Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
File:                     Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft (raw, json)
Hash identifier:          wHDIvsK8kdA/ONF7fK/l7QPHzKvTlJn2f/azuuHraHI=
Subject key identifier:   3C:5E:0F:85:A4:19:9F:88:7C:6A:86:46:74:22:3C:41:C9:AF:A2:95
Authority key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
Certificate issuer:       /CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Certificate serial:       01962F06DC9D74D5CF9369384F1675D2A522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
Manifest number:          06DD
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: HJqh9LPhNU96BEOoiCFDiOzAQPY.roa (hash: Kn8EOpw3bBi0iQXW8fO4Sjg58AKy7QrqKxqXj68ts98=)
                          2: Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl (hash: Zy/c5hLc8uG6flKGilw/IsQrFN1Pet9vJ34qHU5gYJA=)
                          3: iDHFx2Zwy-f_IDJH8ymgCbum6nA.roa (hash: BRwzpnb5uRZBZyO/g9hikbLOanVTPu4OHJMhQpM40Gc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dc:9d:74:d5:cf:93:69:38:4f:16:75:d2:a5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=3c5e0f85a4199f887c6a864674223c41c9afa295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:a1:23:a3:9e:c0:45:3f:40:68:14:78:47:
                    e8:77:c9:f9:e7:b9:1a:1b:dc:6f:6b:a0:09:92:74:
                    61:da:66:fa:69:bf:a4:0e:6f:0d:35:29:0a:85:49:
                    cd:99:0f:f1:7e:30:0f:c3:87:dc:81:cd:58:3a:15:
                    d1:7f:5b:20:7e:64:78:09:a5:5d:ca:ce:3f:34:c1:
                    2c:83:db:fd:11:a2:08:63:33:f2:5f:64:5d:ed:87:
                    a3:5a:a2:9f:7e:eb:fe:69:4d:39:9a:c2:ec:d7:27:
                    07:33:d7:3a:d5:8e:b2:ee:f0:be:62:a0:fd:fb:15:
                    57:c6:ed:69:eb:fe:37:f9:58:24:73:55:d0:65:a4:
                    9f:b0:26:7b:3b:87:1a:52:8c:2d:24:f5:5e:71:13:
                    06:a8:15:83:c5:c6:07:12:c5:f7:39:6b:6c:7e:ac:
                    68:c2:f4:d5:f2:9b:39:4c:e4:cb:42:a9:01:ab:16:
                    9a:20:89:71:1b:9e:bd:2d:f1:5a:88:25:b8:d4:3d:
                    a7:67:81:c9:96:dd:2c:65:2d:d5:b1:f3:85:3e:f2:
                    48:f5:56:01:fa:fc:3b:a7:3a:af:4e:f6:2a:00:93:
                    52:81:6d:f3:d9:4a:1a:b2:06:2c:8a:15:c3:23:12:
                    39:ad:82:d1:9d:20:cc:e8:a6:69:06:c3:e0:57:5f:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5E:0F:85:A4:19:9F:88:7C:6A:86:46:74:22:3C:41:C9:AF:A2:95
            X509v3 Authority Key Identifier:
                keyid:66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:7b:d3:72:cc:d6:52:d7:63:80:e2:7c:73:c4:af:22:9c:02:
         b0:ff:ae:95:22:0a:9a:96:52:92:0d:dc:1e:37:ea:89:5e:a6:
         13:14:55:eb:21:98:15:4d:58:c0:3f:00:cf:f7:47:7c:6c:cf:
         26:8f:a7:b5:76:70:0b:db:12:c2:f9:6b:3c:6d:2b:db:a7:84:
         d9:44:31:7b:52:dc:66:8d:4e:6c:1d:c9:ff:37:35:a0:e0:6e:
         b4:91:a1:70:a8:40:27:5a:59:a3:84:38:59:f8:2f:ba:6b:3c:
         49:1a:26:41:b1:88:69:b6:ef:7a:6a:32:4f:40:66:ee:ba:56:
         0d:11:04:a6:58:25:9f:5a:51:11:89:7b:83:44:43:50:27:f6:
         a4:ee:78:dd:6d:f4:1b:ef:e6:97:1b:35:1d:20:30:02:f8:fd:
         d0:5b:12:c5:2d:96:79:b8:a5:29:f6:2b:e4:c1:a2:a3:6d:39:
         03:33:60:68:3c:4b:5a:75:6b:b1:3a:6b:43:48:13:e3:4c:1d:
         8f:e6:63:2a:d3:72:db:88:87:e2:cf:61:ef:aa:5d:ec:ff:38:
         e7:f4:ab:e4:59:63:2a:db:d1:ca:18:92:5f:cb:a4:c0:2f:4c:
         4d:f4:3b:3e:71:b7:3d:40:e2:f3:15:f4:53:75:8c:0a:fa:c0:
         d0:6c:19:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----