Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File:                     ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier:          9BGWwpyKzPR2dTJpUQlwfjzVdP3R+7ot/Fs+f/AAJZY=
Subject key identifier:   07:47:67:C6:76:C2:DF:87:F6:00:D9:9C:B0:26:03:03:E9:B0:13:1C
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer:       /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial:       01962F747AFF1533496B84FF770491A42551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number:          1251
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: 3yN06FMESOBB7E3A7w16x6MYU0RyjP+L5yDHS6G3Ohc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7a:ff:15:33:49:6b:84:ff:77:04:91:a4:25:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=074767c676c2df87f600d99cb0260303e9b0131c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:0f:db:51:0d:54:d3:7e:51:9e:95:7c:6b:
                    85:6f:0b:0d:ec:5b:03:01:8b:c1:ca:6b:8a:db:8a:
                    e5:33:21:7a:dd:7e:01:e6:df:ee:e2:39:d5:0a:10:
                    8d:80:f5:18:b5:81:48:b7:b5:f9:b0:4d:2c:ce:6a:
                    00:48:c5:d5:2c:80:26:f0:a2:ed:1f:b7:18:c5:cb:
                    c9:64:e2:e1:6b:f5:6d:f0:72:e1:4a:60:43:f4:f0:
                    a3:04:7f:2a:60:e2:f9:04:16:33:ae:76:aa:67:fa:
                    df:15:84:cd:7b:61:87:46:42:15:b2:c9:80:a2:a9:
                    d9:40:ba:08:c8:88:34:2c:55:89:1a:8e:7d:d6:41:
                    55:a2:8a:1c:7e:20:e8:1e:31:5a:f8:ba:30:c8:e4:
                    65:93:5f:b9:02:ae:2b:15:1c:44:4e:34:d8:dc:3a:
                    e7:a5:52:70:ad:9c:92:4a:26:57:3b:d7:27:f3:ac:
                    ec:82:27:6a:29:4f:1b:40:5b:31:26:44:5b:99:14:
                    5e:e7:54:85:93:88:78:74:7c:5c:aa:25:3c:15:38:
                    ee:93:c4:90:87:08:96:1d:6d:dc:23:48:8d:37:bc:
                    29:18:ee:dc:82:4f:4b:25:67:df:19:70:68:7e:be:
                    66:22:ba:3f:1d:b9:c5:be:ac:c3:51:29:80:ba:80:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:47:67:C6:76:C2:DF:87:F6:00:D9:9C:B0:26:03:03:E9:B0:13:1C
            X509v3 Authority Key Identifier:
                keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:7f:0b:36:a2:40:85:b7:a4:d3:7f:23:5b:1d:a7:28:93:
         8f:7e:4a:53:2d:f0:0e:4d:30:7e:43:06:1d:e8:e3:63:e8:3b:
         ac:a3:91:79:a8:c7:95:e3:8d:71:1d:0f:59:65:40:a4:45:21:
         15:d0:cf:77:3a:60:99:bf:45:5b:3c:6d:0b:11:14:1c:50:a0:
         b7:49:34:1e:99:2c:6d:f4:f2:c8:7f:f3:e4:9c:59:cb:63:83:
         a8:40:f6:94:2b:a2:34:b0:b2:8d:cf:76:81:d2:33:c7:a4:59:
         56:7c:b9:33:f7:5e:4c:ba:1b:af:81:06:a6:f9:e5:47:54:b0:
         18:e9:5b:2f:54:4a:2e:5d:b0:6e:76:42:30:65:bd:8f:82:11:
         fa:5b:98:b2:9c:ed:41:57:7f:b4:6d:e1:e2:bd:e1:4d:c4:1f:
         4c:02:9b:d9:d1:16:43:af:b5:80:5f:6e:5b:62:72:20:30:98:
         88:c5:5f:30:ae:90:fe:4a:60:7a:71:74:18:3b:04:57:dd:4d:
         60:79:a4:1b:2c:d4:3d:30:4e:3c:39:89:6a:98:73:13:14:51:
         ee:07:26:39:38:29:03:77:80:a8:54:82:46:1b:cd:04:ed:70:
         3f:e5:76:6c:13:a4:8d:0f:7a:e2:73:ed:a4:d2:37:cf:79:74:
         bb:57:28:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----