Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
File:                     ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json)
Hash identifier:          fF9ZKjIfxOshI5jIAfjOim6mmndPgnmoYJ50zSyWU+I=
Subject key identifier:   33:E7:55:1A:A6:3A:5D:A0:38:4E:B1:26:C7:BE:DE:7C:B7:7D:1A:E4
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Certificate issuer:       /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial:       01962F745854446009DDCD894F24438EF0AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
Manifest number:          0DFD
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: WDytPlEkENuuTylUVyrM39n3hIckvSzv+cEinRYRXQg=)
                          2: mcf7JveA9sP5q1fzjwTXe1Y9B94.roa (hash: vxgrGFoktHB0oWvn12RjOAHTGS54BioUpfkDuJPEQhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:58:54:44:60:09:dd:cd:89:4f:24:43:8e:f0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=33e7551aa63a5da0384eb126c7bede7cb77d1ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:8f:7a:23:f0:7c:e6:9b:50:0c:b7:4c:5d:
                    e1:ec:03:ec:24:f6:89:25:44:a9:e1:db:d1:4b:45:
                    0d:11:4c:da:a4:af:ed:bb:d9:c3:8a:8d:de:4b:6a:
                    dd:77:26:5c:de:0e:b3:19:a0:f8:a0:72:97:e5:ff:
                    bd:d2:e3:f1:5d:aa:40:33:6f:eb:45:b2:6d:96:26:
                    ce:90:77:85:65:04:41:0c:26:98:40:6d:7f:24:ad:
                    72:09:03:79:d8:10:e4:02:2d:bc:c6:3f:40:db:88:
                    a4:58:56:e3:9f:9f:c7:71:ca:4d:db:e5:5c:b3:a8:
                    19:39:84:3a:18:36:50:96:85:e1:73:26:53:02:00:
                    25:62:73:dd:8b:4a:27:38:a6:10:4d:60:03:8a:70:
                    81:60:4e:f2:31:ea:e1:f0:0e:22:05:94:ee:9b:af:
                    d7:45:9a:4f:11:99:10:23:d8:24:ca:a6:af:08:a2:
                    be:b1:a9:d0:37:28:c0:c6:fc:c4:ca:65:26:3e:99:
                    e1:14:37:b7:5d:3e:b7:9b:4b:f5:b9:8a:9f:40:7d:
                    ef:7c:9a:ec:39:ae:cb:42:e0:f2:b8:02:60:7e:96:
                    00:06:64:50:58:bc:0f:be:37:dd:c2:7c:25:b3:aa:
                    78:93:90:81:c3:d4:29:80:af:b2:36:7e:93:e3:b5:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E7:55:1A:A6:3A:5D:A0:38:4E:B1:26:C7:BE:DE:7C:B7:7D:1A:E4
            X509v3 Authority Key Identifier:
                keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:83:f0:a2:e0:6c:31:ba:69:61:47:d8:ed:38:12:84:28:
         11:33:31:c1:8a:09:d7:2e:93:8f:71:3e:fa:13:14:84:b8:75:
         34:c9:4c:8e:d2:38:f7:8d:82:6c:f8:df:84:73:87:15:4c:b9:
         36:4b:81:36:e7:eb:b3:c3:82:d2:af:d3:1b:c1:dd:f7:c2:09:
         62:14:ea:45:26:5e:08:5d:56:fb:7e:13:f8:8e:c9:10:18:9a:
         63:37:44:d4:6f:85:0d:e5:97:79:64:0d:31:75:41:43:f1:f1:
         1a:59:f3:07:7b:b0:c8:aa:fc:f5:35:67:bf:89:26:4e:ca:b2:
         e1:31:70:37:6f:dc:fe:7f:ef:ed:99:84:8d:43:3a:9f:ff:f3:
         37:d0:d3:96:29:ae:3d:16:5c:a0:57:5d:19:3b:36:1f:91:a0:
         d4:df:35:34:b1:14:ad:fc:62:a5:0e:61:e0:56:74:c9:17:d0:
         ab:0f:fc:07:65:16:21:9f:63:22:9b:ce:3c:60:91:68:40:1c:
         a6:39:54:cb:f2:f6:3c:59:27:e3:0e:06:9b:2e:4d:9a:ba:d3:
         71:13:43:4c:92:b4:7f:7e:31:4b:14:cd:56:3b:f0:aa:ee:24:
         4a:e6:15:46:e2:4a:c1:7d:d7:06:37:b0:9f:74:c6:12:f0:df:
         21:46:8b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----