Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
File:                     b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json)
Hash identifier:          NXkZiBgrobWaIgtbgBzRmAmMi5welphyl87PxQRAx2I=
Subject key identifier:   50:DC:26:68:13:EB:84:E2:AE:B8:E4:FF:2E:47:4D:BA:1A:86:E7:41
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Certificate issuer:       /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial:       01962FAB99D2FEF78A5B39F4162856758126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
Manifest number:          05D3
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (hash: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=)
                          2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: i+XEqbPfZqNVhtM6mq8RFZQuqkzjZEZrWmRGct/WnlM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:99:d2:fe:f7:8a:5b:39:f4:16:28:56:75:81:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=50dc266813eb84e2aeb8e4ff2e474dba1a86e741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:d8:b7:b9:08:d0:c2:e7:fe:64:ce:83:fd:
                    0d:94:40:5e:95:ca:2c:f9:d3:09:8b:7f:7a:4f:a1:
                    30:d3:a7:e4:44:76:fd:f3:35:96:d3:8a:88:9b:e8:
                    ba:e6:a6:58:d0:74:86:8a:0b:ba:e2:6f:75:7c:7c:
                    39:bc:86:41:64:51:71:cf:14:5e:f2:50:30:63:7d:
                    0f:07:59:1d:cb:b2:08:b5:5b:1b:ee:b2:3f:d8:a0:
                    3d:58:01:94:10:e4:27:87:3d:7b:20:6a:7f:9d:ad:
                    97:53:e3:f0:29:f4:ee:5c:da:98:a6:2b:54:7c:9a:
                    6f:79:04:88:92:25:e7:5f:ec:16:68:55:eb:a8:83:
                    15:a2:f4:67:2a:22:c9:e8:ef:f3:a2:af:97:0e:1c:
                    65:b0:a0:41:89:a5:de:bd:d2:1f:40:36:e2:9c:2a:
                    2f:f7:1f:c4:49:0c:bd:b2:5a:29:79:d8:f0:e6:f8:
                    d6:9e:42:e9:d8:b1:08:3c:ad:89:5d:ab:92:1f:f7:
                    e2:b9:ee:37:96:05:ef:0e:9e:f1:28:52:9d:36:9d:
                    a6:55:5e:60:7b:ae:69:61:95:ef:c4:87:1b:7b:30:
                    bc:22:0a:a0:5c:a5:74:a0:61:c5:27:8e:f0:44:e6:
                    e7:20:5f:77:66:e0:93:72:9b:60:ce:b0:59:a6:86:
                    ea:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DC:26:68:13:EB:84:E2:AE:B8:E4:FF:2E:47:4D:BA:1A:86:E7:41
            X509v3 Authority Key Identifier:
                keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fa:b9:07:01:eb:38:e3:3c:00:d5:d1:6d:8c:bc:1e:5f:0e:
         da:d0:d6:66:2c:85:cb:fe:50:b6:d3:a2:a4:4d:b4:b0:06:c8:
         75:96:88:ad:6f:d3:9a:b9:ff:dd:09:30:e2:0b:35:66:d0:e6:
         89:32:85:33:f8:3c:b7:37:d0:f5:18:d3:d1:c9:d6:27:5a:d3:
         c7:46:24:e7:26:5b:cb:c5:f6:f1:e6:19:69:28:0d:23:59:0e:
         10:1a:e3:ec:ad:24:2d:87:c9:40:92:72:6e:3f:15:ad:3b:8d:
         f5:8e:c8:ec:34:a9:fe:89:28:b6:b0:8d:06:8d:5b:75:b0:bf:
         dd:09:07:86:69:d8:2f:97:27:0a:18:67:77:83:41:b0:a7:d5:
         5d:a3:bb:f8:5f:02:e8:62:24:51:73:d3:e5:4c:e7:d6:48:74:
         7c:42:a8:6e:15:11:34:52:7c:f9:00:58:7b:9e:c0:27:a0:b5:
         d9:fa:6f:bb:82:0d:c9:b9:ef:22:05:cf:fa:43:e1:b9:72:2a:
         74:6e:63:e9:11:a9:34:4e:d5:77:64:57:9f:08:ac:1e:e2:dd:
         1e:65:7d:ba:85:b7:3b:69:aa:04:8a:f8:91:a0:48:b2:01:ae:
         15:f5:f4:32:8b:41:56:de:41:ab:d4:73:63:bd:8f:d7:24:6e:
         67:c0:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----