Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File:                     ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier:          i5UY/Esvrlc4Cg+cJYVhZOqRKtof2UmrJS0wHRAtH5c=
Subject key identifier:   8A:60:98:58:0C:16:F1:8C:F4:89:EF:DE:A7:77:E2:54:07:1F:B0:86
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer:       /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial:       01962F744CCFF2A6D9496BAB4A0D905A1EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: tDW5d4bm5KWCfnHhPQtGS0MUFKQWSkTmVTR8ceSHuB8=)
                          2: y6XKa07TTPMFsjvwx8e568cVXPU.roa (hash: C/iy2HFJBUXxZmfuDRQqFLZ88BpL9CevYMYDHGoS6P4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4c:cf:f2:a6:d9:49:6b:ab:4a:0d:90:5a:1e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=8a6098580c16f18cf489efdea777e254071fb086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:b7:63:95:9c:3b:a7:0e:9f:4b:5e:58:e6:
                    d1:29:0f:36:dd:b4:7b:b1:35:c9:de:d9:2f:92:2e:
                    d8:87:0f:63:8e:cd:50:77:ce:67:59:a8:4d:33:ea:
                    9f:82:7d:9e:bd:c5:a5:8e:48:2b:c6:38:3b:0d:35:
                    2b:3a:2b:e4:a7:4e:d0:f8:4b:93:70:b8:9a:46:1f:
                    57:23:c4:f0:95:fa:b8:14:b8:c6:a8:b5:27:bb:17:
                    3e:c6:4c:1c:bc:b2:79:30:6a:57:ab:59:7f:ec:62:
                    de:ce:7e:80:75:32:ff:bd:ee:57:df:b7:76:48:9d:
                    7d:5d:b1:ff:c6:1e:03:f5:53:2a:b1:0a:6b:3e:c2:
                    cf:ae:03:5b:f3:32:79:80:b0:64:ac:63:26:e9:e5:
                    22:b5:0b:32:7f:06:93:69:a8:28:d6:ac:e8:e0:16:
                    8d:6b:16:8e:5f:35:b6:3c:43:2f:12:f9:d8:8f:72:
                    4a:42:3d:c7:21:9a:c4:40:43:a7:f6:d2:08:8d:7c:
                    76:a3:1b:58:15:62:10:81:fb:d7:6f:ae:89:68:e5:
                    1e:48:98:e2:d6:ce:0e:0b:e0:b7:25:6a:a5:58:7d:
                    30:e1:02:77:1b:4c:ca:01:d5:b8:d7:98:9a:a9:b7:
                    32:54:6f:8f:bb:bf:f8:fc:cf:ed:59:d7:54:5f:8d:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:60:98:58:0C:16:F1:8C:F4:89:EF:DE:A7:77:E2:54:07:1F:B0:86
            X509v3 Authority Key Identifier:
                keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f3:c1:fd:ef:d7:90:33:9d:a3:f4:92:85:cc:22:9f:28:8e:
         03:68:bd:d7:e0:3f:5d:d0:c9:a0:75:93:3c:b4:a3:f3:cf:f7:
         85:7f:a0:c7:de:22:d0:9f:25:17:ad:08:8d:9c:7c:6e:82:08:
         9a:6e:39:51:54:79:aa:da:8e:ce:d1:9c:5b:6f:10:de:1f:00:
         67:69:d6:eb:dd:56:26:23:52:09:6c:37:19:e9:8a:20:74:5a:
         53:ba:fa:8b:a3:c2:73:33:50:20:cf:f7:d8:69:4c:f4:49:4c:
         de:e2:19:21:62:d4:f6:7b:2e:19:a6:56:c7:0f:47:6c:44:8e:
         c4:3d:13:47:9c:c3:d9:05:fd:cc:8b:8f:1c:4a:50:3e:14:06:
         56:af:48:81:60:a1:2e:5a:50:2f:5c:ec:97:09:ac:18:f7:65:
         57:cb:42:bc:cc:3b:67:d6:00:d3:2b:0d:04:d1:45:44:d0:e0:
         a5:28:9a:a1:81:25:14:c5:9e:d7:40:27:71:62:e9:12:23:6e:
         54:2d:44:16:61:8f:2f:f1:13:10:cf:f8:ce:07:e4:e9:13:0c:
         22:20:ce:d5:9d:81:83:c1:40:e4:da:e1:81:06:08:eb:b8:84:
         43:86:fa:f9:0e:c5:b8:ef:7c:b5:7f:f3:28:00:7a:bb:61:1d:
         3d:70:7c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----