Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File:                     ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier:          yP+zS5eohde3szZB3+Td6+cRyRWad7ENVGP9Q2HK71A=
Subject key identifier:   0C:FD:09:14:8C:FF:E5:81:A4:80:6C:6F:D5:43:FA:14:4B:36:CD:CB
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer:       /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial:       01962FAB262CB55A5652913A131526C36EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number:          0E58
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: Fg0QsDS_oIn0AHFloFbOWLXLPYw.roa (hash: PCZ0sNE5BS8dEXbU+ksvDG3w1iOi7xIBrn9yDW7TZ/U=)
                          2: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: MiIUW8opGsAy0H5uf8ZVGowSHVUFmRIXlKKGB9M9t+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:26:2c:b5:5a:56:52:91:3a:13:15:26:c3:6e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=0cfd09148cffe581a4806c6fd543fa144b36cdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f9:ab:cc:1e:41:dc:4b:8d:d0:f3:b7:78:b8:
                    cb:d1:b8:21:2c:4c:87:d3:6a:e0:7b:ef:aa:d3:4e:
                    7d:4a:a2:5d:2c:dd:31:9a:e7:52:b0:53:6a:ff:58:
                    3a:7d:59:19:2e:98:bf:9b:7e:f8:69:22:c6:97:b3:
                    bb:75:0a:5e:59:f9:1f:7d:b0:16:7f:5f:1e:8b:56:
                    19:36:e3:52:d1:96:44:cd:16:bc:74:1d:65:b9:8c:
                    0a:4a:ac:a3:1d:a0:8a:ce:e0:df:e2:8a:0d:a5:3a:
                    f1:de:16:49:31:99:63:73:db:59:e0:45:ca:9e:c3:
                    02:38:c2:09:c6:4d:d4:0d:bb:a3:c6:09:e0:b0:87:
                    7a:83:92:d8:94:a8:44:1b:d3:07:88:43:95:83:fb:
                    a3:2e:bd:63:ac:ff:23:0f:60:e5:50:7a:5c:5a:38:
                    21:58:72:c7:c3:3e:6a:c0:d0:73:ba:13:73:78:2e:
                    1e:56:52:59:8f:53:a4:ed:aa:b6:d9:98:37:c0:b6:
                    3f:7c:4e:85:a5:39:86:57:7f:3a:61:1b:70:07:f9:
                    6e:8b:4a:21:62:1d:9a:ac:6d:e1:3e:75:fd:fa:b8:
                    26:20:9b:4f:0f:b7:54:7a:cc:22:ff:33:c5:26:5c:
                    53:0f:8d:65:43:fd:46:5d:e4:94:60:0f:a2:ee:de:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FD:09:14:8C:FF:E5:81:A4:80:6C:6F:D5:43:FA:14:4B:36:CD:CB
            X509v3 Authority Key Identifier:
                keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:a9:01:96:ce:69:70:62:05:1e:82:ee:e6:2c:d0:7e:21:
         f3:74:25:4d:ff:ba:00:14:7f:7c:16:f1:e2:0a:c7:c5:3c:bd:
         ef:38:08:3f:b3:5e:f1:79:f1:15:d5:43:40:f8:2d:9b:0d:c8:
         85:d4:bd:8b:f9:ac:a1:23:3d:31:d5:85:3e:20:22:45:c0:03:
         fe:0e:31:09:ec:5c:96:af:73:86:dc:78:b0:c3:31:01:93:b6:
         c5:ba:f0:23:ef:e2:93:26:3f:f9:62:36:76:bb:77:5f:8d:c8:
         26:7e:03:6d:d2:a7:fc:7b:e6:b3:9d:b9:ee:bf:03:6d:68:e4:
         75:84:ca:5f:7a:a4:dd:03:60:10:d5:b0:57:31:bb:22:28:3b:
         cf:f0:46:a3:15:33:13:26:da:5e:77:82:c7:d9:c6:2f:7e:f6:
         b8:6e:c7:7a:91:d4:54:08:05:bf:82:d0:39:0a:de:0e:1b:f0:
         c1:4c:8c:60:ab:7c:07:aa:3d:80:0e:99:3e:7f:c0:98:80:a5:
         04:a9:1e:26:ee:a1:ed:44:58:23:16:61:55:51:1d:ec:95:03:
         3c:90:e7:7e:92:5a:0f:77:74:a3:d2:2d:5c:46:e0:53:33:5f:
         be:53:38:91:e5:26:ca:c2:b8:b8:dc:a0:22:96:63:a9:ee:2e:
         1d:f1:70:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----