Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File:                     Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier:          5AIWvyOM1/84FwZn6C7YJ6lRxRnspFLHVl9N6kOqD9M=
Subject key identifier:   3F:F7:8C:ED:41:C2:5A:62:E9:B5:6D:68:6B:EF:6B:D3:3C:FA:C0:BA
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer:       /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial:       01962F74B1E45ED8D455BCD18B96EE1403D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=)
                          2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: 04F+FwnZi/cab2gvQz+y3b/bVZgv1wc2upPN7gCF/M0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b1:e4:5e:d8:d4:55:bc:d1:8b:96:ee:14:03:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=3ff78ced41c25a62e9b56d686bef6bd33cfac0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:5f:cd:3c:ba:15:f1:32:ea:f6:68:65:d0:
                    c1:63:29:3b:8a:cf:93:36:26:44:da:55:f2:7b:d6:
                    ff:3a:49:47:59:b5:bc:c2:93:e4:dc:a4:6f:d9:04:
                    61:8c:5c:59:3d:1a:fa:93:df:78:23:98:32:89:3e:
                    8b:66:2d:3b:59:8e:3a:30:68:da:3f:61:bb:5b:d5:
                    83:9a:23:13:4c:3f:3a:b6:ed:17:04:a0:51:92:65:
                    79:b4:8a:b8:cf:64:39:db:5b:5d:12:7e:c2:f9:6d:
                    82:6a:3f:55:3b:16:8e:ab:53:63:bd:c9:a0:59:42:
                    6c:04:7d:8f:ae:e9:7f:f8:9c:b8:12:e6:d5:96:0e:
                    59:e0:cb:91:d1:b2:28:6a:1a:50:82:1c:61:6c:ba:
                    b7:e6:0d:4d:21:8f:ca:e7:bc:99:15:62:26:ff:1e:
                    a4:f3:22:9b:89:c1:3c:41:0f:00:f0:30:63:88:bc:
                    f7:7e:97:97:7d:0b:09:25:03:d2:a5:cf:00:ef:f9:
                    91:89:49:93:3c:dd:94:76:41:25:c5:ea:a0:ef:ab:
                    5a:8e:6b:67:cd:f2:e9:8f:7e:49:d8:00:cd:bd:f5:
                    5c:2e:12:ed:15:4c:de:20:1b:5c:ed:22:4d:fa:a0:
                    cd:0d:7b:67:ed:05:36:5c:7b:df:86:c9:04:52:91:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F7:8C:ED:41:C2:5A:62:E9:B5:6D:68:6B:EF:6B:D3:3C:FA:C0:BA
            X509v3 Authority Key Identifier:
                keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:18:ef:cd:35:83:85:cf:6a:c3:e4:ef:72:af:6e:cf:cd:4d:
         fa:d6:7e:52:30:03:f9:88:53:92:d6:d1:87:d4:ce:80:28:16:
         98:9e:b6:00:38:08:3f:32:2b:83:0a:be:93:50:46:70:ec:6a:
         c1:8c:43:a4:bd:b2:8b:da:1a:22:a9:a3:4a:a2:7e:d4:62:b6:
         f5:61:bf:cf:74:8c:75:11:96:3e:3b:4e:29:56:55:a7:78:d1:
         5f:b7:e5:41:79:ad:ab:9a:26:b0:a8:b7:8a:90:37:af:63:1f:
         3e:11:9c:6f:f2:cb:4e:75:22:12:41:68:2e:b1:7d:6c:74:b9:
         68:58:29:5c:71:79:c0:dc:70:a5:28:a3:ed:da:2f:8d:df:16:
         7d:b1:06:0d:de:a9:b9:4d:e0:f5:a4:03:35:9d:b5:32:fe:ae:
         b7:2d:94:45:25:c5:98:32:67:24:3e:46:6d:b4:90:08:59:40:
         c2:af:06:4a:d2:0c:ec:88:24:19:7e:98:d9:69:cc:b1:45:d1:
         a4:25:f1:80:3e:32:77:13:4c:56:ac:66:b1:81:9a:09:f4:05:
         55:66:5e:fd:25:19:71:e0:6f:34:22:8d:75:06:2f:dd:d8:32:
         ea:aa:e7:7e:7c:07:10:95:77:36:56:53:e5:9e:43:09:46:93:
         f5:ff:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----