Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File:                     ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier:          YfS72IH2vdPv4rcCi0NFv6OT470zmBcF8qfq4XtD2zQ=
Subject key identifier:   6D:C9:1D:BC:01:D6:FE:B3:2A:E3:65:B5:72:B8:2C:09:96:C6:66:44
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer:       /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial:       01962F3D9DE3DBF0FD53F6A1ABE7A54A732D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
                          2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
                          3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
                          4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
                          5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: nLMtzOa3jYTUAvqIz0BtUvVEGfe4xY/+o5s4heTawH0=)
                          6: aQlOLPDeolF5uYY7VkMgbIlakC4.roa (hash: S5wKpeaQD33X7vEA4AJwuoJHgqZl5CaYGcEVikwgdoI=)
                          7: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
                          8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9d:e3:db:f0:fd:53:f6:a1:ab:e7:a5:4a:73:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=6dc91dbc01d6feb32ae365b572b82c0996c66644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:c1:1a:fc:11:57:0d:5d:df:7a:20:78:6c:
                    bb:15:53:7e:27:07:5d:69:91:db:37:35:55:56:38:
                    c4:c4:89:83:37:0f:7d:c6:ea:8b:08:83:5a:0b:fa:
                    a3:df:a2:d9:71:ff:db:65:df:ff:6f:ba:c9:a8:4e:
                    13:69:a7:88:ee:df:41:42:04:db:04:14:95:5f:f3:
                    15:aa:3f:f7:4e:15:a4:36:5a:49:70:fe:81:29:36:
                    06:2f:af:db:aa:07:b6:00:24:16:a1:ac:b8:8e:7d:
                    6e:86:cb:2d:34:55:09:a2:60:a6:a0:89:d5:b9:55:
                    a0:41:8c:33:c9:c4:7f:11:13:68:1c:2d:68:0a:d4:
                    14:61:e4:6c:78:05:2e:3e:14:37:ee:e3:b4:e6:b4:
                    5a:3a:a1:95:b7:ee:97:2b:0a:1b:0e:22:5d:da:38:
                    59:95:7e:57:67:50:f1:02:fa:ca:ab:66:af:c1:c8:
                    76:e9:7e:cc:50:6e:9e:73:74:e0:82:b2:7c:e4:73:
                    29:26:70:f4:95:75:ec:4d:5f:51:91:d7:9a:48:72:
                    6b:d5:9a:52:5c:fb:70:be:b5:2d:8a:ca:74:cf:a1:
                    a9:ea:cb:f7:01:f4:ca:9f:25:85:a0:a0:bc:c0:62:
                    07:93:cd:a7:90:5a:c9:b1:7a:41:2d:aa:6b:67:be:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C9:1D:BC:01:D6:FE:B3:2A:E3:65:B5:72:B8:2C:09:96:C6:66:44
            X509v3 Authority Key Identifier:
                keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:6b:f7:65:ff:1f:0c:dd:52:65:28:1d:48:45:47:46:b9:
         0a:5d:a2:d5:06:2b:6a:6b:32:37:1e:9b:a7:c4:28:cc:2a:15:
         25:34:d8:b2:6a:e4:99:89:5a:86:29:9d:d9:cc:c5:6f:de:3b:
         49:25:b2:c8:09:df:43:67:f7:46:4d:18:3d:0c:b5:1e:5c:ec:
         05:67:41:ff:22:51:96:60:e6:cd:0a:ef:5b:3f:17:7c:e9:f5:
         bb:81:07:e4:00:03:c2:f4:fb:63:c1:11:5f:ad:27:25:96:02:
         77:99:83:76:7b:7b:1b:a1:83:ea:07:17:19:ef:ed:f0:7c:d6:
         50:be:f9:e1:14:48:4c:2c:55:cf:6c:d7:57:23:02:e1:5c:2a:
         e0:35:32:68:5b:37:04:9a:b8:9a:c1:3b:07:36:c4:4f:8d:c6:
         f7:e0:21:d9:cc:6f:e6:6a:5f:38:56:09:e8:b1:99:dc:2e:87:
         5e:1f:d8:d2:ad:2e:fb:68:2a:ab:a0:75:0c:76:25:81:d9:7a:
         4d:83:d6:5b:76:51:83:1a:a0:80:ed:b8:16:54:87:35:71:4d:
         e7:9b:61:0a:03:8a:99:94:65:be:bf:80:1e:e2:33:86:f8:29:
         61:12:f7:de:aa:a8:d9:03:47:93:07:8b:ac:75:89:66:d3:be:
         30:58:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----