Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File:                     Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier:          smLX1ICpc1dYAIleBC8uCDLdan6qPT4FAnrwg24Heh0=
Subject key identifier:   81:C9:9B:DE:CF:7C:52:AE:82:D9:4D:97:18:07:04:90:92:AD:B9:9A
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer:       /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial:       01962E2B1A4BC1281597D6F9F78D17DD013F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: Rn5W7oiVYRufZC2Cc9HQB686zNI.roa (hash: r6LX/rQ2IMQ0lnqajopwaJaJ6RgScSLx/FlgSbqRLTc=)
                          2: XHUUpmsTIvK_KTF6Ns7MAyI399w.roa (hash: Hd7LpYgtsmwvaWEwTnrD15eJzW3l7MahPrkz65fNT1U=)
                          3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: 9mSKO0/BvcSpr9iWhj0N03tq3Pn64L+qiNMGCKBSWng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1a:4b:c1:28:15:97:d6:f9:f7:8d:17:dd:01:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=81c99bdecf7c52ae82d94d971807049092adb99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:9a:65:ff:20:a3:1c:b3:98:82:2b:7f:52:
                    df:62:d6:77:e5:01:80:7b:96:20:cc:39:39:85:a8:
                    6f:7e:b4:00:a7:d3:96:87:c3:b0:f8:3e:f2:2f:20:
                    64:f8:cc:ce:c0:5a:a8:0e:5a:82:6b:ef:07:8a:e6:
                    bd:01:40:ec:ce:f1:f9:84:d9:22:18:97:d8:1c:fc:
                    4e:b6:d4:7b:90:f4:04:f5:08:f1:8b:c0:f9:88:cf:
                    1f:68:a0:14:d7:be:ac:de:36:68:97:a6:3e:f7:7d:
                    56:0b:db:24:e6:74:b1:64:77:75:a6:4f:08:88:0d:
                    eb:10:6a:4a:84:79:14:e4:c2:ae:47:f8:9c:ba:e6:
                    87:4e:a6:3d:59:0c:e9:60:37:40:2d:ba:1a:df:21:
                    84:14:54:2e:74:76:e1:3e:41:d9:73:4a:7e:f8:db:
                    5a:53:7c:76:2f:67:ea:82:45:86:8b:f9:66:af:c0:
                    2c:a4:0a:06:b3:7e:fb:1a:01:9b:80:8d:97:bf:68:
                    fc:27:82:61:3e:b6:be:70:26:70:25:f2:66:bf:07:
                    31:9a:85:30:94:f7:90:ad:dd:10:e6:9c:3e:61:00:
                    a8:79:a2:e6:86:4c:a1:be:6d:0c:2c:dc:04:fc:71:
                    aa:b9:7f:af:ea:1d:14:b3:5d:cc:b6:1a:8b:f8:9f:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C9:9B:DE:CF:7C:52:AE:82:D9:4D:97:18:07:04:90:92:AD:B9:9A
            X509v3 Authority Key Identifier:
                keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a1:64:e2:19:77:f7:65:c6:e1:5e:61:f7:c3:83:bd:10:02:
         3b:47:ce:1b:a4:af:41:6f:b5:61:31:6e:f6:b8:67:4d:af:16:
         19:1f:69:ae:dd:5b:45:28:f6:52:10:4c:21:e8:92:fa:7f:7f:
         4f:56:3e:7f:9b:d3:3c:42:b2:f8:33:f2:04:98:f8:70:c9:c1:
         f4:c9:cf:27:66:7f:f5:9f:09:c1:e2:79:22:cf:4b:69:6d:e5:
         bf:77:f5:b0:4a:37:2e:b9:4d:13:aa:69:fc:bb:6d:5f:d2:a4:
         78:0f:72:2b:2b:02:ab:ff:87:c2:77:9b:d7:37:97:2d:2d:2b:
         45:1e:2f:ed:d5:9c:7e:fe:ff:c8:5b:b1:ea:bb:20:87:f9:10:
         8b:26:f1:ab:69:b0:67:38:df:51:b6:2a:e7:7f:12:d4:71:7b:
         3c:fc:a7:e3:9e:39:eb:dd:97:f6:40:f1:7b:dd:39:72:82:dc:
         74:80:46:28:c9:c4:67:66:85:ae:87:0c:32:20:df:6b:d1:c8:
         9e:1b:e2:d8:90:13:13:19:f0:85:6f:85:ff:38:ae:dc:4e:71:
         75:c3:bd:e3:29:a1:90:3b:f5:b9:bb:c9:d9:7e:a8:b1:aa:f5:
         2c:e9:69:6e:a3:de:89:25:5b:c2:f4:91:e5:d1:cb:31:55:5c:
         76:80:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----