Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
File:                     zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json)
Hash identifier:          t2dbqr7bzd4V7g1g+866ucaGmrAazdiPLx3vIfok8nk=
Subject key identifier:   89:F3:70:A2:D0:FA:4C:8F:06:41:1D:BE:D1:CA:69:65:81:BC:6B:CB
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Certificate issuer:       /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial:       01962F3D42D648E321B53F253536367C07B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
Manifest number:          0A84
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: _2rlTorI9d4EskVB3Q2AELQgntg.roa (hash: MJ/JOjkufW/i3x6kFr8d78WsqqTFtkNpKnXIQ8qokdg=)
                          2: fsiSKtfr1vd7jNqGvz2rWlb2WGU.roa (hash: JYUZh82zsCTaCv7uAVxiuRXoppFvfB/m/R6UI/2LG30=)
                          3: lTK57WKRl8JHYSn3Me1JiHVYX6c.roa (hash: OsSENyDZ+wkTwyFgI+grH7k0F+jqVnxydXIxiH9U0Ng=)
                          4: oJSpmKHDBTQennb3bFM-AUri38c.roa (hash: gaj/8isA/Vy8LzqeD5fj8KpWVmIYxfupI+6YOWca7WI=)
                          5: yroUuw1scM5vJqw9L2C1NZloBMg.roa (hash: tq+65QQs/oxlmOUT1sm7YA/yaQJk+Rn+QS41OHsKCiw=)
                          6: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: kUFl2V1w333XrZX11pNQvkkYRjUc5zdWAW4zf4wHFzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:42:d6:48:e3:21:b5:3f:25:35:36:36:7c:07:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=89f370a2d0fa4c8f06411dbed1ca696581bc6bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:8a:52:b8:64:7d:59:34:1b:33:70:f3:a8:
                    3e:7d:16:52:fa:35:d9:76:a3:ce:dc:42:50:1f:11:
                    7c:be:d4:e8:4b:3f:4c:4d:d4:0a:73:46:01:ff:9a:
                    9f:36:e3:80:9a:1f:6c:e8:77:87:fe:71:22:5c:e4:
                    9b:8e:80:44:0a:fd:c4:13:0b:14:1b:f5:75:5b:e3:
                    34:5b:49:32:39:f7:a7:70:19:18:fd:dd:7f:7c:ba:
                    e0:27:69:9f:66:f3:3e:c9:27:e8:4f:10:03:21:79:
                    87:31:94:48:bf:86:a1:d3:70:93:6d:ce:a3:46:d5:
                    23:8f:c4:71:c0:7d:f2:1c:ba:fb:ba:d7:86:9e:ba:
                    c6:d2:5b:f8:0f:0f:ea:5a:aa:8c:9b:14:36:17:4d:
                    9b:08:3e:02:9d:bc:b7:af:5e:fa:4c:b5:6a:53:b8:
                    17:74:06:6c:cb:79:4b:07:2a:0b:0f:64:d2:30:84:
                    72:b1:f7:65:94:88:5e:01:76:7c:98:f6:9c:5b:52:
                    7b:e2:ba:9b:e1:53:98:17:37:3f:1f:9e:22:f8:6b:
                    a3:8a:e8:36:a0:e5:00:d0:cd:8d:7c:0c:1c:58:87:
                    0b:e0:45:fd:2b:79:c4:62:9d:df:36:1b:db:2e:f5:
                    9f:f1:15:25:de:40:9a:83:f9:55:da:95:a4:ea:53:
                    e1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F3:70:A2:D0:FA:4C:8F:06:41:1D:BE:D1:CA:69:65:81:BC:6B:CB
            X509v3 Authority Key Identifier:
                keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e7:9b:bf:9c:12:89:19:98:e2:21:cb:40:66:0b:d9:80:a3:
         ab:f9:46:59:60:12:66:db:9e:a3:e2:9b:4d:c1:89:d9:9c:93:
         e9:f8:8b:9b:e7:ff:07:fa:2b:1f:f1:99:b3:b4:01:68:21:50:
         71:e3:92:39:53:c1:d5:9c:1d:4d:16:e7:a9:a3:21:3a:dc:f7:
         bf:6f:2e:f9:e4:f6:ce:58:04:be:75:d9:b8:30:a4:8b:13:fe:
         1e:04:16:23:7b:2f:91:92:ee:48:90:58:18:88:02:17:1b:b0:
         85:51:2f:70:66:29:f6:06:55:9c:90:a1:d0:02:14:2b:8b:ad:
         83:b0:98:3a:31:46:62:7f:55:ad:69:ef:24:bc:21:bb:1d:2c:
         32:66:9a:7c:c9:a4:9d:2d:80:bd:33:13:3b:94:10:d7:db:a3:
         e7:76:c8:5b:a3:c2:7d:7d:f0:c6:58:52:2e:dc:e7:5f:8f:eb:
         6f:46:2f:84:21:9c:ca:a1:af:c0:5f:38:52:df:3d:97:42:4c:
         d6:ee:8f:d1:89:2e:7d:b9:57:fd:21:d9:22:24:8e:f1:04:70:
         22:90:52:d8:b2:e9:36:cb:30:62:f8:b3:4b:bc:95:07:9d:0c:
         03:54:79:eb:cd:74:c0:69:3a:75:f0:c5:6f:d9:8e:1d:1c:2b:
         56:f9:37:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----