Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier:          mv7JTTZnlzPKBqRQTYmPqqlppXtBlunApPmvjqMko8k=
Subject key identifier:   A5:B1:16:C8:64:4C:C5:E5:B1:D3:12:E9:37:04:2D:30:BD:03:5E:93
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       01962FAB231493C32F5CDB6CEB9DC5B783A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: TTz5LCEIjQDJag2GFhr8NuvmXpcNqKjMBoA0KLj68Y0=)
                          2: kwXk5lchLSQusIqWIc1_LElpPmw.roa (hash: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:23:14:93:c3:2f:5c:db:6c:eb:9d:c5:b7:83:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=a5b116c8644cc5e5b1d312e937042d30bd035e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:7d:f0:9f:34:31:66:26:dd:84:f3:51:f3:
                    3f:1e:5e:52:1a:f9:59:49:46:ec:ba:7f:3a:32:6d:
                    04:88:3d:fd:c5:44:0a:4e:f4:7f:1e:b4:9f:fc:af:
                    4b:ec:45:ff:55:73:06:aa:95:8a:e7:55:36:d5:69:
                    4a:62:81:ae:eb:b4:b3:5a:06:e8:d0:65:57:69:dd:
                    0a:30:34:6c:3c:ee:ae:47:39:5b:09:a8:ed:52:59:
                    b5:83:44:34:1d:bb:63:af:32:34:c4:ec:63:5a:4e:
                    d0:ee:f4:ac:cf:23:8e:47:ac:2a:b5:8f:73:67:12:
                    e8:ef:cb:4b:ad:bd:c3:e8:50:98:4a:e7:40:52:55:
                    7b:2a:04:52:ba:d2:14:3e:00:e9:72:94:ae:5b:2a:
                    96:22:0d:70:5e:2e:43:c3:f9:7a:2d:97:93:bf:16:
                    a5:9a:53:90:d3:a2:84:67:83:b3:47:69:73:32:c3:
                    20:b3:03:50:bf:8b:0c:0f:85:7d:d9:16:c6:7c:a7:
                    1c:9a:5c:cb:54:dd:ee:7f:9f:65:2f:fb:6c:f5:d3:
                    43:cc:2e:eb:1c:5f:d5:ea:68:43:9b:d5:25:a9:17:
                    6a:d6:1c:bc:17:dd:09:9a:95:74:da:2b:3a:5c:6a:
                    ae:76:b3:fd:75:3e:7c:97:0a:9e:e3:00:2d:27:53:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B1:16:C8:64:4C:C5:E5:B1:D3:12:E9:37:04:2D:30:BD:03:5E:93
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6b:57:d9:c5:82:d1:22:77:ac:a0:d5:15:6c:84:95:70:22:
         b2:21:71:a8:55:fe:1c:9f:71:30:8d:aa:06:8e:12:82:54:05:
         e8:ef:bc:b0:f5:97:2d:d3:ec:a2:45:bd:d3:2c:5b:0e:99:fa:
         52:00:39:bd:f0:1b:0a:ef:9b:89:d1:78:28:06:79:ed:2d:05:
         24:9b:83:90:1b:63:bb:61:c7:99:5b:44:dc:cb:51:ce:86:a4:
         b0:f7:b3:d6:9e:cc:4f:fe:43:f3:dd:19:ba:b1:a6:d7:2f:ad:
         e7:78:8e:41:4c:e0:46:50:72:05:dd:f5:a8:fb:46:e5:85:70:
         ca:c7:9b:69:e9:21:83:db:2a:ba:10:62:14:53:af:c4:5b:63:
         01:d3:c8:60:e2:41:84:c6:dc:ce:17:13:69:80:b7:51:3e:7f:
         bf:d8:ce:c0:1a:eb:26:32:92:2a:1b:60:f0:ed:b9:4b:4e:1f:
         da:1f:8a:5c:a9:66:7c:23:67:9e:2c:b5:2d:c8:98:8f:e7:73:
         73:c4:cb:46:6f:d7:78:32:cb:b1:b4:b2:70:3f:64:18:f7:4f:
         11:10:cd:84:69:e9:d5:02:c4:b1:5c:4b:20:6a:b7:fa:7d:d7:
         d5:64:7f:45:f7:38:36:37:5c:7c:6d:11:1c:12:f4:b0:fc:51:
         de:82:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----