Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File:                     ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier:          6l2+/G/hCTNl8slQCYAgf/ckAV5eEq8RR/g8TDGi/FM=
Subject key identifier:   EF:69:D5:B6:36:F9:2C:F0:41:67:AC:2D:CD:F4:69:E5:31:34:60:91
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer:       /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial:       01962E99291DF7C59EFC697DDE2B00B434FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number:          0C74
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: Hetd0acGcft4F4TkCZSRchEWHjU.roa (hash: DfxL/5EFMBfWrjWF+bprxAQN9pcVeRj5qm/6i9xfMgQ=)
                          2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: uriWs9sSddX8e18pWDPTZ4dNKYljDzMVu5ONC9+6Q5k=)
                          3: zBgovtm1ad-0i6Hlr99dwqaZZ8A.roa (hash: zlvsRotYH5pOPVXr3W3IYM5PD6gCr9N8XLSfPQUKoN0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:29:1d:f7:c5:9e:fc:69:7d:de:2b:00:b4:34:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=ef69d5b636f92cf04167ac2dcdf469e531346091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:cb:22:f8:c7:01:79:29:f9:fe:1d:05:b5:
                    23:89:b1:a1:d5:36:f6:56:97:eb:fe:9f:ab:61:e2:
                    67:e3:73:97:60:df:e9:d6:10:99:c6:c2:b7:64:1e:
                    be:50:b8:ed:5d:b7:8a:10:da:f7:fa:fd:ad:07:60:
                    46:f5:e4:26:73:cc:dc:8f:e2:ca:59:a4:07:6b:d4:
                    6e:4c:2c:ec:e7:ec:1c:42:bf:8d:5c:88:6e:55:22:
                    33:6d:f2:01:3a:18:41:ed:0b:ca:90:80:d6:c7:45:
                    23:1e:44:ad:52:c2:9c:e6:e3:e6:3e:c4:9d:fe:5f:
                    22:b7:f5:40:97:9b:09:6f:56:77:b9:64:77:6b:0b:
                    14:c7:b7:f3:e0:6c:b4:ad:61:e3:8d:41:7c:69:2c:
                    30:e3:cb:9f:0b:98:d8:a0:c8:3c:a7:1b:b3:a5:fa:
                    2f:c0:83:b5:ec:2e:dd:4a:0d:96:a9:74:88:d8:73:
                    6c:00:db:b4:e5:18:b9:c8:63:32:bb:ef:44:db:08:
                    5d:38:b9:d0:f9:8c:28:f3:10:19:a2:e9:bc:b0:6a:
                    64:30:c0:69:db:b1:79:9b:a3:89:c5:9c:13:fb:e3:
                    88:cb:a9:13:fe:3d:36:b0:46:de:57:1c:74:e1:67:
                    79:a9:3a:6f:60:2d:d4:d8:cb:60:a7:07:b0:c5:cd:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:69:D5:B6:36:F9:2C:F0:41:67:AC:2D:CD:F4:69:E5:31:34:60:91
            X509v3 Authority Key Identifier:
                keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e9:b3:b2:07:c0:7e:bf:e5:2b:24:de:29:fe:44:09:74:bc:
         dc:59:6a:9e:5a:5f:ef:dc:f9:41:42:73:bf:18:fb:f4:4a:5f:
         f2:2d:ec:0e:8f:2d:f6:9b:9a:a3:e9:ce:5a:45:61:1a:08:be:
         2e:1d:84:de:5c:e8:0c:fe:fc:4c:21:13:e0:b8:2e:6b:5b:6e:
         f9:6f:a7:db:32:9f:f0:39:54:b6:b2:06:92:c2:fc:bc:c3:27:
         d3:17:65:36:09:aa:35:32:32:8b:f9:fe:3b:a3:03:1d:ef:b1:
         a0:0e:ab:d3:7a:4d:71:6d:61:11:95:1b:a3:ed:aa:68:51:ca:
         0b:9b:b5:b9:f1:53:e8:b3:59:5e:54:74:aa:74:f9:8b:0d:2b:
         24:27:6c:b7:10:30:12:66:9e:31:f9:b7:1f:51:97:ed:c0:bd:
         5a:39:50:f9:67:28:7a:c1:e5:52:ec:ff:21:66:56:95:8f:26:
         93:dd:f8:57:50:a8:4e:5b:a1:12:e3:e2:f8:1c:6d:be:3e:21:
         b8:0e:d8:dc:d1:9f:1a:ed:ea:dd:6c:bc:a1:6d:ea:bb:f8:89:
         b8:b3:d3:46:8a:b6:80:0e:55:86:20:82:e0:ca:8e:cb:9c:da:
         49:13:3d:88:83:51:f1:06:19:d3:b9:01:46:87:b6:b6:5e:c3:
         cb:da:ff:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----