Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File:                     ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier:          ufLdhlWMdIe0VUOZmhiFwQ+lRM4M80A2Q6m+S19NVLg=
Subject key identifier:   62:B1:F5:B7:25:AB:10:12:FB:B2:B4:3D:1C:DF:87:4C:8F:34:91:47
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer:       /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial:       01962ECF73287E38EB3185EDD5BCA704FBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: swWa9NTrjJJ26kzCMrTaNeGigtUb9TsGGijEqIqjCOU=)
                          2: yg4sGgC5KBzP9wrpfNuvhuojK2M.roa (hash: e1y06aA1s62UqKwjDXe9gE31sK3hItmKrNoYCjTILV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:73:28:7e:38:eb:31:85:ed:d5:bc:a7:04:fb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=62b1f5b725ab1012fbb2b43d1cdf874c8f349147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:f7:b5:cb:34:f1:03:96:53:09:80:bd:8d:
                    94:e7:99:70:7f:f1:aa:d0:f8:c5:b8:c7:31:f6:d1:
                    09:a7:85:f6:3f:d7:2f:6e:6d:16:0d:77:6a:f5:3b:
                    c2:af:da:54:d3:57:51:52:80:5c:9b:8d:e1:86:73:
                    96:90:1d:83:19:ad:97:6c:c6:13:0f:43:40:d7:0b:
                    a9:29:4a:3d:fb:80:03:e2:f8:81:f4:5d:65:77:02:
                    31:3d:bb:9b:8c:fc:8c:9b:41:fd:00:77:e3:95:7e:
                    99:8d:ba:f3:a3:4e:a1:6f:b9:49:50:95:ab:91:ed:
                    1d:bd:2f:53:66:5e:28:d7:ef:d5:57:1d:28:38:95:
                    1e:b1:e9:cd:d0:54:51:08:d7:0b:39:11:27:d5:19:
                    03:86:3a:da:01:29:e2:1b:5e:21:51:6d:2f:70:88:
                    a8:97:03:ac:5a:df:ba:8c:90:a6:48:3c:09:66:14:
                    d3:16:2a:aa:26:2d:ba:e4:bc:7f:66:88:8e:cc:57:
                    f8:39:67:cc:b1:75:c9:d9:12:61:e3:65:d7:1e:ba:
                    a0:30:6e:93:71:da:f8:ec:46:96:8f:ea:31:25:dc:
                    2d:d8:a8:c2:16:5a:74:d9:e1:84:f3:94:08:57:2c:
                    b6:de:13:a7:92:c9:f7:62:2a:b0:84:ff:1b:ae:ab:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B1:F5:B7:25:AB:10:12:FB:B2:B4:3D:1C:DF:87:4C:8F:34:91:47
            X509v3 Authority Key Identifier:
                keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:79:68:f8:9d:78:e2:55:67:a4:e7:28:db:31:b1:55:07:73:
         53:8c:47:12:93:ba:f5:76:01:75:08:c7:e7:8d:dd:8c:ca:2d:
         5d:df:f9:99:f2:e0:45:bd:cd:a9:60:63:e5:82:55:73:e7:86:
         c1:c0:1b:d8:c0:1a:a9:84:55:5f:76:49:47:9c:b1:9f:9e:66:
         04:9b:64:43:52:39:97:61:42:05:71:04:0b:bc:1c:aa:3b:e9:
         c3:de:a9:ee:64:f7:f6:48:7f:85:3e:c3:cd:ff:75:87:a8:3d:
         df:33:35:b4:0d:a5:be:ed:43:88:02:27:6b:93:ab:de:e7:3a:
         8c:ea:be:af:10:fc:30:e3:e9:e7:d3:90:57:8a:ee:62:1f:a4:
         69:f1:07:d5:43:75:1b:ae:db:56:da:e2:32:d7:1e:17:e5:da:
         b1:3c:19:0e:df:c2:ca:dd:b3:17:e1:9b:1a:73:34:67:a1:89:
         fa:f6:16:eb:cc:a9:1b:a8:34:f8:8c:71:29:5d:f5:c9:9e:11:
         c5:00:2b:5e:de:1a:61:9e:df:3a:32:04:56:c3:e0:d2:7d:17:
         dc:d1:b2:08:69:02:2e:2d:12:ba:96:58:25:a4:75:92:a9:71:
         88:8d:c8:5f:5d:b6:ae:e2:7a:0f:b0:69:de:61:8e:18:34:3d:
         42:e6:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----