Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
File:                     zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json)
Hash identifier:          Lx6vQhv4/mnnbEv9WJvdhfx5ONI+5sr6xL3w2BcF7Kw=
Subject key identifier:   B7:3E:DF:96:07:11:0B:2C:C3:76:40:37:BD:A9:7A:A5:BB:54:C5:24
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Certificate issuer:       /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial:       01962FAB24926796284201F46B1BEB0F43FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: 35bIez4DE4f8IctL5QEgdASB-4Y.roa (hash: TCPS2vFGt9j3BHs+mf2M0eQppw/ELA+Rm7h4Oyv00F8=)
                          2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: cjeybD7hk87YmZEGGvEdEeZTDs6RMIpyGknecx7Z7P0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:24:92:67:96:28:42:01:f4:6b:1b:eb:0f:43:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=b73edf9607110b2cc3764037bda97aa5bb54c524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f1:a9:a4:6d:02:92:cd:50:33:86:1c:2a:2c:
                    cf:f7:96:50:c9:0d:aa:6a:48:90:2d:5b:7b:70:e2:
                    15:97:b1:d3:94:41:0b:b0:22:f8:e4:b9:47:a4:2c:
                    81:17:fc:e8:cd:4b:a0:d8:0a:ec:80:9f:12:cb:b2:
                    ab:77:b7:a6:51:b8:0e:63:64:bf:d2:3b:98:a4:cc:
                    e9:4c:49:a5:11:b3:6d:03:f4:58:63:b6:93:e8:81:
                    ff:6f:65:4c:90:db:3b:67:f9:09:b8:29:49:fe:6d:
                    df:1e:f9:1e:9f:67:57:11:42:a8:6d:fc:9f:3a:01:
                    9f:da:0d:f8:34:01:d4:7a:71:98:1d:07:0c:b9:cf:
                    77:b9:f8:cf:88:34:e2:6c:71:76:85:fa:60:f0:f7:
                    b2:8a:48:e8:b4:c2:79:8a:1f:f5:87:27:cc:e8:f0:
                    aa:e2:58:ad:07:32:9c:8f:9e:ed:6f:2c:89:74:1c:
                    fc:33:42:36:58:46:d6:f1:4a:c2:2d:90:a2:4c:f3:
                    57:2a:3d:86:6c:5f:df:d3:65:c9:60:9e:49:27:20:
                    c7:16:31:5d:21:d5:99:00:65:98:0c:f8:d9:ab:e5:
                    b8:e6:26:dc:17:df:5e:c8:4d:ee:1e:44:eb:aa:58:
                    f0:cb:bd:e3:f5:68:46:80:04:fb:11:a2:90:bf:53:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3E:DF:96:07:11:0B:2C:C3:76:40:37:BD:A9:7A:A5:BB:54:C5:24
            X509v3 Authority Key Identifier:
                keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:90:e5:01:9a:b8:3a:44:6c:8b:e2:72:91:45:2f:af:14:
         47:2e:c2:68:de:af:7f:c6:44:e9:b0:7d:ec:3a:ac:69:45:cc:
         70:2d:f9:fb:68:6b:1b:6f:3f:8d:27:83:6c:e3:49:f8:c6:a2:
         b4:50:06:22:50:b6:30:5f:fb:ad:7c:a5:97:d6:3e:ff:f4:ce:
         8c:b0:95:2f:98:86:62:9d:34:58:1b:e3:59:27:84:27:0a:fb:
         3b:fc:d9:81:b8:ea:75:b9:13:fd:5d:d3:04:02:39:e8:84:00:
         18:18:31:c1:80:d6:31:67:29:71:1a:10:63:54:dc:22:e3:ff:
         26:9d:9e:0a:6c:74:fd:72:95:0b:57:50:23:5e:22:0b:33:04:
         a2:10:7d:2c:4c:b3:a1:1d:e2:b3:9f:61:f3:58:eb:f7:7d:76:
         96:96:12:c3:b5:e2:ad:cb:9d:1b:78:d9:e3:05:40:4c:c4:f9:
         3c:3d:d4:ce:1f:9a:a3:13:fd:62:3a:41:62:9b:45:5e:23:9e:
         42:d5:43:64:06:bb:ff:68:3e:04:5c:86:75:2d:7e:cf:41:68:
         e3:1b:80:43:6c:2c:51:68:5c:38:51:fa:f0:69:36:3a:5c:db:
         bc:04:78:dc:d4:8e:d4:59:56:3b:96:09:0d:49:44:74:8d:10:
         1e:da:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----