Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File:                     ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier:          mzdEEdhQJWYtcSAEgutaI+hJZq41XcgNw11CMZBs0Kg=
Subject key identifier:   32:63:11:86:18:22:48:7B:16:1A:CB:FF:4A:09:50:F4:DB:AA:EC:59
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer:       /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial:       01962E61B1AAF4026EC62FFF6243714962D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: 0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa (hash: 9RKCNhJsqijEbBv8dV32/+CAVglgcAVrqc5Rx6tHl+s=)
                          2: PrLRWGrkGlOz391B_d1bhvHtRdM.roa (hash: Zq1F0wSxITxrY6z9+vuv+6+JvubiotTrHBEnZAFhoq4=)
                          3: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: fKTHVLcaxUakDn3K2gaeRcAvAHQERxFUrjUDXyVsnHI=)
                          4: d-rt9f-dKC8oZEWyOv7rd6kbEo8.roa (hash: K8bXuYuwS4X0pfixId+iunQp5n4hsy6zV6Ye+pRdYtA=)
                          5: yIea70mz68MEWf7MSufqGinRRfw.roa (hash: C1KZ935qcqSwGSABodTKIPq8sxOye3X7esfEPyg6lGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b1:aa:f4:02:6e:c6:2f:ff:62:43:71:49:62:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=326311861822487b161acbff4a0950f4dbaaec59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:d0:83:ee:00:49:9e:81:b9:98:14:63:dc:
                    03:e5:18:e9:81:af:e4:bb:9b:a7:7d:78:98:b6:70:
                    b1:f3:b6:76:18:f8:13:91:b1:e3:0e:e2:f9:26:8c:
                    d6:c5:f2:c4:47:ae:a9:b5:5a:01:ce:72:8f:1a:84:
                    97:be:78:31:cd:9e:cf:5e:e5:cf:de:16:0d:70:b9:
                    31:fc:7b:14:42:66:b8:95:a2:9a:09:f8:88:1c:0b:
                    2e:a6:ea:8a:cc:48:30:a4:34:eb:6f:9b:a5:fa:e3:
                    87:fb:88:9c:b7:c3:c0:ba:77:5c:75:bf:64:65:9a:
                    c3:bf:df:6b:2f:77:3d:a1:27:cb:bf:44:66:3a:0a:
                    7a:c1:bc:9e:cc:0f:96:bb:a7:ef:16:26:c6:9d:9d:
                    9b:04:11:24:65:e7:25:77:93:fd:dd:1a:46:88:28:
                    96:7a:e4:3c:e3:83:5b:74:ef:26:e4:ee:5d:77:be:
                    60:e3:c1:ba:6d:33:3e:c5:d6:2d:a8:d6:33:8c:a5:
                    90:5d:bd:ec:09:d1:04:c1:1d:35:75:39:ee:1b:1f:
                    bc:86:48:e8:81:af:61:8c:01:69:af:a6:b4:99:cc:
                    6c:b2:eb:8b:ac:10:7b:40:4d:17:19:28:68:8b:62:
                    54:d7:27:25:b7:0c:02:32:80:d2:fd:2d:d2:25:b2:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:63:11:86:18:22:48:7B:16:1A:CB:FF:4A:09:50:F4:DB:AA:EC:59
            X509v3 Authority Key Identifier:
                keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9b:1b:68:51:17:94:30:ac:27:bc:ec:db:62:ef:67:05:3e:
         be:e6:34:66:51:19:17:b5:62:4c:3a:1b:4f:8b:27:a6:f2:66:
         20:ff:c7:ae:e8:29:cf:c0:8f:36:d9:a3:7f:90:db:34:3e:c0:
         1d:59:4e:49:8d:a4:18:93:ff:df:8a:2c:c9:6f:b3:7c:d3:f8:
         58:3c:42:b5:d2:47:77:6d:6a:b1:a1:87:1a:4f:ac:7e:12:5e:
         be:25:18:c7:ea:3a:ba:ad:43:4f:82:ef:b3:b1:55:41:f8:c9:
         a1:3a:54:77:3a:f4:ff:b2:51:ae:34:60:4f:94:d8:1c:cc:7a:
         36:87:36:92:80:33:c3:94:63:c4:fe:bf:77:8b:df:4c:f2:80:
         da:04:36:b7:d3:b2:3c:64:59:c4:45:fc:af:fa:71:da:94:d7:
         a8:d5:f4:76:e3:b4:c5:96:65:78:c0:a3:7c:75:5b:f4:ba:7b:
         ff:38:b2:16:a0:e8:ee:69:ce:31:bf:6a:b4:ff:63:95:86:f4:
         5f:c8:09:28:7f:f1:bc:90:d8:8e:08:1b:60:ab:5c:09:ec:a8:
         92:7a:b1:09:62:89:2c:ac:da:cb:d0:45:3e:d8:8e:b0:3d:af:
         7c:7a:3b:f7:54:b6:15:7a:74:32:89:0b:55:95:c9:2f:63:34:
         a0:c1:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----