Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File:                     ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier:          NptleM1vrO3CXGduRa+03LTC28L1TI3q9DLzf8dNapc=
Subject key identifier:   66:A9:99:E1:5A:C8:6F:38:F0:58:FA:A5:B8:A2:F4:7C:A1:4A:AD:F5
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer:       /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial:       01962E98F1B1D50755C29FFC075AEF654CB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
                          2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: TYMvFz1+swGZKksRtN+YFmKugJ5cIaoB7p1yGfhZAVg=)
                          3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f1:b1:d5:07:55:c2:9f:fc:07:5a:ef:65:4c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=66a999e15ac86f38f058faa5b8a2f47ca14aadf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:14:31:e7:7a:b8:e3:03:79:ae:88:f7:41:
                    a8:bf:16:bb:b3:5c:9a:25:08:b3:4c:52:87:24:75:
                    82:8b:64:15:83:12:fd:47:38:ee:e0:35:47:5f:bd:
                    e4:b4:51:ce:93:6d:b1:a8:15:9f:6b:73:f8:63:2b:
                    cb:46:6f:81:1d:8f:be:18:0f:3d:a2:f8:77:67:32:
                    a9:21:ba:aa:7d:63:cb:96:38:86:cb:24:5b:ae:06:
                    43:17:52:e0:da:dc:3c:3a:ac:9a:8a:60:1b:0f:07:
                    12:80:80:08:0b:50:41:99:2e:86:14:e4:38:fe:42:
                    ee:c8:8f:45:b6:a5:c1:36:09:fb:65:15:52:62:b6:
                    1f:a0:fb:35:7e:ce:26:2a:79:19:fb:b5:ae:57:6e:
                    f7:c5:f5:65:0c:3b:81:3e:82:cf:fb:71:fe:cc:94:
                    d3:48:23:6f:ae:df:17:32:ea:95:32:a1:de:c7:81:
                    9c:9e:34:19:4e:e4:4b:23:65:6f:52:63:de:6d:63:
                    c6:90:3b:9b:b4:d2:55:df:b8:48:38:b5:59:f7:1b:
                    2c:d1:5f:aa:1e:12:9e:57:1a:c4:74:a4:0a:47:98:
                    a8:ff:38:1b:0e:7e:77:c9:44:d0:7d:f3:bc:32:7e:
                    b3:82:91:2e:2f:cd:f3:ba:83:43:6f:ff:65:b3:5b:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A9:99:E1:5A:C8:6F:38:F0:58:FA:A5:B8:A2:F4:7C:A1:4A:AD:F5
            X509v3 Authority Key Identifier:
                keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:85:76:43:55:7c:8f:36:ed:25:7d:5a:bb:de:1d:1e:fe:
         99:c4:d1:7b:bd:a9:eb:32:67:3e:9e:eb:8e:f8:1c:7c:10:26:
         1d:97:69:d7:d1:28:6b:11:5e:a1:26:9b:2c:74:4d:a4:eb:af:
         33:58:06:c7:62:32:6d:22:a8:b5:f2:18:91:db:bb:ef:0a:b7:
         a6:39:2d:9b:5f:d7:37:b5:b7:be:a5:ba:76:b4:d1:06:b8:c4:
         8b:31:23:8e:5a:92:be:e0:11:d6:1d:6b:5b:76:43:ca:b5:51:
         87:e4:ea:64:aa:4a:9f:86:37:be:65:99:2b:ef:b2:86:d0:52:
         d7:7f:59:b0:16:2a:4e:db:ab:aa:71:8e:15:4d:ad:68:7a:8e:
         e4:b1:c3:79:b4:0c:bd:3e:5f:de:cb:0e:cc:c6:7c:bd:0a:99:
         7c:57:28:2f:b2:9a:b5:db:a6:08:fd:db:af:26:09:6f:18:80:
         c3:af:30:ff:8a:92:c4:bf:10:1a:59:59:25:09:c3:99:fb:7b:
         95:44:f1:8f:28:d4:f2:c4:d4:8a:15:4e:ae:f5:47:4d:71:4a:
         d6:5d:6f:62:ac:50:cb:2c:dd:29:81:c6:b7:c5:7b:13:04:83:
         42:28:6e:1c:2a:40:3b:28:d5:92:fc:e0:ee:4b:75:4d:2c:dd:
         94:20:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----