Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
File:                     ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft (raw, json)
Hash identifier:          acL6ZpFjXlloQCyTIeYQnoWY94obgW1pOwek+zUPvQs=
Subject key identifier:   ED:FA:3F:C9:27:DD:33:48:CE:72:10:43:3E:A2:31:B5:00:8D:40:36
Authority key identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
Certificate issuer:       /CN=66263febc8522dda56cbb439b61a0562be1ae1e3
Certificate serial:       01962E989E2544E4DCE21FB3278DB3968512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
Manifest number:          1241
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl (hash: gfApy/4xlOagN01pirkxlrGQu+ObmlqzOMv/8PXud50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9e:25:44:e4:dc:e2:1f:b3:27:8d:b3:96:85:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66263febc8522dda56cbb439b61a0562be1ae1e3
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=edfa3fc927dd3348ce7210433ea231b5008d4036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:1b:31:20:0e:36:f9:b8:43:c5:32:72:ef:
                    fa:60:73:9b:bb:bf:43:a2:00:af:48:3b:8b:f5:6a:
                    4f:6d:5a:5a:3a:6f:1d:47:f2:cb:24:bb:65:cb:51:
                    13:1d:34:da:4f:37:4f:68:d6:49:61:08:04:dd:e2:
                    8d:ca:50:17:af:9b:cc:28:39:1c:5f:6d:80:04:d5:
                    a4:5e:e3:1a:28:34:e4:ea:10:f1:68:a9:40:dd:49:
                    ee:73:bf:9e:c3:5b:55:73:bc:1a:32:54:eb:f9:18:
                    fa:02:4f:ad:f1:96:84:22:0d:a6:08:20:0f:0c:51:
                    38:0f:e0:d8:80:32:21:e9:ab:23:55:7f:98:45:85:
                    ca:e3:66:db:63:25:74:22:71:d8:67:00:1f:22:10:
                    48:7f:d4:ab:1e:37:9f:4e:63:e4:1f:77:38:6a:af:
                    10:db:6a:32:18:0d:3b:f1:f0:0e:17:68:78:bf:e2:
                    d9:29:20:7c:f3:ef:fa:da:ec:0d:77:66:d5:ae:86:
                    3a:41:ec:08:a6:a7:3a:48:ec:2a:e0:94:7e:bf:63:
                    76:dd:5a:aa:1d:50:0f:a1:11:5a:b6:2c:c3:f3:90:
                    12:e3:d6:22:39:02:05:e3:3e:48:2d:eb:a6:15:af:
                    80:af:85:b2:74:cf:b6:8b:74:b6:30:c1:0d:06:19:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FA:3F:C9:27:DD:33:48:CE:72:10:43:3E:A2:31:B5:00:8D:40:36
            X509v3 Authority Key Identifier:
                keyid:66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:98:f9:a6:2f:5b:35:7e:35:00:eb:f8:46:63:6c:1c:61:9f:
         3c:3f:ac:0c:b7:ed:a3:55:ce:ce:b6:0b:de:d3:3d:85:1f:33:
         18:1d:69:7d:a2:21:78:1a:b0:62:21:38:62:b3:82:88:f4:1e:
         13:cf:3d:c1:71:40:a0:a3:e9:e5:96:8d:e2:b0:2f:4f:c5:dd:
         73:5b:ca:74:c8:da:8d:07:ff:2c:d7:4b:9b:df:2c:c7:1a:3c:
         94:54:7d:14:d4:53:17:61:04:e7:63:37:cd:2c:44:6b:2e:7d:
         e2:7d:83:51:9a:45:6f:64:d0:78:ed:58:57:d1:09:1e:5d:fd:
         45:02:d5:7a:df:d7:f5:2e:a1:c1:70:42:18:60:f3:fe:d9:71:
         a7:6c:71:5a:0a:e1:67:ca:cd:95:d8:48:eb:53:a0:e5:92:73:
         21:0c:ff:72:97:25:1f:1a:f9:22:57:4a:ec:62:77:82:82:da:
         78:03:74:ed:6a:55:b3:29:4c:6b:f5:68:cd:81:51:03:fe:19:
         9f:c9:b8:ce:2b:e9:b4:6e:75:5f:3e:51:27:e0:bf:20:93:18:
         9f:27:b4:77:94:e0:6e:7e:c5:19:bf:80:df:54:fd:95:d3:14:
         c2:6c:d5:05:1f:f2:2c:21:5f:47:b2:eb:ae:c3:1e:db:f7:ba:
         b5:39:00:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----