Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          eXHKD7/x0bKx+4LhMOKYTxyAv7hfLL1MB4522nmZ/Vk=
Subject key identifier:   E6:77:4A:7C:8C:B0:02:AF:32:88:52:66:65:CC:ED:1B:47:63:0C:8A
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       01962E61E57D1790DF43DF0C57212E200566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=)
                          2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=)
                          3: BKzk8PEv4C-K-dAjelZ2PQmBLbk.roa (hash: 0eLcFnn58Q6bI77SyMiyrXborE81MoDtpAJ0qlI9pZA=)
                          4: XjYbgGRK9V_PFyDlq3G6V2Wxzsw.roa (hash: fWbd0EX3ziv/6uF5wR8i+XeMR7zd9h8m0bOvPg7RJi0=)
                          5: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=)
                          6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: poz8AKwqWlF5qdLkhhaCHpkV4tk8ep1/iJZ/WkfwGGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e5:7d:17:90:df:43:df:0c:57:21:2e:20:05:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=e6774a7c8cb002af3288526665cced1b47630c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1d:85:b0:4d:3f:f7:74:f3:ea:6b:7c:59:7f:
                    ac:9b:04:ee:d6:9e:e2:23:de:73:28:44:44:44:9e:
                    13:be:df:fc:50:8d:c6:05:46:2d:84:ad:7f:e6:58:
                    44:62:be:a7:78:7a:cf:06:ba:ec:5c:b8:8f:07:2e:
                    19:c4:8c:cc:b5:45:63:fe:23:ca:5f:e5:51:79:3a:
                    a3:b9:13:bb:ea:e4:d5:13:98:e6:33:63:26:3a:1c:
                    5c:aa:90:93:61:8d:31:c3:5f:91:ad:3f:e6:de:92:
                    10:b3:21:45:e0:9f:30:42:11:b1:16:66:de:37:82:
                    b2:9a:99:33:81:bd:87:4c:1a:b7:eb:48:e8:7a:0f:
                    ab:01:77:b8:f8:b0:b8:40:a0:d4:0f:ec:85:07:83:
                    77:d1:22:3e:02:c3:c0:d8:77:4d:79:6c:c7:34:7c:
                    5a:de:72:5c:6f:2b:72:b4:b9:d3:8e:0f:53:b6:02:
                    73:56:32:0c:1e:50:51:21:66:bf:6c:14:1e:47:0d:
                    f7:2a:39:06:35:6f:89:19:01:0c:56:d3:d2:88:61:
                    a6:f2:6a:dc:59:af:81:71:71:d0:e9:c9:48:6d:fe:
                    99:78:bb:f1:8c:28:8e:6f:a5:e8:cf:68:82:ec:77:
                    b0:39:47:46:c4:e9:02:24:a7:8a:8e:e8:b8:78:ac:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:77:4A:7C:8C:B0:02:AF:32:88:52:66:65:CC:ED:1B:47:63:0C:8A
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b0:a6:ce:d4:1d:62:04:0f:de:53:9c:1b:55:01:a2:72:77:
         ad:e2:c1:74:60:70:d3:4a:69:73:fc:62:4a:61:17:9c:d4:fc:
         2f:79:66:6c:34:b4:ef:26:d5:b1:94:7a:2f:56:f5:7b:b0:56:
         29:e6:0b:c6:cb:f1:cf:04:78:d1:e1:c2:40:d2:30:a2:a6:00:
         10:9a:05:42:c1:01:a8:f7:95:e3:c6:4f:e9:84:69:20:aa:f0:
         13:c2:e5:04:ea:46:87:8a:6f:a2:50:ba:44:80:64:97:81:42:
         48:ef:6e:02:0e:bd:1b:bb:0d:42:88:e4:3c:91:dc:eb:82:9e:
         b0:8d:48:a2:10:dc:44:fa:c6:1f:ff:be:5d:0c:36:ae:96:9c:
         3f:19:34:74:c4:30:a5:74:c1:d9:20:34:10:23:2f:b1:42:61:
         b2:a4:0f:3c:7c:a7:20:a7:f1:c7:79:91:6f:0f:9e:6b:eb:24:
         3f:28:d6:68:f2:fa:40:78:7a:02:74:0b:f0:46:b6:d5:f1:2d:
         e1:09:66:7e:d2:f4:61:78:1c:19:ed:6e:8f:11:2d:e7:5c:00:
         f8:bf:56:50:3c:0b:98:18:a6:9e:3c:b5:86:f0:93:62:3f:b4:
         c2:b1:91:ed:08:62:d1:12:c8:a6:15:5d:cc:fe:f7:9a:46:76:
         46:a9:39:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----