Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File:                     Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier:          C6ozuaglcqe6ZLI5u57ojwmHMZLjMXkLtaaa/kx1Rqs=
Subject key identifier:   53:1A:80:5E:E9:06:5F:4A:F1:2C:60:24:DD:4A:A3:CA:78:07:08:91
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer:       /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial:       01962F0728EA183CADD7A481D36712739C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number:          0998
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: GTkSynOSR7JJ8hFIh874atQ2kys.roa (hash: WFZgsIYIpZf3qUaXsQ6Bchk/4++gg/bi1AspWX+Djq8=)
                          2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: OOPzj9Lh1lQcmW6deXYPOJBBX7ZxhA7+gjfBvWeGHSc=)
                          3: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (hash: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=)
                          4: qLBwfOuFs3K7TRJtu9mhTqn2oCI.roa (hash: t1+dGuENDhf8xhcNT9hdJi3ibea4hMiZnxDqhvWQ4xE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:28:ea:18:3c:ad:d7:a4:81:d3:67:12:73:9c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=531a805ee9065f4af12c6024dd4aa3ca78070891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:10:d3:9b:d1:93:bd:44:72:9e:4d:d6:d1:90:
                    13:20:17:d3:c6:3a:46:39:7e:79:e7:f9:04:23:b1:
                    af:5d:d6:6b:7e:98:c7:89:2f:0c:aa:ab:ce:51:fd:
                    ab:be:10:ff:34:ca:3e:e6:65:f1:48:86:2b:c0:9a:
                    ba:12:6d:91:58:03:83:bd:64:f0:60:9a:27:07:e9:
                    7a:2b:85:00:b4:9c:1b:92:9d:93:4c:82:ce:49:63:
                    4b:1d:fd:d1:09:b2:db:12:e4:cb:0c:6b:5e:3c:3e:
                    d6:fc:7b:b5:b3:8d:c6:df:26:44:93:8e:26:67:c4:
                    21:92:a3:db:eb:5d:d3:91:32:ea:bd:c5:04:9d:58:
                    0c:b9:13:40:32:6c:30:64:42:2a:8e:a4:fd:5c:25:
                    b7:28:80:50:96:12:9e:54:f6:49:b6:31:94:cd:39:
                    78:f7:6b:ba:10:4f:02:6f:77:0a:14:57:a3:3d:f0:
                    25:42:39:37:f0:ce:ee:0e:cd:66:6b:96:08:c3:19:
                    53:f1:49:be:dc:72:9d:2f:a3:fe:ec:f1:3b:66:c6:
                    0e:e6:cb:71:66:bf:a1:a7:31:f4:a4:f9:9c:01:61:
                    d2:9d:6e:68:cb:3d:8e:ba:92:1f:26:00:b0:cf:8f:
                    89:d0:61:6d:7d:ae:45:50:e7:c1:66:85:17:20:27:
                    9a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1A:80:5E:E9:06:5F:4A:F1:2C:60:24:DD:4A:A3:CA:78:07:08:91
            X509v3 Authority Key Identifier:
                keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:5b:9d:71:3f:d5:ec:86:a8:fe:95:cb:d1:32:31:c0:5c:
         00:88:09:26:a8:24:2d:34:57:7c:01:25:76:2f:16:9c:0c:cd:
         41:ed:a4:a0:85:02:4f:10:01:4c:2b:04:e8:0a:ff:7a:d2:2a:
         08:e3:1e:33:13:ed:52:bf:b3:9f:3d:f7:ce:14:7c:e6:c8:d9:
         ab:0e:a6:42:84:d1:3d:ae:9a:e0:92:83:17:d8:26:eb:7d:c5:
         bd:9e:59:49:65:95:7e:49:3f:58:01:3b:ae:3b:4a:8c:64:b2:
         b7:f7:f7:7f:a5:c3:77:4f:04:38:a6:ba:d6:12:24:13:52:2b:
         81:aa:97:0e:66:3c:61:ab:bd:43:70:28:9d:f3:3f:a8:75:b1:
         ce:a5:63:14:49:ad:7f:14:28:07:dc:13:c1:46:d0:e0:1e:d7:
         a2:4a:ff:7c:6e:7a:2b:a2:ac:d9:76:56:42:6b:4f:23:49:46:
         72:0a:b1:39:26:1c:d3:bc:f3:26:49:3b:57:b0:08:ce:68:c4:
         fc:3a:b4:61:18:2e:1d:af:22:ec:9f:a2:36:8e:14:77:3c:ff:
         71:b6:ee:26:29:45:8e:8a:77:32:ad:32:9a:8f:0d:b7:f8:bf:
         24:63:4e:19:54:49:c9:87:a3:34:d7:6a:3a:18:79:8d:c2:1e:
         be:6a:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----