Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
File:                     ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json)
Hash identifier:          Ex18WaGzzoxRdXAx+yTUDkr0mYBYvtz2PLGGj90wRVc=
Subject key identifier:   00:E0:CD:2D:D6:7B:A0:4C:FA:A9:8B:31:86:13:86:E6:EC:19:84:55
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Certificate issuer:       /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial:       01962F3D9737C6BEFDA79283881D05DD3BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
Manifest number:          07D5
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: GGIWecpIopyHoGkyMoac3XO9YI4.roa (hash: 9Tukemon/VB7WwBPqptslNoQ4E03a3N7Hs7ZGYVz5y8=)
                          2: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: /zmKy91/0wf88gHsCFRJVUIWTVxeeaqV6tCmCNYWx3M=)
                          3: nsiN3ofAwNQQ2mqsbegc2K4OGCU.roa (hash: uwP5VYs/JMWcCkQcnOTDFYFSosyvKY/vSk4unoVSBA4=)
                          4: okDN2Vo62Yab7_J_IfxlPOwte3o.roa (hash: ZVhneNDrAmsrpM6pDt87HbPveddbBNLv2BXaomrxwUA=)
                          5: xgHz664AQPMntc1cKGqX8uLPb68.roa (hash: L7AjuBiSLP8pLMyCXeeg/SoD465XYb8TiAmRmmGuBX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:97:37:c6:be:fd:a7:92:83:88:1d:05:dd:3b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=00e0cd2dd67ba04cfaa98b31861386e6ec198455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:62:8c:bd:49:4e:ad:5c:23:b7:de:b2:56:af:
                    35:ee:ae:a1:a0:9e:88:d2:e5:be:4a:9c:6c:0c:fa:
                    46:26:ee:1e:e7:a8:0b:70:c0:37:5f:b1:55:55:50:
                    b4:d3:9c:be:6d:47:07:0a:f1:65:d6:f5:7a:69:7b:
                    7d:e8:ef:63:9e:d4:c2:91:ae:56:d3:ec:5c:88:cd:
                    f5:c7:36:61:55:b0:cf:23:b1:03:e1:ce:27:a1:c3:
                    6b:28:53:f4:60:9f:4b:71:72:4b:25:81:d3:7e:7b:
                    30:3b:c0:b9:06:54:20:3a:25:0c:a2:bd:1f:ff:bd:
                    d1:6f:e7:41:2b:55:fa:07:7f:64:d7:0b:a4:e7:c5:
                    26:86:89:c1:62:06:f6:c8:63:ec:25:00:0d:76:5f:
                    44:8c:71:e4:cd:f1:15:8d:85:9f:3b:0c:c8:db:60:
                    af:24:3f:e3:fd:a1:a3:f6:0b:02:cc:e3:1f:f3:a3:
                    34:07:21:42:14:bc:ec:70:71:30:8a:a4:77:38:f0:
                    b2:4e:d9:12:a8:9d:10:0b:54:bd:1e:e0:15:80:7e:
                    06:ac:d8:05:8d:a9:c5:0d:59:6d:10:0e:8d:c4:b2:
                    e6:a5:e4:c1:82:76:23:cd:c9:04:c7:8f:05:16:cd:
                    c5:f7:26:02:9b:8a:ea:1d:b1:37:e8:16:f6:3c:de:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E0:CD:2D:D6:7B:A0:4C:FA:A9:8B:31:86:13:86:E6:EC:19:84:55
            X509v3 Authority Key Identifier:
                keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2e:13:35:27:38:a3:38:69:18:6d:4d:6a:84:5c:79:c9:f7:
         19:d3:7f:12:98:1c:5b:e5:9b:65:f6:8c:45:07:0d:a2:6b:e2:
         70:a2:ee:57:f0:49:f3:a5:52:ac:f8:54:51:24:7b:4c:06:37:
         96:20:d9:4a:55:1c:d9:ce:2f:4d:e6:2b:ed:8c:8e:c7:1c:24:
         5f:31:f6:a4:1a:dd:ff:e2:bb:04:d6:d5:12:37:36:af:e4:65:
         1c:df:70:3a:1d:fc:b7:90:d5:34:ca:2d:50:35:0b:c0:e1:83:
         db:1d:49:91:9d:64:8d:78:31:ee:d1:e7:64:78:f8:d0:42:80:
         37:c8:6d:41:b0:52:05:28:90:25:eb:3d:4e:fe:1e:83:e4:fc:
         e7:f7:61:ed:9b:f1:5f:e0:37:00:52:2d:f1:08:a1:45:f6:59:
         71:c8:4e:df:30:a7:8a:7b:d5:e7:f8:aa:35:e5:90:89:55:13:
         98:95:27:5a:9d:6d:bf:38:5d:fe:78:9a:c2:3c:62:c4:b5:a9:
         dc:e2:00:1b:d5:b7:b1:b5:91:7b:db:0b:0e:2a:d1:38:ac:3c:
         fb:08:5d:74:49:fb:3f:2b:71:74:99:6f:3a:ee:ec:48:1d:ad:
         a2:de:0b:ff:6c:bc:87:ca:aa:29:8f:a6:2b:1a:55:6c:c8:bb:
         7f:99:d6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----