Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
File:                     dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json)
Hash identifier:          DTPUKaT3SWylCfx7KMdgAyznSOlm8HDT/uex3Cmo+gA=
Subject key identifier:   39:74:B1:48:25:22:39:54:B8:FA:87:64:64:02:09:B4:96:0F:48:3F
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Certificate issuer:       /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial:       01962F3DAF70CC9F310FEA0F74325BE5EE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
Manifest number:          060F
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: 6DM2EcyU67ptxBh9GKlJrzks2YY.roa (hash: dGsT7/dH6GvyheXKVe0ZbgWrcxrzH7zYFhEqctDv4NQ=)
                          2: GsWSBNzv988JIATL2hLeFJWT77g.roa (hash: Ly0cVrt55lxuS7TrsXNQWpKEZ4VseFVE3p+bnlbkQgs=)
                          3: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: BvdNrzTXyAlCDoBbhMJ+0Yip9eso8wfzx8ZzWRS99Fs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:af:70:cc:9f:31:0f:ea:0f:74:32:5b:e5:ee:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=3974b14825223954b8fa8764640209b4960f483f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:28:d9:c2:ae:41:11:52:ae:d9:fb:cc:fd:
                    5b:56:ee:f9:1a:e6:78:98:e3:28:0d:f0:0b:30:96:
                    fd:50:6c:be:61:65:f4:47:ed:90:c6:03:39:aa:ca:
                    eb:7c:21:73:cf:c8:82:eb:0a:00:97:3b:5e:cd:07:
                    ac:35:0e:55:f0:98:e1:ed:40:13:e6:bd:0d:0a:b3:
                    86:59:d7:27:6f:f7:33:22:94:c7:d5:25:e8:41:10:
                    f7:f7:7d:b7:8d:7b:96:2b:d5:53:ac:d7:69:dc:2b:
                    fe:72:f6:a0:33:cf:eb:e9:5a:f5:b4:71:a1:d4:53:
                    19:33:19:58:8d:d1:7e:53:28:a3:9e:dc:4c:e9:03:
                    1b:eb:7c:e0:28:71:c1:52:3a:f6:d0:a1:3d:cb:06:
                    f8:90:c8:cd:c4:93:46:ba:0a:68:d0:e4:a4:cc:f1:
                    c3:98:2d:54:86:0e:38:aa:12:c1:e8:62:c3:92:31:
                    a6:7d:fc:8b:dc:8c:bd:9b:67:b5:ba:49:b5:d1:bb:
                    d0:a1:ac:d2:28:54:85:b5:c6:d7:e8:0b:a1:b0:29:
                    c1:a6:4a:76:17:31:42:7a:96:23:3f:b1:db:7b:cf:
                    bc:e0:10:95:e6:d8:0c:26:1b:6a:94:e8:98:de:b4:
                    60:4e:c3:9c:1f:d9:2b:24:ee:13:48:ac:6e:6d:c1:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:74:B1:48:25:22:39:54:B8:FA:87:64:64:02:09:B4:96:0F:48:3F
            X509v3 Authority Key Identifier:
                keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:6f:92:57:cf:c7:6d:34:6a:40:f2:28:96:9f:92:77:89:
         e8:4f:38:67:63:d0:96:c2:89:a3:86:7b:38:a1:5c:52:b1:89:
         07:66:ed:a7:31:cb:bf:07:8b:ad:59:5c:88:16:d9:fc:2d:54:
         3c:91:cd:20:24:3a:0d:f6:3e:86:04:ad:ed:7e:33:9c:61:5f:
         47:62:02:e4:00:0a:af:ce:df:28:63:ad:99:b8:e5:ae:3c:d1:
         4f:f0:21:ab:e4:2a:88:5b:6f:90:9f:2e:36:12:7c:a5:db:6b:
         6f:b4:fc:fb:1b:30:23:a6:fc:2b:ea:75:30:13:96:0c:d6:a7:
         68:f1:4b:ec:a7:26:da:6c:1a:08:c0:a4:bb:a7:90:cc:cb:21:
         41:d2:d7:df:97:81:c3:ec:cc:44:c5:f2:55:02:aa:e4:36:a6:
         89:45:28:db:05:a2:0b:d2:ad:25:fe:5f:bb:11:49:e3:00:7e:
         2c:55:7d:09:12:f6:5e:8b:11:5a:fb:83:87:09:97:7a:dd:e8:
         c9:66:9a:0d:f0:ae:45:da:8b:57:a5:44:c9:4a:29:da:1e:fb:
         3f:83:16:ec:87:7b:55:55:12:6b:0b:bd:81:17:fd:25:31:ad:
         60:df:28:16:c5:2b:b5:f5:ca:8e:f5:0e:42:e5:52:2c:2b:6a:
         93:54:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----