Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
File:                     Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft (raw, json)
Hash identifier:          Jjb4U12z8YdxZke8RMESh1nqpZZhqQKP7d0hNnCkorQ=
Subject key identifier:   1B:96:45:D0:33:8C:26:86:58:27:F9:84:AF:93:3C:FA:F3:0B:72:36
Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
Certificate issuer:       /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Certificate serial:       01962ECFBB9CA43B950FE914BB71754A916B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
Manifest number:          145E
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl (hash: dEN9bE/pauZVpp1dsr9Ktrq/MkLDbxU4wRmk2ibIRU0=)
                          2: ozTEzJ9CezdFTub-OtUArZTGCUk.roa (hash: hY/JTd/yJ1qrW6X45LIcw6pONHk7vyqJi7EpOCN1u7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bb:9c:a4:3b:95:0f:e9:14:bb:71:75:4a:91:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=1b9645d0338c26865827f984af933cfaf30b7236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:d8:bd:6b:a9:bf:a4:3d:fb:82:89:54:71:
                    f3:0f:96:be:e0:69:a7:d0:04:3a:00:99:94:f5:96:
                    f5:61:8a:75:02:8a:58:8d:8b:9b:91:8f:78:e5:98:
                    9a:7f:43:7d:45:99:0b:20:36:84:79:6b:f4:6e:47:
                    2a:ac:6c:28:dc:2f:49:ca:36:16:e9:23:39:31:fc:
                    96:46:b0:ca:aa:98:4b:9d:95:c5:4f:51:41:3a:d9:
                    2c:b4:c5:09:f2:3e:91:61:ef:32:af:1f:2b:3e:3d:
                    d1:38:5b:45:78:a9:e5:76:79:3a:08:13:27:12:d0:
                    b3:c0:bf:e5:9a:6a:2f:08:81:dd:a3:24:d9:44:46:
                    f5:fd:a7:24:80:51:9e:44:b0:95:64:84:6d:4f:59:
                    fa:d4:ff:38:a4:15:ac:e8:d3:8b:b6:41:f1:ef:50:
                    77:34:54:14:f5:7a:44:94:7b:3b:02:ff:72:6a:31:
                    d0:e9:44:71:01:bb:db:e4:3f:bf:3a:70:29:26:f8:
                    e4:0e:0f:6f:1f:75:6f:11:78:4b:ff:32:0f:33:8c:
                    78:75:ef:05:c0:49:f4:21:08:cd:30:00:a9:37:b9:
                    2b:78:82:3f:cc:d5:f7:68:1e:63:ad:ff:a9:86:74:
                    95:07:69:e8:67:b9:2a:1d:b9:b4:96:b3:eb:47:c9:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:96:45:D0:33:8C:26:86:58:27:F9:84:AF:93:3C:FA:F3:0B:72:36
            X509v3 Authority Key Identifier:
                keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2f:fb:01:1d:8d:5f:a9:4b:a3:d4:55:67:8d:b6:78:7e:4c:
         a0:4f:cd:8d:95:62:68:98:8f:ee:32:5c:55:df:d0:42:56:6c:
         21:84:a5:b0:a4:0c:c0:b6:51:d4:4d:cd:90:f7:74:6d:93:5e:
         32:56:10:2e:9b:c7:b2:ba:5a:02:4d:64:06:f9:3c:e0:e2:21:
         cb:a9:6e:0b:3a:a9:5b:f4:bf:c9:39:49:b7:93:ef:a8:06:22:
         14:0b:42:37:30:d6:74:df:b1:83:77:ab:3f:04:e6:09:61:6c:
         6d:4a:9c:96:db:b3:35:cf:9a:94:82:e9:85:34:2b:34:b5:6f:
         e4:61:23:d3:8c:85:30:5e:50:3b:ce:6a:39:4a:56:93:fa:c4:
         e3:97:ba:18:88:a4:ee:0f:13:95:a8:ab:a6:53:2f:2c:84:dc:
         eb:c4:9c:ca:be:66:4c:0d:83:fa:6d:6d:ae:7f:c5:5d:27:e6:
         e2:a8:91:c6:77:d3:d9:25:bb:e0:7c:63:48:43:09:4e:14:13:
         e0:05:25:dd:b7:30:9a:67:7d:23:d6:33:be:2d:d6:5d:a5:0c:
         5b:6f:58:b4:78:c1:fc:a6:ef:28:9a:c6:3c:f8:8a:5d:c8:b1:
         45:e0:65:4c:5a:f3:9c:d4:b7:0b:9c:b1:8c:93:ef:b5:14:b4:
         c3:6e:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----