Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File:                     Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier:          0wUOLbqVKXzhwJZC4APXDB/pvdadU2hzvG2IPvy4I08=
Subject key identifier:   3B:17:73:FC:99:A5:F7:51:6E:A9:D1:F8:D8:EB:0C:85:95:3F:71:43
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer:       /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial:       01962FAB2507F62ED470CD28671522E96AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: 2L5LK/wMHaxIzr5+Xa5yAYUNICTUOKXCeeLPx+MYgCQ=)
                          2: rD7zRvb7ZOSrFNptFJIKjnHIijY.roa (hash: 6Kl9dTmuCjd2YPwZJzigIWIBDUWb7+H1Wc7Equtq1N0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:25:07:f6:2e:d4:70:cd:28:67:15:22:e9:6a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=3b1773fc99a5f7516ea9d1f8d8eb0c85953f7143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:3f:d8:93:29:bd:47:b7:9e:59:2e:98:0d:
                    f9:08:38:4c:14:ea:4f:5a:92:bb:ca:d3:56:ae:0e:
                    27:f4:5a:79:d2:85:5c:74:8e:57:7c:4b:61:69:22:
                    c5:e3:38:2c:fb:2e:8d:85:a6:66:2c:73:89:30:b9:
                    a9:ec:98:a9:7b:67:d4:55:ac:01:9b:ba:bb:5c:af:
                    1e:cc:cc:ed:b5:44:26:31:ec:49:b2:d5:2a:4c:c1:
                    67:e4:f7:8f:0d:4d:ba:0d:cb:f5:54:4a:b2:f4:e7:
                    e3:6a:a2:a8:43:6e:0a:4f:51:8e:e6:99:4a:e3:a5:
                    e2:52:66:0a:e3:13:fd:91:41:b7:ed:31:97:e6:4a:
                    b5:da:3d:d0:a5:1d:f7:84:6c:6a:67:75:70:8e:0f:
                    5c:88:fd:07:fa:4d:c5:2d:b8:cc:35:ab:62:d1:07:
                    30:66:db:58:86:83:5f:91:71:c6:09:b1:c2:41:be:
                    91:fe:b5:a5:ea:22:d6:c1:28:22:09:31:91:8b:a1:
                    bd:49:d5:2b:93:1d:89:34:72:40:f1:8b:7c:10:cf:
                    77:2c:a6:2d:77:14:19:5c:87:3a:af:29:0e:13:6c:
                    2b:e6:55:ec:43:1e:de:20:88:80:76:b7:e5:f7:e3:
                    60:d3:90:f6:3f:21:55:4e:b5:70:1e:4c:ba:42:17:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:17:73:FC:99:A5:F7:51:6E:A9:D1:F8:D8:EB:0C:85:95:3F:71:43
            X509v3 Authority Key Identifier:
                keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4f:16:aa:71:ee:87:5e:78:2c:8e:2b:d0:a8:df:75:cb:ac:
         6d:6a:1e:1a:3c:f2:d3:bc:86:9b:b9:3d:e3:92:fe:d1:a7:02:
         f4:b1:b9:4c:28:f3:1b:ce:b8:9e:29:a9:e8:91:65:8f:1f:1b:
         6e:30:98:f4:2f:aa:b2:ea:ea:10:83:84:d5:fa:80:34:dd:62:
         8e:c8:a7:dc:c6:18:ea:25:74:26:a8:b2:17:43:e1:3d:95:cb:
         42:0c:0e:5f:21:56:68:c7:19:f7:fc:46:b7:9c:50:e9:23:3f:
         0a:ee:67:92:8e:42:b1:13:db:88:59:aa:31:43:6f:d5:0d:ed:
         2b:11:b9:6b:1d:de:02:2f:74:4f:f9:6a:69:ee:d7:e9:7f:b5:
         35:1d:92:05:cf:a1:db:21:be:e7:c8:ce:8e:d9:bd:b4:79:b0:
         b0:86:48:2f:ee:da:34:a7:cf:ce:37:84:9d:df:05:2d:11:c5:
         dc:a8:b4:5f:7f:27:22:8a:14:39:7d:0b:23:9f:98:ad:c1:65:
         d9:c8:9b:d7:ff:42:32:83:3c:ea:e4:90:c5:ba:1d:cd:81:38:
         15:a8:23:07:da:2e:3f:d0:af:5c:d2:9d:ec:ab:83:27:75:58:
         85:e8:7e:b5:55:67:88:c9:2e:29:4c:58:aa:a9:0d:9a:00:f3:
         95:ee:ab:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----