Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
File:                     ZAsfh3LG70hOLNLWYmPy75j6OWg.mft (raw, json)
Hash identifier:          OQM6I0eErgnWN8TAzUH/DmZ+cZxv/sseLsqAw5JzjV4=
Subject key identifier:   8D:52:B6:64:11:A9:75:EB:B8:D1:1F:34:AC:75:88:84:C1:49:37:FE
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Certificate issuer:       /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial:       01962DF42E8215EF7F22610C3D1FFACEB438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: 5sIyZUUxUKqIAWVgUkx5eBGU5N0.roa (hash: 3M5MqZOHY6IgU/oY5PEX9Quago5F235Gft3ZQVLU+EE=)
                          2: ZAsfh3LG70hOLNLWYmPy75j6OWg.crl (hash: DgHyZxsAsYq59F3UEWwO7q7ChYCPBih8P9q38PEziN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2e:82:15:ef:7f:22:61:0c:3d:1f:fa:ce:b4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=8d52b66411a975ebb8d11f34ac758884c14937fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:4d:6a:7d:e9:09:ef:f5:bb:de:dd:3e:fe:
                    ea:62:19:75:1a:f1:d9:47:1b:f6:73:27:66:9f:a3:
                    c3:d2:0c:04:59:db:c6:e5:0c:f4:2a:27:cc:d4:53:
                    97:af:43:16:48:0d:ed:f1:b2:0a:51:5b:93:07:c7:
                    2b:14:28:31:60:f9:23:a6:65:14:bc:6b:db:15:2b:
                    b9:ee:80:1a:7c:96:cf:52:85:82:04:0e:2c:6d:32:
                    04:3f:ce:b5:30:73:1f:d0:6d:26:6c:60:a9:47:d1:
                    23:1b:7c:40:d3:c3:67:a4:35:a8:a7:eb:30:20:1f:
                    e1:07:c4:cf:bc:77:3f:21:62:23:3c:3b:05:2b:1a:
                    b5:26:aa:c2:7d:3e:18:1f:f8:05:5e:15:79:38:19:
                    5e:c9:fc:14:da:dc:62:dc:82:43:d7:a1:a8:84:37:
                    ee:de:16:61:40:63:39:a4:af:21:30:ae:74:f1:c9:
                    6f:a0:f3:60:95:8e:da:d7:18:76:bb:6f:7f:23:6b:
                    57:75:26:5e:14:c8:71:20:18:0a:57:df:b5:e3:4e:
                    c1:a4:ca:4e:27:0e:35:4f:0d:c3:2b:e4:f4:82:6d:
                    26:ec:51:fc:9b:57:ac:74:24:e1:38:9a:1b:5c:e7:
                    c8:0e:35:43:e3:81:45:bd:e7:50:d2:83:20:b9:2d:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:52:B6:64:11:A9:75:EB:B8:D1:1F:34:AC:75:88:84:C1:49:37:FE
            X509v3 Authority Key Identifier:
                keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:a1:1b:5a:e1:25:59:23:3f:6d:d5:4c:15:f0:21:5e:57:
         59:3a:9f:bf:03:a8:97:e8:c8:4d:57:82:a6:91:c9:97:b3:b9:
         53:fe:e4:f3:71:f4:4c:43:e2:b7:5b:6f:05:07:4a:24:8a:02:
         4f:c3:22:34:6f:05:41:4b:9e:76:e4:2d:a2:be:a0:4c:fb:8c:
         39:e2:01:d8:b9:f4:e4:5e:17:3a:b2:d0:76:57:fb:07:67:a9:
         64:68:ea:8e:56:1d:a1:29:9f:ac:45:0e:bf:3d:01:1e:07:02:
         c7:f6:eb:9e:6d:88:d4:b6:7a:ca:47:bd:ce:83:0a:35:ed:61:
         95:43:f9:8b:63:ce:bd:72:69:88:aa:16:ef:9c:90:7f:ed:19:
         52:2c:67:03:8f:dc:ac:e9:69:1e:3c:84:a4:ab:08:54:6c:af:
         87:5a:74:8a:fc:61:3f:d2:d3:8b:c6:82:cf:3f:d3:99:5e:1c:
         b3:11:a4:cb:35:d4:d2:be:69:b3:3d:86:0b:77:49:c1:8b:27:
         f1:6e:d4:19:56:81:13:23:57:aa:a2:9d:f9:3b:a2:ba:0e:b3:
         17:36:21:ea:e7:10:9c:49:41:15:fe:1f:b7:ac:e3:e8:39:c2:
         f3:a6:ef:66:cf:8c:92:86:13:a5:b8:0b:9b:9b:d3:b5:41:35:
         2b:8c:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----