 6JYNh-n5WyyjhpESG3f33euXdz0.roa (hash: F75DJeS7+fMY7BG2ZrDAaDOIaz0HnjQabtUssq/wKLk=)
                          2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: MsWYTPrR5XLfuXn2d0SVV58uKND/vdQYwrcxN4NPVko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f7:37:f3:b5:b6:20:6b:ed:1c:a3:f2:e4:8b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=44651999349e4c33be1c625d54541915e8ae1955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:ee:d6:b6:36:a7:21:02:48:01:88:f0:06:
                    ee:18:92:c5:e6:7a:c3:d1:f0:a2:ff:c8:06:a4:ee:
                    12:78:92:15:13:86:9f:69:ce:77:f0:34:bf:b4:1d:
                    a6:41:9c:e0:31:ea:bd:2a:d3:b3:ff:f4:78:ba:20:
                    e6:fe:82:9a:13:85:1f:8f:9e:5f:ed:32:94:34:fd:
                    02:fa:8c:6b:c9:bc:eb:f8:2c:72:13:ef:a8:ac:91:
                    81:c3:99:ab:56:8a:c1:e0:01:6e:34:1f:5c:7c:d2:
                    84:35:5b:42:eb:75:9e:4f:49:d2:7a:a7:0c:28:66:
                    be:d7:e7:05:21:aa:65:40:94:5f:94:05:9c:67:74:
                    33:50:ba:ff:75:bf:15:c5:d7:e0:99:52:f0:e2:e9:
                    f1:b5:cb:91:03:77:cb:1b:51:24:8a:10:22:d6:ec:
                    80:63:bc:8f:ca:05:54:14:68:05:da:b7:fc:b0:ff:
                    b4:d0:59:95:d5:49:23:58:2f:03:b2:84:d8:1a:05:
                    ff:5c:e1:cc:f7:7e:5b:c5:da:26:36:9e:88:f0:97:
                    4e:75:dc:03:0b:6c:05:9c:8e:a1:21:b6:7d:6b:b5:
                    07:88:e7:42:f0:8d:91:7b:42:38:17:04:ed:1a:87:
                    f6:7d:d9:34:e0:e6:97:bc:08:26:40:c0:3e:f0:55:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:65:19:99:34:9E:4C:33:BE:1C:62:5D:54:54:19:15:E8:AE:19:55
            X509v3 Authority Key Identifier:
                keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:af:74:06:76:bc:04:ab:5b:bc:9f:6a:1d:1c:ce:91:f6:
         3f:75:4f:09:75:6c:5f:05:eb:78:75:3f:53:61:18:f5:db:b9:
         2d:8a:01:0f:c8:12:03:ce:95:cc:80:5d:7b:56:d3:da:09:f0:
         90:59:8e:49:7e:e2:00:c8:57:a5:c9:b7:77:e4:82:04:28:0c:
         94:7c:cb:f6:58:41:97:60:6d:e7:85:8c:02:1f:67:b5:db:98:
         6b:b0:7a:8e:06:93:97:68:c6:7a:90:73:b7:54:96:7b:7d:b9:
         0e:5a:f8:6e:4d:70:cf:61:89:a0:7b:2c:dd:8a:01:a5:22:1e:
         68:ab:27:be:87:1f:14:79:96:e5:ae:03:02:c8:41:1b:e4:69:
         9c:58:58:a4:1d:9a:c4:0c:a9:cc:5e:87:0f:ea:87:c5:9d:3e:
         6c:4a:f6:91:cb:c1:51:b0:60:1c:13:90:06:d3:73:aa:34:6e:
         37:d7:41:28:aa:f4:df:1a:37:46:78:d4:d2:88:e8:7a:64:92:
         95:0d:7c:b2:d3:72:d6:bb:43:f0:fc:27:16:f2:fd:65:ff:b9:
         be:cf:80:26:06:fe:09:9c:9d:72:49:20:26:23:e5:99:d4:01:
         3b:39:0e:1e:67:33:1b:ad:d2:84:6d:05:e8:ad:ff:6b:74:da:
         92:3f:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----