Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File:                     ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier:          zWiEnj1wk3EJvhmr3Gh0a39kDwX0Fn2CIb9dKVQwZms=
Subject key identifier:   84:E2:5D:5A:6F:B8:D6:76:E8:3E:5D:02:8E:2F:43:3E:12:4A:E7:8D
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer:       /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial:       01962DF4335B4F52705E5988A6EA698AB9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 27WBhhpGCu8KcUXHgHNDtyT7qA4.roa (hash: hASVoi4FkuHDPpmp5IMQcLI7MKWjHmB6IplIj3b2UNs=)
                          2: BlXtwuXJZi1FsUYJseJuuvLHwG0.roa (hash: E+H4MQ+p60pNwEw6UNfCnrSspvLH+GiOyo4ssEl9XXQ=)
                          3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: dcwz/ZsU1CSqCgDGiClnMWHWp7lthC1HuO+y+cxbtds=)
                          4: l7PaOk1ocbrgfH7RkR-EmGKNBYI.roa (hash: 2MdjtNxo4ObSDeeX352JxmkPKpeMrJB/59RsZtzSS9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:33:5b:4f:52:70:5e:59:88:a6:ea:69:8a:b9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=84e25d5a6fb8d676e83e5d028e2f433e124ae78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:66:69:87:d7:3a:82:82:95:68:11:39:d0:
                    73:e9:e4:ba:96:ed:a7:44:25:4a:df:05:6f:bb:a9:
                    d5:b2:54:c4:f4:e9:40:eb:2d:f8:1c:93:0b:4d:b8:
                    f3:a3:fc:9d:35:64:4d:4b:0a:09:5d:31:23:43:6e:
                    94:a7:3a:c8:9d:de:a9:84:62:99:67:69:68:4b:ee:
                    10:7d:8c:4d:01:ac:5f:6c:c0:d3:d2:3f:ab:17:8a:
                    ff:ad:1c:57:79:47:7b:d1:5b:f6:6a:9f:6b:81:e3:
                    0f:e5:eb:d4:a1:5e:60:a0:39:04:c2:2c:60:38:9f:
                    33:b5:22:de:84:e0:6d:fc:6d:47:85:15:f9:65:a8:
                    f8:c5:f2:90:da:1d:5e:b9:12:98:6c:ff:48:a7:27:
                    17:0c:a9:89:55:ca:70:1c:d9:7a:75:5c:dc:67:db:
                    5f:78:9e:83:d1:40:c5:d0:69:84:f2:3c:94:e6:56:
                    3f:05:da:d8:fc:5b:e1:09:9d:03:4b:a2:25:61:a8:
                    6a:b5:91:0c:72:c7:e7:2e:37:1a:fe:70:a5:dd:02:
                    9b:7d:c6:8e:95:ad:f9:15:46:21:b4:ab:0a:70:71:
                    6f:9c:22:52:6e:bb:00:46:1f:87:0f:e5:80:9f:b4:
                    71:a4:47:36:19:12:e0:f4:cf:7c:3f:43:73:6f:1f:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E2:5D:5A:6F:B8:D6:76:E8:3E:5D:02:8E:2F:43:3E:12:4A:E7:8D
            X509v3 Authority Key Identifier:
                keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:85:49:9f:3e:3d:c6:c3:a5:c2:ad:16:24:9d:ec:5a:14:
         05:c2:8a:66:40:43:b2:74:b8:f4:96:cf:52:8b:de:3d:27:22:
         d5:58:9b:e8:3b:dd:2f:9f:e9:42:65:a2:80:f3:7e:6f:fa:41:
         40:67:41:bb:e3:09:30:88:19:d6:5c:6c:5c:b5:30:89:65:e4:
         60:ad:a5:80:66:75:92:6a:ea:27:41:54:e3:f7:2b:19:9b:ec:
         e8:1a:fd:58:e5:fd:5e:19:cd:47:b6:48:4f:54:62:fd:8c:c4:
         b4:bc:f4:8f:8c:6c:7b:db:3a:52:eb:82:5a:65:72:1e:00:ae:
         02:4a:90:6c:90:13:6e:da:05:99:62:71:63:73:23:be:43:f9:
         ae:8e:3e:08:d2:49:ee:75:1a:43:fd:65:4f:27:f2:11:88:fa:
         1b:70:80:e8:37:82:cb:ac:51:c7:9e:25:65:1e:1a:ce:92:7b:
         f3:9a:11:e3:20:29:ae:87:8d:ae:7a:a2:0e:65:c6:1a:c8:53:
         f6:32:bd:44:4a:af:98:80:c4:5a:ae:64:5e:8d:f1:11:89:1c:
         d2:43:b6:a2:08:44:d6:fa:1f:47:b2:96:cd:45:72:71:38:92:
         0a:c1:19:9b:e4:04:38:2c:f7:fd:6f:72:c6:87:6f:4c:ad:9e:
         b7:dc:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----