Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File:                     ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier:          SSZTB/hXIdCbmX/pRik26ksRcwuTFSO9Fhb8cgv+ohM=
Subject key identifier:   21:49:44:16:90:72:9A:3E:71:A6:A6:61:C1:E5:EF:F6:AE:D5:C5:04
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer:       /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial:       01962DF3ED413D0C6C91C98F38FBA57E2A5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number:          0D06
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=)
                          2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: sJR8XkLkYCqUMZ4h5fFxIUUMWtjqijzEKUbeDB3FiEk=)
                          3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ed:41:3d:0c:6c:91:c9:8f:38:fb:a5:7e:2a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=2149441690729a3e71a6a661c1e5eff6aed5c504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:74:eb:2f:b8:84:c4:23:82:fb:8b:45:69:
                    58:7a:0e:99:03:38:b9:8a:c1:0f:d2:1b:46:f6:f6:
                    a6:dd:8d:7f:fb:8e:e6:81:34:97:fb:db:4a:12:1c:
                    45:19:f3:81:b2:26:bc:67:21:18:5c:14:05:5a:1e:
                    ec:ae:8f:02:8a:01:7c:13:0e:53:9b:5b:20:09:08:
                    ab:a7:75:f2:2a:35:cb:03:55:c8:e8:0e:68:e1:fd:
                    f1:82:66:67:cb:8d:b6:a2:ea:61:1c:58:dc:89:b7:
                    04:12:ff:32:be:8f:3d:b3:96:d3:17:c6:21:9f:d6:
                    d0:d3:e4:e4:ad:98:06:fd:7f:95:0a:88:e9:71:1e:
                    0e:0e:f3:de:de:53:0b:62:6e:76:27:9c:20:28:95:
                    fd:79:6a:af:99:05:cb:53:e8:e6:7b:5d:36:8f:a1:
                    e6:a6:52:e2:0b:3f:a4:71:b5:4b:5d:32:81:1f:6e:
                    a0:6c:36:a6:8e:b4:aa:84:e1:f5:32:e5:28:4f:1a:
                    0c:19:91:32:8f:1b:65:3f:7d:04:98:4b:4c:10:6f:
                    79:48:e7:79:25:ad:d9:bc:55:da:6f:4b:d5:70:b1:
                    07:77:94:53:2a:3b:5b:a1:4b:31:7d:ab:08:cc:bb:
                    2e:5c:27:77:9b:5e:6d:ee:b5:e6:c8:00:f0:29:ce:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:49:44:16:90:72:9A:3E:71:A6:A6:61:C1:E5:EF:F6:AE:D5:C5:04
            X509v3 Authority Key Identifier:
                keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b4:0f:4f:00:7c:7b:a4:b5:8a:c4:fc:46:8e:81:9a:9f:2a:
         07:c7:a3:1f:26:5f:c2:66:53:df:13:88:8a:b5:15:5a:1b:ea:
         53:28:d6:86:b3:25:9d:40:25:4d:db:4c:55:8e:1f:96:1b:81:
         6a:d6:88:e0:f7:49:d1:e0:3b:7f:72:a3:2c:c2:ce:86:e8:09:
         4e:59:8d:99:bc:72:3b:b6:d8:32:8b:07:bd:2e:ea:cb:2b:dd:
         b1:da:ca:ea:7a:25:7d:ff:88:37:8c:dc:33:4c:ef:3e:67:35:
         3c:87:47:ea:68:b0:ed:a6:fe:32:10:df:f6:b5:a4:be:bf:8c:
         d6:4c:81:e4:87:26:b4:11:88:33:fc:a7:6e:78:f8:c2:6a:2f:
         2b:83:d7:d4:91:61:56:6d:58:60:9d:1d:f5:4f:21:86:51:e0:
         45:89:4b:a1:81:53:b4:7a:b4:5c:20:fe:80:d8:7e:c4:d5:62:
         46:c5:37:50:b9:50:6f:6c:6c:0e:e4:33:7c:db:f5:a1:fc:49:
         60:8d:4a:b1:67:31:77:c8:95:d9:e7:a3:ec:57:5c:fc:12:90:
         b5:7a:0c:b0:a5:dc:84:c8:04:2c:03:da:f8:a7:d6:79:ce:f6:
         e4:80:61:66:af:d5:ba:ba:08:97:08:44:37:fa:b9:e4:7c:89:
         e8:ca:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----