Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File:                     ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier:          pd+6NqKqtKaknnzGDhZAo3qCrTMHeQ4Ml9NzZ+lKT8c=
Subject key identifier:   22:0D:DF:02:56:61:D1:2B:26:08:C0:03:CD:EC:35:89:5C:0D:0A:56
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer:       /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial:       01962E98FB947064CF431F373500C847940E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: Dsrb8/ViogdCyofDuQW1YXHcIfTu0P7+1rMSNa9A/kQ=)
                          2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fb:94:70:64:cf:43:1f:37:35:00:c8:47:94:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=220ddf025661d12b2608c003cdec35895c0d0a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:65:4a:4f:40:e7:45:ba:de:92:b2:1e:9d:
                    cf:c1:fc:d5:71:10:0d:25:b3:3b:2a:4f:d9:f4:37:
                    80:97:fc:31:a7:d2:0a:3c:43:d1:85:43:c6:e2:bf:
                    ba:44:e4:6d:ea:78:28:f4:23:47:6e:cb:a5:e2:a8:
                    98:2b:20:eb:f1:94:fc:e5:74:3e:37:d6:88:b9:95:
                    50:67:2f:c0:30:0d:a1:21:3e:09:1c:b3:9f:9a:2b:
                    b3:69:3d:4e:40:cc:a6:f0:41:40:3b:f2:d8:0b:a9:
                    25:a1:95:17:81:38:9b:bb:29:9a:49:cf:53:74:a4:
                    5c:05:c9:79:55:3b:1a:4a:b1:07:62:61:d9:73:47:
                    a5:81:d3:92:d0:cf:15:54:25:f2:35:93:e7:94:bd:
                    b8:ee:6c:9c:eb:c3:47:dd:a9:f5:62:1a:fa:ba:ae:
                    5d:e7:a7:25:8c:00:8a:28:a4:15:cb:e7:6c:02:8b:
                    53:61:33:f7:ea:b7:c5:93:90:1e:94:b3:5a:3a:bb:
                    2e:08:e2:76:c9:2b:b5:60:07:71:fe:3b:d3:f7:0e:
                    71:72:d4:8b:a9:64:8f:2e:3d:70:63:f0:56:97:b6:
                    4e:b1:0d:f8:bb:d2:3e:e5:db:61:03:73:d5:73:eb:
                    61:0f:9d:18:b5:a7:60:53:06:c7:f5:63:95:ae:1b:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0D:DF:02:56:61:D1:2B:26:08:C0:03:CD:EC:35:89:5C:0D:0A:56
            X509v3 Authority Key Identifier:
                keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:05:af:72:9d:8e:ea:d1:74:4d:15:28:90:74:0c:aa:9e:32:
         dd:93:07:ad:00:86:f8:8f:f3:54:3c:20:0d:d4:35:b6:c9:16:
         47:e6:29:1e:95:74:a3:39:3a:29:f1:9e:e7:7a:4e:40:76:17:
         a6:82:fa:45:8d:38:56:65:a5:c4:f0:1c:ba:2b:d2:88:02:cd:
         70:a8:f9:e2:c3:15:27:db:1f:c0:d3:ea:8d:5a:a7:10:39:ea:
         86:80:49:cb:1e:e7:49:94:da:c8:2e:1b:05:14:08:7f:e9:19:
         f6:ab:57:a2:98:eb:ed:b7:8f:0e:b0:d7:1b:62:99:b7:2f:cf:
         74:37:61:6a:13:8a:20:2d:8e:25:32:50:d4:6e:37:7d:d7:fc:
         66:da:07:7e:00:8b:5b:5b:8f:f7:80:65:b7:0c:6c:cd:95:e9:
         03:00:3d:78:68:8b:8e:2f:d1:16:19:b7:9f:55:0e:cc:2a:23:
         2e:b9:e6:a0:07:99:5a:70:75:41:a8:55:ba:17:5c:31:b7:f3:
         15:f2:5a:20:a7:df:24:4c:10:97:11:37:42:85:04:4f:25:34:
         3e:5a:bb:e0:04:fc:36:04:2f:ab:f7:24:ff:fe:af:b6:57:8c:
         5c:c5:9d:8d:71:63:b1:79:94:d6:8a:9d:31:22:c2:9a:9c:17:
         10:9e:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----