Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File:                     dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier:          txYrfO/tR1sebEjbUdNI55O6BH/GjojlZmbpRLz4ZKo=
Subject key identifier:   D1:F7:9C:99:8A:32:75:1A:68:8F:F0:B4:93:65:C1:B3:84:4B:99:E0
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer:       /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial:       01962F06AE7B984EEFEF0E49CFA581FAC39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number:          0622
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: E77W28wiF50IkO-MfbqRhLv-CH8.roa (hash: 0/YWvGyP0HxspplkXKv5ivuZGVdUvzbxzTq1+TTsXNs=)
                          2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=)
                          3: S5eF10lYA3ZPlCb-k6S-7BbA_OU.roa (hash: QIIgdJuqeu+re49bkKfXAWxZmuaiGH8W+QlzrEHTNZ8=)
                          4: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: GQkVa2Syu76DrsrvR1uGBMVM60AlhR5Tuz9Bc/dppbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ae:7b:98:4e:ef:ef:0e:49:cf:a5:81:fa:c3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=d1f79c998a32751a688ff0b49365c1b3844b99e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:a8:d7:88:1e:02:f6:c9:0b:a2:6c:64:fd:
                    b4:11:7d:4e:3e:28:50:08:a3:91:7f:4f:c4:ea:be:
                    b6:a9:5b:66:ff:04:02:ca:d3:42:31:5f:6b:5b:6e:
                    06:b4:6c:be:c3:55:68:9b:d5:77:f9:fe:c9:b7:26:
                    17:1e:bc:15:9b:91:89:ff:72:cd:07:96:78:49:ac:
                    52:87:9b:ae:42:de:e7:e8:10:49:45:f0:71:40:39:
                    78:7b:37:b3:f4:5b:dc:8e:3b:ce:27:5d:54:95:d4:
                    85:16:55:ff:e0:41:79:67:3b:43:d5:75:6c:dc:12:
                    3b:6c:bc:96:a4:bf:49:b4:b6:20:fc:3a:d9:da:23:
                    ac:af:e2:44:ce:5c:4f:74:63:bb:a5:96:6b:80:f2:
                    14:67:19:7f:50:99:07:2a:fd:de:21:53:59:38:51:
                    04:98:d5:f3:66:af:e2:c4:0b:30:7a:67:f2:e0:5f:
                    4b:00:52:90:4b:e6:c3:3e:69:25:6a:98:83:49:5d:
                    5e:b3:1d:13:dd:f8:da:1b:2b:3a:39:4a:ca:02:e8:
                    29:2b:e3:57:b7:79:2a:63:62:76:4b:26:0f:53:34:
                    27:a3:55:8e:0a:d6:7d:c1:19:f9:1f:8c:08:82:5c:
                    64:f6:e4:e6:40:cb:a5:33:8e:19:a8:31:36:da:ee:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F7:9C:99:8A:32:75:1A:68:8F:F0:B4:93:65:C1:B3:84:4B:99:E0
            X509v3 Authority Key Identifier:
                keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c6:03:de:fa:29:0f:50:24:b8:32:91:78:96:00:a0:7d:aa:
         cf:17:3b:99:dd:fc:63:ce:45:dc:27:3c:8c:9b:8a:71:f3:1a:
         00:27:4f:96:12:4c:1b:ab:b3:bb:d8:41:be:d5:57:83:43:60:
         3f:54:fd:9e:86:ee:8e:1c:ab:93:f2:46:da:95:47:8b:10:2f:
         8b:22:46:66:c3:9d:cd:18:a4:c8:25:79:7f:d1:b1:ba:b0:28:
         70:94:8f:23:2b:ef:34:f8:97:65:ad:b8:c6:f1:53:ef:6e:53:
         f7:53:2f:44:ee:04:2a:8a:99:43:55:6b:58:9d:1f:dd:7f:c0:
         b7:0e:f5:47:7b:82:56:8b:27:7b:31:43:5f:3c:5d:34:3d:71:
         16:19:db:16:f1:35:00:14:b0:9b:cb:a6:ac:3a:5f:6f:ff:9c:
         94:8a:0a:54:8f:9a:e4:21:6a:c4:45:3a:54:22:63:19:64:02:
         cf:b6:fc:5c:89:1a:7b:c5:2b:89:ea:d6:05:b6:b3:d7:b6:db:
         d0:5e:08:63:00:02:30:07:1b:a3:86:d0:77:01:ea:38:fb:01:
         59:d6:e1:c9:f5:6a:49:90:98:72:d3:c5:9f:fe:a2:b5:39:14:
         8a:e5:f4:ab:ef:57:7e:e2:f9:04:0b:c0:49:27:45:68:88:dd:
         87:c1:7a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----