Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
File:                     ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft (raw, json)
Hash identifier:          vuyiHOPnkroixhlN5JOZhLV7WwVT8EkTWMx1PN/lgI4=
Subject key identifier:   2F:82:9B:FD:C7:6B:CE:10:18:DF:59:71:54:54:B6:05:A6:BA:E0:8B
Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
Certificate issuer:       /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Certificate serial:       01962DF42A2053F5D02DF006BFBE57AE90DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
Manifest number:          0415
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl (hash: eIJYcJCRwW9Egs2iQOKvIQHmDt0+J9FHasFuQdOveOc=)
                          2: qoEqQd-KonLGkAm_wguz4NaqHfs.roa (hash: E6NKTVGy2K4uHsRTO20RHuS+xHYcScb4tSIex+a8NyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2a:20:53:f5:d0:2d:f0:06:bf:be:57:ae:90:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=2f829bfdc76bce1018df59715454b605a6bae08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:57:20:bd:12:09:e9:4f:6a:65:fb:b9:b3:
                    cb:13:f1:05:66:75:ef:83:af:c2:5a:b2:d8:92:44:
                    10:9f:03:3c:21:9f:b7:00:24:78:7d:d9:23:69:1a:
                    d6:83:02:9a:2b:32:a3:da:02:30:c4:3b:27:45:e6:
                    a0:3a:48:72:c2:e6:91:b1:50:3e:56:a5:e0:6a:02:
                    cf:5f:52:3a:ce:23:13:a8:bd:d6:a1:7c:12:c3:dc:
                    4a:b1:04:97:4f:b0:74:0b:74:31:23:aa:d7:eb:01:
                    bc:64:38:68:aa:19:dc:0a:a3:8f:a2:17:b3:b7:41:
                    8c:63:be:00:57:8a:f1:ec:09:6b:52:1d:10:d8:04:
                    b1:c5:60:d9:e2:0a:4b:eb:1e:06:6b:ce:02:1d:bf:
                    25:93:c2:79:88:e5:67:26:d0:67:81:47:45:d4:10:
                    b8:2b:a2:56:f7:3b:f3:b1:67:e1:66:64:21:c5:d3:
                    1a:bf:1d:04:39:fd:c7:62:8d:e7:6d:0b:43:25:e0:
                    f9:4b:ff:53:00:ce:91:c5:82:75:e9:33:6a:e9:66:
                    46:ff:4e:fd:35:c1:26:92:92:c4:f3:1d:0f:94:9b:
                    7d:a8:39:5c:ee:7e:6c:58:17:f0:c9:e6:99:be:13:
                    f5:98:fc:4e:e8:77:21:0e:1a:fb:ff:a9:e4:ae:8f:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:82:9B:FD:C7:6B:CE:10:18:DF:59:71:54:54:B6:05:A6:BA:E0:8B
            X509v3 Authority Key Identifier:
                keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:38:8a:24:81:5d:d2:f4:b4:8d:0c:b7:a5:1c:cc:df:a0:
         a8:76:28:c9:60:f0:80:72:16:79:15:a9:b5:63:4a:69:57:d1:
         41:5b:bd:6e:4c:f3:6b:7d:c0:9f:ea:47:4d:2f:68:8f:6d:4e:
         ba:9d:b5:96:6f:82:7d:49:3e:cb:55:fc:6d:d9:21:2d:f3:01:
         ac:31:87:f2:2b:9b:ee:ce:70:77:94:03:d7:1b:6d:68:a1:20:
         74:f3:9f:64:80:07:e3:29:3a:04:70:17:90:98:73:d8:09:65:
         95:ab:00:57:74:23:11:bb:27:01:ae:75:d3:a5:10:e0:43:83:
         3d:5a:cd:58:d6:e6:52:4d:91:ca:c7:88:b0:65:b9:20:a6:ec:
         69:97:e7:48:b2:4f:cd:3b:f7:d4:d8:54:0c:39:16:c0:26:44:
         3b:e5:51:d1:df:20:ce:75:08:a6:d1:c2:8f:28:b3:46:c6:47:
         90:bb:9d:f2:4e:ce:be:cd:ea:45:be:33:44:06:57:14:90:53:
         da:e5:b5:63:cc:5d:52:ef:fa:87:40:4a:58:1d:a8:c8:ca:fc:
         77:3d:fb:75:5c:66:fd:e9:6d:74:b7:1a:96:da:68:ed:b0:88:
         49:3c:ab:4c:ca:7c:5d:2d:f9:e7:14:5b:95:70:04:b8:b6:cc:
         41:b0:8b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----