Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
File:                     Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft (raw, json)
Hash identifier:          N5ibyjDHxH5PGo3YGe//7utwO894DNp//6sbgFyA6Iw=
Subject key identifier:   90:19:1D:D2:57:75:48:A7:38:1D:C9:C5:37:9F:8A:60:65:9C:71:29
Authority key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Certificate issuer:       /CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Certificate serial:       01962DF3A3F51E86A9016AF0285BD31BA1EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
Manifest number:          0B7F
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: JwPrp9zPI8mSIbB_O0eMHGoYapY.roa (hash: IwCg2TuOsRRHQCPAN/Mgxb8cdQtIJjR9uHKISiCsG7Q=)
                          2: Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl (hash: cIwgOMprY9a+5iZBNkKcQpUs2m4HeA7R96liFZHIQgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a3:f5:1e:86:a9:01:6a:f0:28:5b:d3:1b:a1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=90191dd2577548a7381dc9c5379f8a60659c7129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:b4:4d:ad:77:75:f2:54:8e:45:35:9c:8c:
                    09:67:5f:41:bc:13:5f:3b:e9:b6:b0:d9:cb:a4:f7:
                    2e:37:60:83:07:f6:94:e2:3b:0d:17:4b:bd:69:b7:
                    a2:d5:4e:d7:c8:73:55:6e:f5:25:6e:cc:4b:e9:7d:
                    19:ba:aa:db:91:1f:ab:bc:ba:b0:a9:e7:01:ac:cf:
                    6a:b3:07:0c:06:c8:50:ab:34:81:ed:77:8c:c9:38:
                    a2:73:a1:63:93:75:70:3c:d7:c8:8e:43:c8:ea:6b:
                    8b:88:f5:eb:36:8b:73:38:87:53:15:60:d4:d7:a7:
                    64:46:a9:51:22:9d:d9:9d:7c:5b:a8:0e:8d:3e:15:
                    fa:6a:53:9e:ed:8c:8c:67:ba:42:50:ca:3c:c3:bf:
                    17:d5:22:89:a5:4c:1b:00:56:d9:a5:7c:2d:0f:50:
                    60:44:56:d7:17:dc:62:54:e1:9c:c1:16:7f:0d:dc:
                    c0:13:10:b7:66:12:45:66:98:9b:2a:22:5b:81:11:
                    e9:7f:6d:89:d7:36:8b:1d:e0:07:c1:c4:86:72:ae:
                    dd:9c:c9:4d:b9:0d:a7:c8:95:9c:6c:2b:a1:ce:86:
                    3c:37:44:bd:24:fb:6d:15:12:86:1e:c0:d4:39:34:
                    13:d3:78:70:18:ff:da:d2:c9:7d:9c:b5:f8:3d:b9:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:19:1D:D2:57:75:48:A7:38:1D:C9:C5:37:9F:8A:60:65:9C:71:29
            X509v3 Authority Key Identifier:
                keyid:66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9f:31:e9:57:fc:21:f8:9b:b9:e8:b5:a4:fd:26:e5:88:07:
         f7:1c:8d:71:80:fd:9c:8b:40:29:38:fe:df:b9:71:3a:31:df:
         c2:00:3b:f9:91:db:15:cb:72:53:99:a2:c8:b5:cb:75:ba:f4:
         9f:d1:9d:9a:50:09:38:f1:25:96:6a:f6:e9:98:d4:77:19:71:
         19:c7:be:4b:7c:24:5c:99:64:e8:cc:53:85:f2:7f:88:00:fe:
         36:58:cd:2f:d3:22:68:4d:06:49:1f:50:2a:f2:aa:8d:8c:7f:
         7f:5c:da:b2:41:dc:94:49:98:33:c4:d0:85:04:41:14:a3:99:
         ff:86:fd:58:02:74:a5:5d:90:ce:7d:cf:0b:5f:45:33:a9:6e:
         a4:58:f8:5b:a8:f3:4d:d5:75:fa:8b:94:a6:db:04:be:4e:6b:
         55:c7:af:9d:6f:2e:9b:14:49:f3:6f:ff:ba:f4:d7:ce:16:67:
         cd:03:e7:0f:ba:b0:cb:7e:b8:00:5c:39:0d:fb:c0:22:b6:e7:
         f7:7d:2e:25:35:fb:bc:5f:dc:42:b7:83:cb:b9:c1:71:a2:71:
         17:95:ce:33:81:3c:95:7f:e3:8a:ef:0d:20:06:0f:a1:56:c4:
         8c:a0:41:eb:0d:d1:8d:1c:81:86:f4:0d:9d:d6:9d:3c:53:5a:
         9c:b1:f6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----