Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File:                     ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier:          wkxqJohcVu2c57W54sU1bdfx0UyR4AUP4Zn5/SO/CY4=
Subject key identifier:   EC:C5:88:D2:6E:A9:24:82:E1:99:F7:51:98:5D:FF:81:B9:1A:85:FC
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer:       /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial:       01962E995FD1BCEF0F18014ECD01B78C7527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number:          0629
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: xYepuOTMpPXUHMydIBIk0iEhGKfHIKSAW7AiMS7ggAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5f:d1:bc:ef:0f:18:01:4e:cd:01:b7:8c:75:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=ecc588d26ea92482e199f751985dff81b91a85fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:33:88:f5:11:26:4e:44:c4:18:6e:95:6d:
                    78:dd:95:ea:b5:c7:90:ec:f2:22:75:65:8d:df:61:
                    da:50:5d:00:e9:f2:82:a2:56:bb:96:27:57:b7:0b:
                    08:63:c8:63:a4:ba:7e:16:cf:16:d5:7b:ed:76:94:
                    ff:be:bb:45:4e:33:ab:da:4d:60:28:f3:85:66:20:
                    f0:4c:96:37:49:cd:8e:d5:41:ab:bd:ad:09:48:79:
                    e7:e7:ed:30:d5:66:78:ee:6b:c2:98:b9:81:a5:9e:
                    04:53:9b:81:bd:1e:82:ef:23:33:91:f8:be:a0:b3:
                    a8:5f:cd:d9:0d:4c:c6:9b:1b:fd:cd:ce:55:15:d3:
                    d0:07:40:d5:54:6a:95:98:ef:85:f0:a5:90:3e:e2:
                    44:95:e6:83:df:2c:84:42:38:aa:65:ac:99:e7:cf:
                    9d:b3:e7:7b:81:ed:5f:d9:a0:1d:5d:7b:6d:7e:bc:
                    64:95:bd:ac:bc:82:11:ad:a4:ff:14:1b:7b:62:c5:
                    59:b3:25:38:4b:4d:64:d1:24:d7:d1:7b:07:d0:bb:
                    90:68:d9:f6:44:ae:88:99:81:9a:ff:4a:fa:65:0e:
                    e2:ba:4b:64:36:0b:05:4b:47:e2:44:0a:f0:11:5f:
                    bb:b8:48:3b:e6:b0:33:99:14:f4:26:4c:7b:9e:a6:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C5:88:D2:6E:A9:24:82:E1:99:F7:51:98:5D:FF:81:B9:1A:85:FC
            X509v3 Authority Key Identifier:
                keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:58:19:a4:05:04:a3:88:0b:65:bb:6d:c8:f9:5f:18:32:
         77:61:8b:48:9f:60:47:f0:36:a9:7f:49:e4:f2:78:9b:40:9e:
         00:58:c6:21:10:b6:0d:c7:c1:d1:ff:90:55:d1:ae:1a:88:aa:
         53:6f:97:1f:20:92:4c:7a:ea:c0:5e:97:c6:f8:e2:41:cd:01:
         22:33:81:1c:22:bc:af:8e:84:68:4f:2b:e9:43:b3:5c:4a:21:
         d2:ca:aa:c6:1d:19:ff:51:fd:04:3b:5c:c4:bc:a0:2c:ce:a6:
         87:75:18:7f:d7:25:22:af:67:af:65:54:1b:22:f1:1f:59:9e:
         bc:ea:1d:ed:47:ba:d4:c5:1d:ce:2d:8a:d0:52:1c:a4:b8:4e:
         98:70:34:33:30:86:18:aa:93:0d:03:dc:ef:c2:b6:6a:a8:98:
         51:0c:ab:61:2c:4f:26:81:b0:b1:4b:c0:92:d6:b4:89:38:2d:
         cd:34:13:bf:d6:81:89:54:6e:ac:f3:66:f9:cb:ba:ef:a7:dc:
         ef:86:b6:c9:d5:d2:0a:9f:9a:b5:92:a7:5f:ac:0f:a2:d5:3a:
         ae:ab:86:18:0a:e7:cd:69:02:bd:13:0c:88:2d:ca:9f:55:3c:
         24:6f:45:1f:5b:26:3b:88:f5:d6:b0:60:d4:2d:42:77:a1:78:
         89:76:ad:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----