Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File:                     ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier:          GPDC/XCgw+fwyhfCRd57cL5x7yHA+85MaDB51e8Fjck=
Subject key identifier:   6A:8F:E6:C6:80:6C:47:1E:54:53:7A:C3:59:A6:43:82:53:E4:CD:A2
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer:       /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial:       01962DF39733C8C907067CC42B5B2DA1FE62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: HFN5MH980DuANiJdbkL6ohnJj_k.roa (hash: Em5iJ0QcHb70vMs6Q6eEnq42l8uUpkT28Ocl0kx6uPc=)
                          2: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: 1pf9WZWZRRE+tWcBHRyIvhI9TTuks/BZkotSA95ndWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:97:33:c8:c9:07:06:7c:c4:2b:5b:2d:a1:fe:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=6a8fe6c6806c471e54537ac359a6438253e4cda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:ec:11:48:69:fc:70:56:06:bd:f3:31:a7:
                    b2:d1:52:f5:24:32:6e:c7:3c:a9:93:a7:05:4a:f2:
                    4d:83:97:b7:98:69:f6:63:d5:e9:8e:ff:30:f3:4d:
                    84:61:da:86:a3:38:ee:98:10:e8:31:14:f7:ab:86:
                    f4:df:55:8d:14:6a:9c:8f:f9:99:89:a0:1f:21:43:
                    21:bc:bf:72:bc:b7:0e:78:81:98:91:49:f9:80:83:
                    e8:94:1c:07:d8:c7:6e:e1:41:6c:9c:11:13:86:18:
                    9b:12:73:9c:bd:c9:d0:c0:94:3a:2b:30:18:08:d6:
                    53:ff:0f:c7:61:95:01:05:48:25:a5:d1:ba:51:69:
                    36:10:bc:62:5c:4b:d5:66:8d:bc:bb:57:00:84:87:
                    12:46:4a:51:bf:53:4b:dc:da:0c:05:4e:1c:b9:88:
                    e4:c2:c7:51:94:f5:0a:1d:13:b7:51:be:ce:cf:0f:
                    79:4b:5f:0f:a8:ee:bb:2c:28:2a:17:81:cc:9e:a4:
                    d3:4d:e6:0c:6e:2e:18:cf:e8:77:c4:76:e4:b5:1e:
                    9e:9a:ac:e1:d6:d4:a0:08:07:3b:31:b4:96:c1:db:
                    f8:51:d1:67:f6:d2:13:8b:ff:66:59:47:4b:26:75:
                    62:84:50:75:5c:ba:d3:d5:27:9f:c2:d7:be:2d:42:
                    a1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8F:E6:C6:80:6C:47:1E:54:53:7A:C3:59:A6:43:82:53:E4:CD:A2
            X509v3 Authority Key Identifier:
                keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:20:4b:c9:2e:5b:5b:44:df:03:7e:aa:52:af:44:73:2d:56:
         8b:28:f7:57:53:8e:2b:dd:d2:ec:7f:f5:b7:04:c6:82:6d:d0:
         42:b7:c3:b8:ef:88:2f:8e:1d:01:6c:42:3f:1e:af:aa:60:94:
         58:a7:ad:af:7f:52:5e:82:d8:f6:b6:9b:a9:98:71:35:68:7d:
         3b:ce:e1:bd:8d:0f:43:0d:bc:01:08:9a:60:fe:ad:9f:23:2b:
         8d:13:11:16:e9:09:84:ce:52:61:bb:6a:9f:51:d8:09:1b:3b:
         31:04:96:25:fc:ca:54:14:1b:8f:d6:bf:94:93:ac:de:4b:a0:
         11:ff:7e:89:ce:6d:4f:77:60:c1:9d:cd:cf:09:05:9c:7e:4a:
         fc:e9:f4:4d:ef:ed:e9:70:12:32:8d:8b:b4:7c:60:82:9c:21:
         05:a4:5f:48:25:59:5f:06:20:11:f8:ae:32:08:79:d1:d6:9a:
         b1:ba:b1:6a:97:92:25:62:3b:da:b3:e8:86:e4:84:37:fa:d9:
         31:4b:c0:43:8a:fd:ed:f8:84:8d:79:33:c6:7d:18:db:8e:bb:
         35:90:90:11:6d:e3:48:22:aa:6a:01:05:13:8e:37:78:5e:e9:
         0e:93:24:41:17:bc:21:eb:25:47:0b:d5:bf:a1:12:99:f9:89:
         33:db:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----