Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File:                     ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier:          SGE/Nt1v7a75C/3Py1L7aydSIACr3JjnaCRsndU6JyE=
Subject key identifier:   4E:73:B1:07:75:73:7D:57:9D:32:6C:F8:2C:EE:F3:9A:03:22:CE:D2
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer:       /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial:       01962E98C9A335D44B6B658344E44972F3ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number:          1018
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: jTK1Ob6aTuxMAQsUG/AE3KVKxyWKVXlB5JY8Xffrh6g=)
                          2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c9:a3:35:d4:4b:6b:65:83:44:e4:49:72:f3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=4e73b10775737d579d326cf82ceef39a0322ced2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:15:c6:da:5d:21:99:b0:4b:a3:0d:02:96:
                    00:80:f0:95:9f:e4:5b:21:da:e9:5c:46:8b:8e:39:
                    75:a5:7a:31:e5:b2:33:b6:dc:9c:04:0f:76:8b:2f:
                    d7:ed:3a:1b:62:50:85:02:10:fd:35:55:d7:bb:80:
                    2c:83:52:2e:f5:64:3d:cb:fd:53:30:74:70:e6:38:
                    67:b2:2f:d1:23:02:45:8a:cf:63:f7:ca:3f:0e:d2:
                    b0:06:72:d6:2b:99:e1:e2:49:66:0c:ca:d1:5c:3d:
                    6f:52:e0:a5:89:fd:41:d3:b8:c8:a2:56:f3:85:bf:
                    1d:29:28:3b:aa:27:53:71:c2:09:41:2c:46:bd:5e:
                    6c:3f:7d:38:d1:52:85:2f:03:1a:cc:c1:cc:84:b9:
                    3d:28:de:56:30:2a:d7:93:8a:1b:9c:95:4f:ce:de:
                    f1:ee:8b:0e:24:6e:59:07:b3:cf:bc:49:26:40:b7:
                    7d:a3:91:60:66:48:a3:64:24:75:8b:dc:d7:92:28:
                    4e:84:fb:89:ab:50:93:d3:33:3e:36:f5:97:2a:3f:
                    26:35:eb:ca:1a:6f:de:d5:93:58:55:bd:39:35:15:
                    24:6c:de:48:83:e5:89:e6:03:70:53:db:f8:e0:81:
                    54:06:6a:e7:dc:ec:35:89:b0:ca:2c:e4:85:c0:b2:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:73:B1:07:75:73:7D:57:9D:32:6C:F8:2C:EE:F3:9A:03:22:CE:D2
            X509v3 Authority Key Identifier:
                keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:77:45:e6:95:19:f3:e8:48:1e:5a:d7:31:03:c6:d7:60:56:
         a8:61:33:b3:69:65:8e:40:7b:87:8d:77:fd:3a:b1:f2:53:78:
         d4:af:c2:17:a1:a1:14:aa:51:a1:ee:49:38:10:64:7a:17:dc:
         55:22:89:cd:0a:c4:ed:11:45:9d:e1:f7:b5:d2:69:a5:d4:46:
         5f:24:a3:89:b8:d9:bc:dc:a2:c9:63:d3:b3:e9:90:8e:99:15:
         0a:44:37:76:dd:30:be:57:7a:a8:5a:b4:b3:99:5f:79:11:12:
         0d:41:24:70:67:91:63:81:94:c2:78:26:61:ac:62:3f:a6:d3:
         b2:5c:52:2e:f7:60:e2:00:66:e6:1b:d7:38:6e:4e:a2:5c:65:
         6a:9b:08:db:0b:2f:1a:37:70:0d:a5:20:61:e8:14:b4:a2:92:
         e1:0e:df:4a:87:72:1e:82:e5:40:6b:22:b3:31:3e:29:44:5b:
         5b:95:80:72:6d:f1:40:27:5a:d9:6d:1e:23:4d:ff:6a:0b:91:
         28:cd:e7:03:cf:ab:9a:49:10:21:92:87:2f:06:63:b0:57:c2:
         3d:5c:4c:99:13:67:6f:8e:c7:09:57:ab:ee:22:ee:36:34:0e:
         f5:4d:48:25:3e:e7:71:56:ed:ca:2f:1c:2e:11:b8:1f:48:1f:
         3c:72:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----