Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File:                     ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier:          WVCejX+RfShDDfAJNFRBhuO7U7LZJqw24thnSCNzUpA=
Subject key identifier:   7D:5D:0C:FF:12:EE:05:16:F0:88:3D:10:8F:01:E3:68:E4:A8:7A:60
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer:       /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial:       01962E2ACA7135A9C28B52F355EBCD296F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number:          0553
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: 1c920Ct5rOPHF_34AgNrTQyTHns.roa (hash: 3ha9UyAf61XbEV4U4pqec4b6uB2FvJUFQO9xEs0mMB8=)
                          2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: krJUx0uOdrx/u+EMZR6sqhfjA/aBeSLgmvoG5nVsTWQ=)
                          3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
                          4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ca:71:35:a9:c2:8b:52:f3:55:eb:cd:29:6f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=7d5d0cff12ee0516f0883d108f01e368e4a87a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:44:10:9d:82:29:9b:1b:41:38:c8:9f:99:
                    39:0a:6f:f7:f4:44:61:0e:fd:b7:20:12:1c:98:80:
                    1f:63:e3:63:cd:97:a8:22:0f:9d:35:e3:7f:8f:8f:
                    7e:7a:7f:ac:19:be:20:9e:1b:45:41:74:4a:5a:ec:
                    7a:46:37:07:b8:43:fe:9f:6a:52:2c:ad:46:8b:3b:
                    24:ba:7f:2c:b0:ea:1a:02:32:bd:92:78:3d:0a:fe:
                    4d:5a:69:12:58:65:09:ca:b1:bf:46:79:c5:c9:58:
                    ba:e7:8a:72:ab:a5:02:4c:ef:fc:8b:a5:d9:8f:c5:
                    92:2e:5e:13:27:63:f4:3c:4f:2e:c3:da:04:12:be:
                    7d:a1:1b:81:d1:e8:29:a2:b0:7b:0a:ba:ae:1e:a0:
                    9e:48:c1:27:c1:8a:68:b8:26:32:20:82:80:d2:ae:
                    fc:93:a6:c3:86:33:40:7d:b2:4c:12:e3:1a:15:4c:
                    48:59:4d:57:d7:4e:e8:d0:2b:b0:fc:d2:31:bd:28:
                    6f:38:42:06:9d:9a:e2:aa:8c:bc:55:ce:98:37:3f:
                    35:c0:5c:e5:b8:0f:eb:46:8a:87:18:81:d4:0b:0b:
                    cc:d1:5b:35:03:a9:22:3d:98:45:45:2f:fe:64:58:
                    7d:30:1b:d8:10:08:10:ae:ef:74:81:c5:15:3a:3b:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5D:0C:FF:12:EE:05:16:F0:88:3D:10:8F:01:E3:68:E4:A8:7A:60
            X509v3 Authority Key Identifier:
                keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:85:33:c9:c9:d7:7f:80:c4:5b:4c:3d:c1:9f:cc:c9:db:dc:
         aa:57:64:25:1a:02:28:e4:71:b1:67:e3:2e:93:84:f3:3e:f7:
         07:de:bb:c3:f2:0b:6b:12:79:f4:4f:3c:28:89:35:bd:40:f4:
         0f:30:9b:99:a8:66:c3:e1:6a:12:c4:0d:d4:11:60:86:40:a2:
         42:fb:30:e3:08:3f:5a:db:af:00:43:bc:22:85:05:ce:24:37:
         ce:50:ac:65:86:8b:ed:53:58:94:b8:ed:b0:bb:7d:3e:b9:31:
         49:dc:f7:99:df:01:21:fa:0a:2c:be:ac:48:86:3f:27:bd:89:
         bc:e6:12:a4:be:40:9d:06:d8:23:d6:5e:20:dd:31:9c:e3:9e:
         30:de:c3:ee:72:3b:42:f3:d6:5c:55:e9:a6:01:e9:d7:b1:9d:
         7d:76:2d:12:2e:fe:ba:9a:7e:eb:d5:47:7c:7c:a6:95:ff:c8:
         9e:39:d8:90:77:5f:7c:6c:38:84:fe:81:34:c6:29:90:d7:bf:
         fe:71:6c:6f:5b:16:9f:4e:2f:a8:cc:a0:40:38:2f:b5:6e:6e:
         a1:94:b9:9e:ae:d7:86:47:46:e5:00:99:d7:6e:a8:75:7e:b2:
         23:6c:b1:c6:15:1b:b7:39:ea:7a:01:7d:64:a3:bf:2e:0e:92:
         5a:a1:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----