Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
File:                     ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft (raw, json)
Hash identifier:          Yz0hjqdL6cCh4k6TL5pBQIfTtixJiyhy3o457isyWHA=
Subject key identifier:   37:F7:B2:9A:5A:BD:81:56:5B:D8:E4:15:39:38:1F:FC:CA:74:F7:32
Authority key identifier: 65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
Certificate issuer:       /CN=657484cc96e04503457945691d6814ecd66096e3
Certificate serial:       01962F066B517492B9B36CFC06DC627B2B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
Manifest number:          06F3
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl (hash: E6DQD9hOraBXbOZJpv+COoviVfRr2VuQ+n2S6SlkgOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6b:51:74:92:b9:b3:6c:fc:06:dc:62:7b:2b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657484cc96e04503457945691d6814ecd66096e3
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=37f7b29a5abd81565bd8e41539381ffcca74f732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:68:ae:0f:50:18:45:b0:8b:e7:32:1f:43:
                    bf:c0:6b:d0:da:0a:dc:73:9e:eb:70:49:6e:16:58:
                    14:9b:54:78:94:ed:76:00:a9:eb:25:fb:bf:61:83:
                    b3:4c:fd:cb:48:63:07:63:3c:42:b4:d2:e0:db:a1:
                    ba:e1:8c:f5:dc:56:aa:a8:46:f3:c0:5d:46:ac:7e:
                    fc:db:62:d8:ec:7b:8c:0c:c2:43:7e:ea:a6:0c:fa:
                    cf:db:59:93:b5:a7:7a:2f:15:24:74:15:d1:3a:86:
                    59:e3:1f:36:3f:09:a9:0f:51:67:78:98:45:0b:ab:
                    6c:c3:ef:19:82:3a:28:b1:32:78:4d:e3:a0:f7:e1:
                    11:11:a4:89:b9:2b:fe:8e:ce:c2:e7:54:2f:12:83:
                    bf:c1:0d:69:03:d6:fa:d6:97:35:2a:ab:c5:17:0c:
                    5d:cb:ae:26:38:74:cc:24:a0:cb:66:1f:a0:05:0a:
                    57:2b:f0:91:2b:b3:d2:70:b5:49:96:13:39:6b:2c:
                    71:f0:91:b5:9b:f2:5d:29:35:58:14:1c:4c:c0:80:
                    7a:75:41:9e:ce:61:f6:d8:70:71:7d:63:c4:73:4d:
                    30:0b:7b:63:35:1e:ba:ef:57:a0:11:d2:85:14:fa:
                    1d:ec:98:f8:fd:50:ad:45:ef:9f:66:22:5d:5e:fb:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F7:B2:9A:5A:BD:81:56:5B:D8:E4:15:39:38:1F:FC:CA:74:F7:32
            X509v3 Authority Key Identifier:
                keyid:65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:3e:94:a8:18:ac:06:f5:32:64:5e:01:3c:18:17:b9:31:21:
         8e:8d:b5:95:e4:73:92:de:ac:7a:37:12:cd:e1:be:47:cb:c0:
         9b:48:fa:c5:c2:18:08:aa:76:52:d4:1b:c8:6c:15:e8:9c:67:
         22:13:d8:24:d8:65:be:08:3c:66:18:df:e7:d5:e3:aa:1a:d3:
         2d:88:68:66:e7:75:56:f9:f5:5a:11:53:e3:7d:9e:90:c0:28:
         bd:11:ce:25:8f:69:10:23:17:e7:8e:57:c4:53:0f:d1:8a:59:
         6f:4c:1a:51:b1:c4:07:fc:30:1b:06:1c:7c:8d:f0:05:89:3e:
         fe:62:f5:aa:16:31:ea:47:59:8f:16:6b:96:ed:9b:50:70:ac:
         93:46:a7:e3:7c:5f:09:d8:ca:58:f2:27:3f:8c:73:1e:5d:06:
         c6:3c:f8:4f:04:f9:a4:96:c5:57:8b:3e:6b:9e:30:96:e3:4d:
         bb:7d:b0:7e:88:8e:54:76:e8:47:f4:67:61:58:cb:29:68:a3:
         a3:e2:87:85:eb:ec:ed:c0:f0:60:8d:06:a8:5c:ac:82:0b:47:
         ee:10:2e:e4:ff:d1:fa:13:18:47:c4:f6:65:68:d2:be:f7:7a:
         33:c7:ca:8b:e4:a6:e6:73:de:74:b2:e6:a2:84:70:1e:51:d5:
         67:84:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----