Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File:                     ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier:          fhzdD5YNG0CtxdehHu0bf1HhsC+ItifImu0RqAjQ71g=
Subject key identifier:   50:BF:33:C6:53:8B:C5:3E:BC:34:42:DB:CA:B8:4D:F7:17:41:C0:48
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer:       /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial:       01962E993D339DF0CF8588C7BF19735FCD66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number:          0548
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: 8+XaSQi41JZs8ugWqzuSeRiSpQ1bxXx6KZdXw/lY7EE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3d:33:9d:f0:cf:85:88:c7:bf:19:73:5f:cd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=50bf33c6538bc53ebc3442dbcab84df71741c048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:38:84:d1:ae:4f:09:8a:cc:26:3b:b2:fa:
                    ab:36:18:82:90:57:bd:a1:d1:b8:b3:0e:ee:8b:de:
                    f3:17:ae:35:52:7f:23:0d:bb:98:7c:73:0f:a3:60:
                    1a:7c:10:9d:f9:69:ca:c2:07:06:3a:99:f8:f7:36:
                    d5:e4:de:e1:f0:c5:d8:51:79:cb:72:a2:53:5f:b8:
                    7d:cb:09:0f:97:f3:a0:1a:d2:77:e5:f9:eb:87:46:
                    38:83:16:f4:da:35:f7:7a:8b:89:6f:61:6e:c3:f3:
                    f7:47:62:1b:43:dd:7e:ba:ff:aa:3b:2e:4d:a6:88:
                    48:99:c7:43:61:15:41:47:72:94:ca:cb:ee:0a:31:
                    78:e1:e8:67:89:9e:dd:50:e5:73:c5:95:6b:e7:e7:
                    ec:ed:f7:d9:66:3a:52:51:f1:47:b4:d6:a0:67:c3:
                    31:86:73:37:b0:81:9f:cc:a4:3b:95:61:ca:b5:cb:
                    b6:3c:5d:c9:b8:90:a9:05:26:97:34:ec:25:da:74:
                    14:05:11:dd:43:5d:25:7b:a0:3a:c6:ac:1c:48:02:
                    17:28:5f:12:a4:aa:e4:c7:05:89:a3:be:2d:63:f1:
                    0b:be:02:27:4e:e5:bf:6e:13:7f:50:fc:d8:b7:0a:
                    cc:6e:e6:ee:33:56:e7:5e:f2:93:b4:b7:22:56:74:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BF:33:C6:53:8B:C5:3E:BC:34:42:DB:CA:B8:4D:F7:17:41:C0:48
            X509v3 Authority Key Identifier:
                keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d9:ee:e9:5c:f1:f1:3f:21:e9:86:5a:fd:70:74:ff:75:5b:
         f8:aa:bb:fe:54:5b:da:f1:75:86:8a:fe:7a:b3:95:20:e7:79:
         bd:8c:9e:c4:b6:1b:a4:4e:ba:a9:c3:e5:01:d5:c3:6b:17:dc:
         f2:14:1e:e5:a8:92:eb:f8:d8:94:13:26:c3:95:a0:70:c1:04:
         da:b5:7a:9f:e5:9f:ae:53:07:cf:27:14:c0:0d:55:ea:56:7c:
         b2:4f:3d:7d:70:6c:3e:5a:6c:51:1d:63:e0:a2:2a:4c:cb:49:
         48:02:ad:f0:c7:2c:c9:4a:38:05:ef:96:e2:be:d7:45:4c:89:
         67:9e:4e:e0:d6:02:cb:b6:e6:04:8e:23:4e:ab:ef:e3:64:46:
         a7:05:13:e8:cb:68:c5:00:6b:5b:33:1e:29:6e:d3:17:ff:d8:
         34:ca:d3:85:0e:62:c2:ff:61:84:ef:bf:57:cf:41:fc:89:61:
         fb:21:1c:70:56:5d:7a:61:b8:77:c6:5b:39:6d:2e:39:0f:5b:
         53:53:c6:bf:39:47:84:05:fe:79:66:03:bc:23:77:18:c3:ce:
         50:8b:a2:e1:6c:e8:1a:1b:5d:0f:fe:02:ef:5e:e7:5f:ab:61:
         f0:5b:6b:ff:92:c9:9d:5f:d2:02:a4:77:ee:6e:8b:b8:6a:5f:
         a5:33:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----