Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File:                     ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier:          aFmV2G96KlXmhrA9LRuAVaaCwkzWMVYtUr4Eu9Ux1hw=
Subject key identifier:   D2:B7:D7:9A:89:9F:E4:29:A8:40:65:B8:68:DE:A9:2E:BB:D4:8A:77
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer:       /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial:       01962F0714958EF12B6693A0472F90F810C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number:          04C8
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: Zq9kvH+mPyHXMQJt2zCle6Ig8sVAlXGpQny+/Jv5G4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:14:95:8e:f1:2b:66:93:a0:47:2f:90:f8:10:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=d2b7d79a899fe429a84065b868dea92ebbd48a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:d3:fe:69:c2:d1:30:a6:a3:13:18:34:19:
                    24:c2:81:27:43:33:46:33:5c:a3:28:d6:65:70:0b:
                    8d:63:05:eb:62:b6:02:8a:29:e6:61:d8:1d:b3:e7:
                    6f:64:48:88:6b:4b:df:ae:8e:15:9f:de:d3:e9:da:
                    71:c9:a8:3f:b4:24:80:01:7e:37:25:9e:75:44:8d:
                    2a:a7:52:c2:0e:7f:23:c9:d0:84:54:a3:f3:21:53:
                    25:b5:d0:8f:f0:c0:62:04:1f:38:da:3b:f6:f2:3d:
                    c2:e8:9f:74:e1:79:24:67:ff:ce:24:1b:2e:bf:fd:
                    f7:a3:d0:e6:5e:d8:c6:92:6d:e8:4b:62:2c:89:b1:
                    9e:a5:75:3c:35:c1:6b:56:ee:3b:7f:76:1b:0c:b1:
                    cd:d0:55:e5:10:d9:0b:90:19:0b:16:dc:1e:7a:7e:
                    b8:44:49:90:95:ed:c2:2d:49:5c:1a:bf:24:0b:c1:
                    1b:ea:1e:9b:13:96:33:5c:27:2d:92:6f:95:80:0e:
                    ae:fd:65:f8:57:9e:5f:80:19:dd:08:de:8a:f0:58:
                    d4:90:6b:d4:f8:1d:67:ce:33:a0:e9:34:32:bc:c6:
                    31:4c:a7:02:ba:9f:94:66:8e:9b:6f:bd:0d:db:33:
                    1d:1e:81:12:df:13:68:ac:44:a8:24:49:46:24:1f:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B7:D7:9A:89:9F:E4:29:A8:40:65:B8:68:DE:A9:2E:BB:D4:8A:77
            X509v3 Authority Key Identifier:
                keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9a:7f:0e:b2:52:1a:a0:8b:03:cc:f4:6e:bb:04:b1:87:74:
         22:94:a8:54:e5:7f:2e:e6:c1:79:a9:ef:73:da:1c:8f:e6:54:
         57:a1:d8:e4:2a:8e:cb:a0:2d:83:30:26:55:d5:ee:38:d9:b2:
         9f:b9:8e:cd:62:6a:4a:3d:88:42:64:23:72:a8:7b:40:cd:06:
         0b:21:b3:79:2b:76:82:64:11:3e:0d:3f:b7:c8:e9:15:08:b4:
         34:3e:00:4f:03:ad:09:4b:aa:01:7f:b1:37:57:28:08:e3:ab:
         8f:cb:7b:6f:66:9f:7b:fd:c0:98:71:22:98:26:68:68:dd:a7:
         1b:6d:ab:88:c8:b2:9a:e2:12:be:38:b3:e5:b9:9f:c5:73:51:
         31:20:7e:ba:a0:da:7a:c4:3b:70:90:a3:60:21:d6:91:fd:9b:
         b6:b1:ee:ce:92:82:a4:96:bf:2e:0d:8c:73:e2:7c:97:72:16:
         dd:e3:cb:26:90:79:22:05:b0:8c:fb:a8:4b:1f:fb:11:e8:ba:
         a6:40:28:b4:23:73:92:5b:95:91:94:98:38:45:ba:c3:f3:03:
         40:f5:03:e1:a6:03:2d:44:2b:c9:ad:50:36:1f:1a:3b:97:bb:
         18:22:9c:51:e8:46:d4:65:b1:2d:c4:17:42:c1:8a:8c:2d:96:
         8e:08:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----