Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File:                     Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier:          wdhCXJjiLBmxjMBx41ZbBS5SqYuUAUwuNEjbnhiHbaA=
Subject key identifier:   BF:E4:B0:8E:95:DF:EA:9B:DB:CB:A0:15:2B:FD:41:00:EB:0B:D1:B2
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer:       /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial:       01962F3D34DF683193B7E1E5768ED73319B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number:          0553
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
                          2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: V+2i0JmRyEiGyQaPF2Uls5MW78Dxvbj8DEekQmYvuCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:34:df:68:31:93:b7:e1:e5:76:8e:d7:33:19:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=bfe4b08e95dfea9bdbcba0152bfd4100eb0bd1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:b1:22:5f:b6:2b:85:78:62:ba:0f:37:14:
                    14:1c:e2:9d:d1:8a:00:b6:95:b1:39:56:09:c1:0f:
                    19:f6:1e:25:16:7b:85:b6:51:de:fc:3f:a3:b4:4a:
                    e3:c1:ad:ed:7e:11:04:25:44:5d:03:5c:b9:87:59:
                    ef:d5:67:1c:32:5b:d9:5e:2e:d6:ee:fb:4a:21:cb:
                    ff:ff:d7:93:39:80:5b:1e:e3:d5:f5:f7:ca:15:b0:
                    81:7b:eb:db:c3:96:84:bd:ae:d6:fb:be:f5:0b:06:
                    18:70:fa:b0:79:bc:5b:25:be:8b:8f:c5:90:b5:b2:
                    54:77:60:af:8f:ad:ca:4e:40:21:3c:2a:7b:7a:01:
                    d9:d0:42:54:f6:56:54:03:10:64:a9:1a:e8:2e:32:
                    0c:00:93:09:64:27:f9:00:4e:bb:5a:12:b4:6d:b1:
                    8b:0b:9e:3d:9d:fc:e4:02:a4:5a:f9:13:cc:10:b3:
                    a8:0b:f2:37:5c:c2:0c:1b:87:b9:cb:eb:5d:52:25:
                    1e:34:b1:21:de:e0:e7:20:f2:8a:38:a4:9c:c9:03:
                    03:b0:2d:7d:03:fb:69:b8:ab:c5:a6:1c:79:1b:29:
                    55:20:87:95:3e:50:67:8e:a5:c2:95:f1:b7:95:d8:
                    b3:50:e6:89:24:2c:09:78:4b:5d:d7:3a:7f:64:a6:
                    24:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E4:B0:8E:95:DF:EA:9B:DB:CB:A0:15:2B:FD:41:00:EB:0B:D1:B2
            X509v3 Authority Key Identifier:
                keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:f7:df:db:b0:42:6f:7d:14:29:3c:5c:01:7c:0f:2c:62:
         b3:14:62:e1:d5:49:27:b3:2e:f4:1f:db:c5:ea:25:ae:71:f9:
         1f:d6:07:5e:91:5a:fe:33:ca:b9:7f:47:dc:ce:18:21:83:d4:
         1f:99:3b:41:c8:d2:9d:d6:73:e2:30:06:2b:97:27:57:81:3e:
         64:6e:19:98:b7:e2:8b:37:5e:0b:d0:5b:44:ca:ea:a3:43:3b:
         40:06:91:d3:a5:c0:74:0d:e0:a2:b7:68:97:27:82:a3:fe:23:
         97:be:07:9d:f6:3a:3b:9b:5d:4d:67:6c:4e:82:9e:cb:9d:6d:
         47:cc:1f:69:1c:3a:62:44:99:d1:ef:5b:b7:a4:33:09:9c:f6:
         1a:47:dc:14:6e:93:36:e9:88:ff:5d:91:86:ac:cd:af:f9:68:
         44:c2:80:01:e6:2e:61:3e:da:e6:54:1a:22:3b:f2:ec:56:77:
         e1:c0:a3:9b:46:2b:ca:32:fc:ae:e0:aa:30:35:a9:d9:0a:3e:
         41:d9:d6:4f:6d:7e:c2:77:27:73:cb:e7:2b:1e:08:c7:51:50:
         50:36:2c:f8:da:91:a9:ba:15:bd:1a:e6:d3:6a:b7:5a:89:c6:
         cf:c2:ff:de:0a:f1:62:e9:e6:e5:ed:de:a2:dd:d1:54:53:f6:
         22:67:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----