Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File:                     ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier:          m0a9Gxd5WrJa2ha19kT8H1JT/4ziTbL3DaJ83y2QzaE=
Subject key identifier:   4C:FF:38:08:84:92:9D:52:55:9D:63:15:40:D7:90:BB:32:6C:16:10
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer:       /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial:       01962E62128BE41E22F80197A557A04EB601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number:          133A
Signing time:             Sun 13 Apr 2025 09:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:41 +0000
Files and hashes:         1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=)
                          2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: GIERp+LGQYHi4Ie31GW13zVceqsIGQg1adlCzUx+ZOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:12:8b:e4:1e:22:f8:01:97:a5:57:a0:4e:b6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
        Validity
            Not Before: Apr 13 09:01:41 2025 GMT
            Not After : Apr 14 09:01:41 2025 GMT
        Subject: CN=4cff380884929d52559d631540d790bb326c1610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:d2:00:3f:4e:2a:f7:16:a1:b6:63:bd:ca:
                    47:5e:5e:5e:fd:95:ae:d7:66:45:42:4b:e7:63:98:
                    36:63:0d:48:fa:d3:ab:35:51:f1:94:20:ea:94:0b:
                    09:7f:1e:28:94:76:27:4f:d8:9c:bd:85:7a:80:58:
                    5c:85:49:66:04:00:98:c1:9c:d0:a9:f2:bd:58:15:
                    13:66:48:a7:c1:9a:72:b6:b7:88:14:4b:f0:d6:a4:
                    81:bd:2f:01:bd:6f:bf:3d:bc:dc:24:d3:55:bb:e0:
                    cb:a2:a5:87:b2:2c:b3:e4:d1:de:cc:20:5b:43:80:
                    4f:59:9a:d6:15:2d:ea:56:88:d2:09:04:a9:25:42:
                    3c:20:33:e2:23:95:87:15:ae:82:8e:da:41:9e:7f:
                    e8:75:b6:8a:f3:36:bb:75:d5:04:25:e6:69:22:97:
                    9e:94:24:6a:fa:27:7b:5f:e0:55:96:45:04:86:d4:
                    5b:09:3c:0c:12:a3:1f:30:58:55:17:7a:84:67:64:
                    22:b3:ce:2b:a6:1b:98:e4:34:75:8b:dd:42:1b:5f:
                    d6:f1:5e:d0:80:98:56:dd:69:08:5c:a2:e7:19:38:
                    81:64:82:15:f1:55:e2:3b:17:24:7c:f9:59:8e:d6:
                    9d:ab:cf:94:47:ed:18:a6:0f:ec:4b:80:44:3a:22:
                    ef:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FF:38:08:84:92:9D:52:55:9D:63:15:40:D7:90:BB:32:6C:16:10
            X509v3 Authority Key Identifier:
                keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:f2:69:68:fc:ed:32:e7:c9:df:84:03:dd:51:59:87:04:
         7c:09:09:e3:13:56:2f:80:18:e9:e6:a5:e2:7d:d2:51:48:56:
         87:a4:76:84:98:e8:0b:21:fc:76:e2:4f:e1:01:48:d1:54:83:
         9e:cb:01:61:ea:d8:20:f5:65:a0:89:e2:ae:0f:ea:91:68:5e:
         85:c8:d8:89:96:43:8a:b6:46:3e:48:67:c1:75:9d:1c:1c:44:
         2e:ef:11:17:9d:a6:74:a4:04:ed:54:1a:4d:99:93:db:dc:8e:
         c0:a7:4d:d8:28:8a:43:cd:c3:8a:d1:70:3c:2b:26:2f:38:1f:
         2a:e7:f0:b2:25:43:b6:ca:6e:4a:c2:d1:c6:04:17:57:9c:23:
         26:c2:76:df:77:c6:e0:32:b4:96:6f:61:73:a0:e2:a5:57:31:
         c6:97:ff:fc:23:df:63:ed:7e:34:91:25:f0:42:33:47:a0:65:
         0b:dc:40:9e:b4:ef:7f:5c:99:7e:f5:dd:ee:11:98:e2:b6:e2:
         6d:79:98:18:ae:8f:a1:a8:80:12:d3:5e:02:11:d1:85:52:df:
         7d:dd:97:0f:81:c1:be:d2:f9:b3:67:b8:6d:46:27:d2:e1:d7:
         97:32:27:5b:44:c0:f9:31:1f:f4:cb:1b:66:97:69:95:52:ca:
         48:0c:0c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----