Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File:                     ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier:          dMTjTTM23LSjnEmr9lTAlEneTIJwuOIEjYZYE9s1R00=
Subject key identifier:   76:26:D1:BD:C7:95:C7:62:7E:47:20:21:7E:28:A5:45:80:D2:00:C1
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer:       /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial:       01962DF40190107A078D88F5F3435D890217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=)
                          2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: tRxkXVUKHpRXE8ggI77rr/6dRGyPGNFktVD51l6zt1g=)
                          3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:01:90:10:7a:07:8d:88:f5:f3:43:5d:89:02:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=7626d1bdc795c7627e4720217e28a54580d200c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:63:b6:cc:c9:12:7d:32:6f:36:de:7e:02:
                    71:45:fa:5f:f7:06:18:d5:44:4d:42:36:1f:f1:11:
                    1e:24:39:ad:39:4b:67:cd:b4:51:91:18:5d:ed:79:
                    e4:4d:fc:18:f8:05:40:fb:da:62:7f:71:35:a5:37:
                    4c:11:f1:28:cf:5c:9e:49:09:10:00:0e:93:8f:89:
                    76:8e:97:99:18:cc:6f:a0:8f:27:68:2d:25:33:3e:
                    b5:dd:b5:00:fd:75:79:45:09:ec:e1:1a:de:0e:54:
                    78:5c:a8:57:2e:ba:05:b5:a2:ce:a1:b0:bc:7e:38:
                    67:84:3c:3c:c7:56:31:9e:e3:b0:b7:35:0c:6a:7a:
                    c1:77:56:e8:cd:9c:00:3f:0b:c1:cd:0d:ca:32:7e:
                    3a:05:a9:1e:b2:a3:4e:97:b9:35:6b:35:43:ee:c0:
                    f6:46:bb:26:6f:6f:22:c5:26:75:06:eb:be:cf:c9:
                    90:99:cc:c5:54:0d:a7:2f:f2:ed:8c:09:08:2b:61:
                    05:05:68:0c:8d:4c:14:26:8e:b2:3b:3d:1b:c9:ff:
                    a3:3f:0d:53:2c:b6:51:0e:32:38:c0:c6:d8:6c:d0:
                    16:ce:ba:d1:95:1c:39:96:1b:86:b2:e1:a5:2e:ba:
                    00:f5:93:75:b1:54:9c:93:45:09:86:c7:02:29:11:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:26:D1:BD:C7:95:C7:62:7E:47:20:21:7E:28:A5:45:80:D2:00:C1
            X509v3 Authority Key Identifier:
                keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:17:45:23:37:94:d1:88:f5:a8:7e:d8:59:b8:bb:40:ba:4a:
         1a:9b:a5:05:3b:44:a6:4a:73:eb:de:30:7f:e1:b2:f1:33:2e:
         6b:18:c1:aa:24:93:0a:fb:fb:0d:4f:44:7d:31:43:d0:05:bb:
         b8:4c:28:0b:93:bf:96:85:d3:e2:76:cf:74:b9:4f:dd:2b:1d:
         b5:ba:96:ec:26:9d:a1:e9:86:91:66:67:39:cc:4d:14:75:6f:
         7a:5d:e4:85:ad:85:a4:68:0e:75:f4:a8:66:5e:62:3a:a4:52:
         a7:77:65:9d:a3:14:dd:8a:88:49:7e:08:f6:83:41:ca:06:7a:
         23:4c:3b:91:de:62:01:e5:1d:8b:a9:5e:c6:4e:f4:0c:da:ee:
         b7:3e:75:da:67:70:7e:5b:ab:a5:5f:97:21:de:27:7c:96:52:
         39:d1:17:51:c2:6b:75:11:e6:55:b2:77:33:e9:86:3a:39:3c:
         da:55:f8:6d:e6:11:6e:bc:ff:6c:85:20:57:75:dc:62:d6:37:
         4b:78:c2:db:ac:fa:40:53:0d:66:02:21:c7:13:7c:62:20:80:
         24:d2:16:0a:c1:fb:b8:86:f3:cc:8d:dd:43:23:92:a5:0c:22:
         0f:74:4d:8e:46:20:c8:7b:77:af:a8:4a:c6:6f:8b:76:5e:a8:
         17:7d:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----