Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File:                     ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier:          dFF2cO12V2CXvBFNzVuy67/Nmv2JPyP8/7SQ7xWvet4=
Subject key identifier:   83:6B:30:54:01:46:51:91:A5:79:34:FC:5C:9F:A5:5E:2E:44:60:B9
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer:       /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial:       01962F073510D8BA06C5209104E37D526837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: OgM/WvMBvg8wtOR3fyJlBYj/J0JpXjlV/t+tTkKRIL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:35:10:d8:ba:06:c5:20:91:04:e3:7d:52:68:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=836b305401465191a57934fc5c9fa55e2e4460b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:ce:8b:6a:8c:cc:8a:44:d8:97:98:ca:f0:
                    28:98:38:eb:eb:29:6f:98:f7:0a:3a:81:7a:b9:18:
                    7f:17:ca:dc:74:c6:58:ac:bb:1e:e0:ad:02:0c:c0:
                    fa:91:2d:49:b1:03:63:82:7f:2b:22:0b:5c:c3:d5:
                    25:a7:d5:ce:7c:12:93:77:2c:19:04:11:60:24:24:
                    7f:23:8d:39:35:b8:5d:1d:d7:b2:08:d6:d2:db:af:
                    32:8b:04:22:a8:5c:09:a6:f5:fd:90:37:60:41:21:
                    fb:b5:5f:bc:ab:64:58:5e:4d:6f:91:62:94:1c:d9:
                    ff:60:63:98:5b:50:7d:de:c4:0a:58:6f:44:13:b3:
                    28:c9:39:e5:b5:4a:f0:1b:33:22:50:58:d4:3f:1f:
                    21:f3:5f:ea:43:b9:2e:f4:fb:61:78:19:da:af:85:
                    83:e3:c5:63:f6:51:90:1b:5a:35:ef:4e:31:9e:1c:
                    da:ee:b5:c2:de:43:e9:fb:18:2a:fc:d1:b6:84:96:
                    3c:83:08:6a:a0:68:9a:53:c9:9a:b0:d1:b9:b8:08:
                    ef:21:c5:65:59:15:39:7a:34:2d:26:d4:07:e7:d6:
                    3f:61:64:12:14:1f:ba:e7:eb:e2:5b:00:ba:33:c1:
                    f9:14:37:cb:d2:50:26:f0:b5:d4:3b:ba:a1:cb:94:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6B:30:54:01:46:51:91:A5:79:34:FC:5C:9F:A5:5E:2E:44:60:B9
            X509v3 Authority Key Identifier:
                keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:15:37:f1:90:1c:b0:ba:d2:db:3f:40:8a:d0:cc:09:25:84:
         df:15:51:2d:45:13:52:4e:b9:19:17:40:de:41:c7:36:00:8a:
         71:60:b7:0e:51:64:af:62:08:2a:39:d8:87:88:08:bf:9d:d9:
         bc:39:2b:e5:b9:18:1c:bc:8e:5d:f6:33:71:20:2c:8a:be:68:
         a6:74:6d:99:c4:a6:ff:62:13:0b:96:26:86:8c:3d:b8:ae:fc:
         a7:28:31:26:6f:ec:74:7c:e1:f9:d1:bb:cc:ba:c3:cc:a9:d1:
         c7:67:23:06:47:28:35:70:1a:5e:23:7d:f5:9e:21:fb:a8:72:
         8c:81:dc:80:63:08:ae:23:1b:1e:46:1e:b0:ff:13:56:d7:fa:
         1c:a0:ab:f8:b4:2b:c5:30:54:82:01:17:8e:bd:2e:2a:40:71:
         76:ae:74:f9:8c:2c:8d:a0:d2:0d:66:91:fb:f8:51:2d:00:33:
         f7:8d:fe:21:ea:2e:54:93:bf:43:ce:bc:d1:a3:fe:e2:37:96:
         f7:3c:de:22:0f:0b:cb:fd:af:56:84:a1:23:91:66:68:fd:8d:
         81:b6:79:e9:02:4e:41:13:f3:c4:c3:62:58:68:63:2a:d6:63:
         2a:98:46:31:dc:5a:1d:ba:63:42:31:86:51:e7:52:66:f9:60:
         c1:57:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----