Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
File:                     Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft (raw, json)
Hash identifier:          DBicbX8nzqT8hwKUb73NeUNmLDmLOXktSRcz1AVf8O0=
Subject key identifier:   86:9D:DA:A8:9E:06:01:75:71:2D:89:87:01:38:3D:EF:72:39:BF:12
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Certificate issuer:       /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial:       01962E2AFAA5E30669B02A90AA684C7C2A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
Manifest number:          11F0
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: L4h95g97hPav_sLi8oU5ekfgF0c.roa (hash: gzwtuotOybzEB9lulxkeHjwR8xKOZWJlJKeZJPHVfuA=)
                          2: PoOOtUJXWSIrEDf1Xj5Z3VDMHSE.roa (hash: xLcUbAcJyMHzQNbU8ncdTmCAmnGI9JLzaYaEQOKQswQ=)
                          3: YUnFkerPf_tC9lIXfmeJMH6YBzU.roa (hash: /JxLnX44gj+6WYgNCgzFGwP4v1yZUybgTY/uSoStij0=)
                          4: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl (hash: K9dcJoMO71C4oGbNoq+LSVzvtf5fAeHf3w6pu2+WW80=)
                          5: fOsTWD5Ar1YZxa1P3Pq5mxy5-1c.roa (hash: Dkn0j1n45E5x1EWMxBbv2nQa8t9BDN0AoTeGlR/FbFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:a5:e3:06:69:b0:2a:90:aa:68:4c:7c:2a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=869ddaa89e060175712d898701383def7239bf12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:a8:18:e9:16:b3:d1:a8:ec:24:04:02:66:
                    7c:63:27:00:70:c7:92:3a:f3:49:40:9a:d5:07:9b:
                    03:db:74:79:f8:9b:63:6e:73:01:1d:c4:b4:f0:63:
                    16:08:dc:df:95:fc:b5:36:ba:d5:b7:a6:c3:1a:65:
                    df:0f:f4:7b:e2:34:89:31:3a:23:f5:5e:85:0f:60:
                    b1:b7:b9:75:9c:cd:e4:87:57:ee:04:5f:fa:13:68:
                    44:eb:95:0f:33:f7:d9:63:ea:56:38:7a:14:1a:30:
                    21:c4:df:4e:b6:8b:e4:63:92:f2:b2:a6:36:86:5a:
                    3f:cd:4c:cf:41:cb:53:ee:c2:71:ef:79:22:1a:c5:
                    ab:10:26:68:28:1e:7a:cc:50:8e:e6:22:c9:65:d3:
                    28:f8:94:a2:f6:99:a1:01:2e:f3:6c:ba:f9:90:10:
                    ee:ac:37:d7:bf:98:df:e7:13:a7:9c:ad:73:43:30:
                    40:8e:f7:2a:18:65:40:c0:d9:b0:7c:31:b4:48:f3:
                    3e:90:d1:51:88:9d:02:41:fd:f0:3f:6a:cc:ed:c9:
                    0b:48:89:88:1d:aa:5a:9a:a8:e8:c0:21:d9:22:67:
                    c1:a5:e7:56:52:94:43:2f:4d:40:2b:63:67:5e:f3:
                    46:46:8b:51:0d:af:b6:f3:17:69:db:44:73:14:4d:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9D:DA:A8:9E:06:01:75:71:2D:89:87:01:38:3D:EF:72:39:BF:12
            X509v3 Authority Key Identifier:
                keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e0:28:d7:6e:c6:cf:39:23:85:d3:80:96:19:4b:96:25:f9:
         bd:b3:a6:b8:9e:7a:57:3d:19:5c:b7:20:6f:dd:41:35:a4:ca:
         6f:b8:64:67:b5:bb:31:74:1b:9d:36:a4:e4:b1:bb:98:b7:be:
         9a:8c:97:7a:8e:d5:66:12:ef:bd:a1:ee:68:96:a2:84:3d:21:
         57:01:73:b4:dd:41:d1:b9:bb:2f:b9:c9:51:59:ca:6a:ce:56:
         35:6c:c1:1d:05:7d:47:56:20:f3:b6:53:d9:ec:d3:19:43:13:
         ac:49:f7:f2:0e:40:f4:6a:fd:c7:1f:33:26:34:15:84:9f:c8:
         39:28:5d:5d:2f:da:61:99:0b:7d:63:e2:e6:48:0d:a6:6b:44:
         1d:81:5d:56:6c:6d:2a:3c:3e:87:c4:6b:00:5c:fa:4d:85:10:
         6e:4f:01:96:fb:43:ab:b0:95:bb:4f:fd:63:a3:68:5c:32:09:
         10:42:bd:9a:28:d0:26:4e:34:94:6a:52:a4:f0:57:d2:85:c4:
         49:54:ac:0e:0e:c6:cc:4a:f0:56:de:26:e4:64:a7:73:53:fa:
         f7:d2:d2:d3:86:af:87:85:1a:98:0b:c9:fa:da:b7:59:bc:d3:
         2e:e9:53:d6:0e:9e:45:c5:f0:d3:a8:5d:7f:6f:42:65:c8:eb:
         df:2a:5c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----