Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File:                     ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier:          vl/LSagcjg5FZoEiJtRlWn9wYaHkFivZUS8vqmNdjmY=
Subject key identifier:   A1:04:20:05:A6:B9:51:63:78:B1:6E:FB:78:1C:7D:6C:57:EB:40:0B
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       01962DF44C603F98EBFD5E558DABDB359C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number:          0437
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: 1-P9YegJEgTTrNaAEU3IIuc08RmY.roa (hash: VMR860mh90RZ0uHCWx/O5Sa1yv7ih7Q2heb0CHOeN9M=)
                          2: DeGtb7yujTyTVa3OH4DyZgT0oXs.roa (hash: nw8jgAJXgkkRIoQf1v0bYUYfpASn5VshZprEj2zsrkk=)
                          3: EMVR9NYVRq-EMjxpptyq2L_gJw8.roa (hash: ae6WIIHau+j7Ux1GHG57mV6lm8wtBV6sLPHMj084L2M=)
                          4: GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa (hash: Gjo03csZv216WbwMAfrV2mPHc5TstpRZcbzipd7HL+w=)
                          5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: jeePTORwaj+4OJvM69RxOqNjh5gVye6DPUsklijQiWo=)
                          6: kNJTv0u8R3n31XhM175qS3qSPYc.roa (hash: yEcxvFp6oLKPqomZkL6wGasrZzjv/ubXMRsnyY1hRmM=)
                          7: oBmDtOMzv9uYHMZKHsP_7TZtJDo.roa (hash: 1TEsgDEf5icrK07cJlsmMerQGE88qLGKElgw/ofxA2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4c:60:3f:98:eb:fd:5e:55:8d:ab:db:35:9c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=a1042005a6b9516378b16efb781c7d6c57eb400b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:6a:f9:9c:7a:f4:eb:d7:90:e8:cb:51:6b:
                    2e:cb:32:29:aa:a3:4c:5a:51:84:ff:b1:6b:80:39:
                    a5:45:bb:df:90:9a:77:b3:b0:20:2d:7d:fc:ec:a3:
                    0d:9c:38:93:25:9c:a5:98:2c:df:51:b3:7f:62:e8:
                    84:a5:5e:f6:7a:40:8c:73:c5:18:9e:34:62:14:fa:
                    3e:98:eb:f0:55:3e:cf:48:66:c9:f8:e1:70:34:37:
                    45:da:40:4e:1f:91:57:e4:fd:a9:2d:45:e2:21:1b:
                    a8:b4:3b:8a:17:89:4f:dd:76:75:f1:ee:7d:78:04:
                    57:8a:bb:8a:7d:a5:ab:40:7a:b5:98:96:11:9b:e8:
                    12:b6:d8:60:ef:27:ec:39:fc:17:fd:ab:ff:f3:ea:
                    ce:81:55:8e:cd:a8:ac:7a:77:6b:8d:d1:c0:46:59:
                    22:91:ec:2a:d6:7f:49:16:92:14:ca:31:4b:24:0c:
                    3b:ef:e7:62:f8:55:5c:d5:69:a5:41:f3:4a:1c:82:
                    c7:d8:53:6f:bc:9c:5c:4c:5d:df:2b:64:23:f9:0d:
                    2a:93:c5:6b:26:ab:33:38:73:f6:7f:67:83:1b:f8:
                    55:db:16:45:5f:44:04:bc:ab:ee:9c:18:f5:79:e5:
                    de:3d:8b:37:43:8a:86:59:42:da:e9:11:63:d6:8c:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:04:20:05:A6:B9:51:63:78:B1:6E:FB:78:1C:7D:6C:57:EB:40:0B
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c2:62:2d:2d:f8:80:42:18:66:47:45:ed:a1:ae:c4:03:52:
         32:e7:68:ea:39:32:ba:9e:33:e5:64:6f:c0:9b:19:1d:98:a4:
         f5:e6:ca:2c:3d:ee:43:bb:14:8e:d1:e3:46:47:4e:2a:a7:73:
         af:60:ef:e1:9a:78:85:f4:43:16:98:29:58:83:39:62:38:f7:
         98:65:58:02:08:a8:b3:41:5a:5f:d2:76:3d:8b:ea:a7:a6:e3:
         59:3b:29:86:21:f9:c1:4b:f6:70:8a:68:5f:9e:35:5c:65:18:
         c2:d1:07:49:c3:85:67:85:19:a0:00:60:13:26:1f:94:3f:0e:
         8a:06:1e:ed:43:30:2d:4c:2a:65:ab:6d:dc:51:35:4d:44:68:
         ae:aa:d4:d0:14:a0:6a:b4:1b:f2:b7:db:5e:34:23:fa:16:56:
         a2:96:99:90:95:ca:09:d1:12:be:5f:cc:fa:b3:7e:f7:92:60:
         c3:93:9d:10:eb:f2:4e:a9:63:de:5a:5f:52:7c:30:43:bb:c4:
         07:dd:2b:04:8c:58:ef:6d:b9:43:97:06:1a:f9:70:56:fd:51:
         8c:e5:3c:84:ef:d8:b9:08:00:3c:69:6d:28:da:e4:d8:97:c4:
         db:15:9c:dc:8c:12:35:7e:9d:97:01:ee:3e:7e:d3:d8:76:ef:
         9f:bf:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----