Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File:                     ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier:          S20/e8YA1f5wwfcE70Bnj1xip6WGkIb5HKbVCMvZzQI=
Subject key identifier:   50:27:FF:A3:8C:68:21:C4:04:53:23:08:C3:FD:6E:F8:D0:39:0B:BA
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer:       /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial:       01962F74BD9297A9618E62B53EA451D62ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number:          0BE8
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=)
                          2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: o7qVI+ueOHIXSUj+k7wQ0gEgAIzna82T7Vg/ryuLohA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bd:92:97:a9:61:8e:62:b5:3e:a4:51:d6:2e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=5027ffa38c6821c404532308c3fd6ef8d0390bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:82:a8:7b:0d:6d:8e:e2:23:65:5a:f5:cb:
                    b6:1f:d3:3b:78:6b:dd:6c:53:b8:8e:ae:db:cc:d9:
                    16:6b:a4:7d:a7:06:5d:20:50:45:af:f3:2f:11:f6:
                    02:33:2f:32:9f:d1:68:11:39:64:d7:e2:a6:6e:4e:
                    9d:e8:d7:38:72:64:b7:4d:99:8c:3b:a2:bd:7f:25:
                    c1:e0:b0:60:63:dc:98:ac:54:c5:91:88:5a:a0:4f:
                    9b:ef:0c:27:e1:67:13:d9:75:4f:7f:b4:15:2b:f0:
                    e5:0c:78:5b:1f:a0:a8:d1:37:48:3f:96:32:58:88:
                    41:51:b6:fc:5f:db:dc:34:d8:e6:44:8a:3f:32:d9:
                    ed:03:0c:35:b4:d4:e1:e9:66:7c:d2:82:90:9b:70:
                    65:96:7e:a0:ba:fd:dc:0a:a5:b6:21:67:6f:3f:2f:
                    f1:5e:e4:be:c6:a3:e9:a1:4e:58:d8:92:65:b5:ec:
                    03:5e:93:ec:ed:b3:87:b7:aa:c2:62:c0:c7:7c:9c:
                    7d:78:5f:42:be:bd:14:ce:a4:4e:48:a0:14:b6:7b:
                    27:52:2c:6b:91:99:70:4c:77:27:a7:f8:52:ae:30:
                    8a:ca:84:e8:7b:b3:82:79:5c:b9:4d:8c:84:13:14:
                    3d:d2:46:f9:ff:84:83:12:be:63:d5:83:e4:c5:47:
                    a0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:27:FF:A3:8C:68:21:C4:04:53:23:08:C3:FD:6E:F8:D0:39:0B:BA
            X509v3 Authority Key Identifier:
                keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:18:9b:2c:6e:89:4b:6e:2f:2c:8f:23:59:de:a9:28:a9:3a:
         9d:74:8f:b0:24:f5:1e:01:8f:d2:f9:60:e1:2d:47:f2:65:d5:
         67:15:07:fa:d3:8d:2d:e1:74:3b:ab:74:81:d7:4c:50:f0:ae:
         27:8c:23:46:f9:b9:57:d4:41:67:50:77:35:a2:5c:59:ef:be:
         0c:f7:9e:87:1a:e3:95:3b:23:86:fe:48:7d:5e:fb:67:42:68:
         b7:e5:3e:85:73:15:91:9a:30:7d:a6:91:cd:6f:0c:4b:c5:d7:
         07:18:cd:1b:53:c8:5d:d0:04:a7:aa:f9:95:07:a5:ea:15:ea:
         4a:8b:69:56:6b:af:4e:63:6e:d3:87:ee:24:06:3d:9b:cf:0b:
         0a:19:dd:5b:ea:c2:8a:ed:a5:24:61:68:b6:85:f9:22:91:f5:
         c4:c6:0c:d4:c6:27:6a:b0:20:85:8f:39:c8:75:ea:92:df:15:
         12:4b:5c:85:ed:3e:2f:f7:37:91:83:63:38:a9:15:34:e9:42:
         65:da:af:06:01:c8:ed:75:90:ce:26:86:e1:54:84:18:04:f2:
         45:b4:7c:c3:9c:b0:53:9d:bc:b7:12:4a:93:95:48:8d:fb:af:
         b3:56:27:34:4b:26:a1:16:24:37:01:da:5b:37:d0:5b:a6:52:
         3c:ff:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----