Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File:                     zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier:          Cnwq5YYBBXY6m2iNXe38fTLvxt1IJiuMZufYSlv+NuA=
Subject key identifier:   9A:EC:70:05:19:D6:03:2E:53:11:5D:95:47:F8:5C:1F:52:69:23:2E
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer:       /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial:       01962E2B3A02939090ED77FF6880E96C3E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: 3UV0tf4TpPvOJSDiaLYyYXtXVvM.roa (hash: 91M1HXlX3TdwneLYlb0DmYCeKKtHfStsh7Dj5kd2gPQ=)
                          2: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (hash: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=)
                          3: lmY3OHV06iQ2okHJC_xew_5c0LY.roa (hash: VAAXf3sc2kIcjjslDb0B8KOFlo5MNyl0zFRFKzuk/g0=)
                          4: r_1BD4QIwyD4kFSgnJUFtmINdFo.roa (hash: analV2m8+Aw9Y/v6KpT1JDqGOt2ZN0tCbqPYX5Hv+/c=)
                          5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: qjJ79sLaH18GHPbU+j+pYoZdFierV1FTjJtOvwMK71U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3a:02:93:90:90:ed:77:ff:68:80:e9:6c:3e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=9aec700519d6032e53115d9547f85c1f5269232e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:52:b2:a0:65:5a:f4:2d:37:bd:2a:7f:c2:
                    76:a6:df:fa:87:05:9f:2e:d9:29:90:75:42:cc:78:
                    df:28:a8:1a:c4:69:11:00:9b:83:38:d6:21:c9:04:
                    01:b9:43:39:d2:0a:fa:dd:fe:6a:70:28:0a:36:8b:
                    b2:b6:12:c9:21:8b:19:c1:91:66:57:ad:7a:3f:f2:
                    2b:ad:b9:a1:06:87:85:da:a8:af:74:68:fe:8c:54:
                    73:88:b8:08:6b:99:94:6e:3c:76:3c:ad:e7:61:1d:
                    b5:2e:58:32:89:b9:cc:b2:03:03:8b:ef:c2:4b:4c:
                    de:e1:e2:45:01:10:44:f5:ec:83:6e:b0:fc:4e:2c:
                    70:f2:df:71:b2:86:70:48:ea:75:54:41:1f:70:55:
                    55:7c:1d:c6:6f:2d:50:9d:25:88:87:f2:f2:95:03:
                    27:6c:eb:95:4b:63:4c:3c:59:74:c4:12:15:35:30:
                    6f:65:86:c8:94:59:20:8e:90:64:69:52:ce:30:ea:
                    d0:0e:0c:ad:9e:19:f2:4a:02:e4:4c:4b:fd:ad:a8:
                    38:be:c5:5e:bf:95:4b:ba:4d:f8:f1:2e:d5:98:39:
                    37:8d:c5:ad:a1:80:6d:00:eb:23:6a:c6:ae:5d:00:
                    d9:19:06:40:45:58:4a:40:e4:80:67:5a:33:9b:b1:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EC:70:05:19:D6:03:2E:53:11:5D:95:47:F8:5C:1F:52:69:23:2E
            X509v3 Authority Key Identifier:
                keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:13:60:fe:7b:14:50:86:97:64:d0:1d:a3:6a:75:8b:df:b3:
         d7:a5:7d:df:9f:10:7f:77:f8:d5:3d:ba:fb:28:ae:cc:b1:b6:
         91:05:d2:94:34:64:e1:ce:29:d4:a3:9d:f7:66:97:82:d0:ff:
         20:b3:9d:97:f3:e6:10:92:39:70:7e:ba:0d:31:52:b1:01:c2:
         9b:d8:f5:7a:91:7a:0e:cb:25:3f:92:37:43:69:66:72:0c:ba:
         a0:d6:ba:ea:59:48:14:73:5a:4e:6b:d3:9f:cf:35:81:34:e5:
         40:37:d3:55:a0:f0:e7:df:2e:47:32:eb:eb:2b:3b:6f:0b:cc:
         c5:16:80:c1:45:60:3c:11:24:b7:15:d7:21:16:c2:2a:8d:82:
         04:a1:79:7b:62:2d:dd:c0:4d:ce:03:55:64:7d:18:8c:3c:d6:
         ba:0c:ea:0a:b6:e2:81:d8:b2:4c:0f:05:44:24:69:a3:d7:52:
         d6:bb:ec:41:a6:48:15:28:41:a6:06:85:42:03:dd:d4:38:ab:
         78:1b:1a:b2:db:54:58:a8:e1:6f:f9:4d:33:c2:86:a9:4f:90:
         24:a6:88:b2:28:7c:67:c1:a5:53:d3:95:1b:82:31:13:cd:a1:
         4b:1b:9c:af:b9:8f:d3:ce:7f:a0:3d:6e:84:29:e4:27:31:90:
         fc:0a:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----