Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File:                     ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier:          mcfX7G3HwiiUUPP506zFm5Uh4C3gc6Bl5l5ZhE/BCKo=
Subject key identifier:   98:5F:19:7F:A6:9E:3C:2A:14:FE:C0:37:8C:71:D6:30:D7:0A:EF:0A
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       0195E0B46BE485EDFA8158ADE48CBBC02124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number:          040F
Signing time:             Sat 29 Mar 2025 07:01:15 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:15 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:15 +0000
Files and hashes:         1: 1-P9YegJEgTTrNaAEU3IIuc08RmY.roa (hash: VMR860mh90RZ0uHCWx/O5Sa1yv7ih7Q2heb0CHOeN9M=)
                          2: DeGtb7yujTyTVa3OH4DyZgT0oXs.roa (hash: nw8jgAJXgkkRIoQf1v0bYUYfpASn5VshZprEj2zsrkk=)
                          3: EMVR9NYVRq-EMjxpptyq2L_gJw8.roa (hash: ae6WIIHau+j7Ux1GHG57mV6lm8wtBV6sLPHMj084L2M=)
                          4: GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa (hash: Gjo03csZv216WbwMAfrV2mPHc5TstpRZcbzipd7HL+w=)
                          5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: cSBLr14CfjdU0VD/V9gdRj6o/FvCu+t4Y7riNef+SCU=)
                          6: kNJTv0u8R3n31XhM175qS3qSPYc.roa (hash: yEcxvFp6oLKPqomZkL6wGasrZzjv/ubXMRsnyY1hRmM=)
                          7: oBmDtOMzv9uYHMZKHsP_7TZtJDo.roa (hash: 1TEsgDEf5icrK07cJlsmMerQGE88qLGKElgw/ofxA2g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:6b:e4:85:ed:fa:81:58:ad:e4:8c:bb:c0:21:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Mar 29 07:01:15 2025 GMT
            Not After : Mar 30 07:01:15 2025 GMT
        Subject: CN=985f197fa69e3c2a14fec0378c71d630d70aef0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:12:96:ac:cd:a8:b6:88:f5:c1:a8:6a:50:58:
                    a5:52:40:90:69:20:62:6b:7d:fc:c6:38:e7:38:ee:
                    8b:82:0c:33:99:04:cd:9a:4d:cd:07:af:9c:95:05:
                    5c:28:eb:e8:32:8d:3d:69:e6:48:d4:cd:f2:a8:6f:
                    40:e1:f9:4f:10:53:40:8b:14:70:19:56:e2:88:9d:
                    8d:bb:5a:72:4e:d6:85:de:68:87:01:5a:39:c9:2a:
                    0d:56:49:64:3e:af:f4:a7:e0:a8:27:48:fd:56:0f:
                    9c:3b:b8:b9:20:65:72:8e:79:e8:74:92:d3:12:1a:
                    fd:2a:11:e6:b1:24:e9:dc:ed:da:92:bd:5b:99:12:
                    b9:3a:4f:ea:ca:6c:34:e9:79:8b:84:f6:64:56:a1:
                    a5:63:10:c7:b9:ab:57:52:89:1e:b5:ae:4b:e9:94:
                    0a:e2:04:71:b0:b2:07:6c:84:84:9c:d4:0d:f0:36:
                    c6:72:05:6f:aa:a6:89:6a:58:b5:c5:4d:49:0a:30:
                    60:1b:b7:c7:11:8d:3f:52:6e:66:45:88:63:e3:8e:
                    1c:52:8d:15:e0:0f:b6:5d:73:28:ab:77:20:e0:bc:
                    f0:0a:e3:55:77:1b:b7:3a:22:76:4c:d2:72:68:4b:
                    e1:b2:30:06:19:9a:ea:13:f0:1c:fd:a2:98:65:a5:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5F:19:7F:A6:9E:3C:2A:14:FE:C0:37:8C:71:D6:30:D7:0A:EF:0A
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4a:35:d0:d8:cc:a3:42:90:a7:d3:61:fa:d3:f4:87:70:59:
         05:a0:25:2a:5c:46:e4:cc:24:14:51:55:52:99:e1:98:07:c5:
         ce:a2:1f:b6:7c:9f:37:dd:b5:bd:a8:cb:c0:ad:ef:ed:ef:f8:
         18:a8:7b:66:70:2c:7f:7e:ae:26:6a:d4:8a:ba:a1:6f:e1:dc:
         45:9b:c1:e4:40:a4:28:89:24:91:18:0a:0f:c7:94:86:a0:7a:
         77:e8:ed:6a:54:57:af:6b:42:70:6f:fa:d6:98:9b:a4:b1:a7:
         07:e5:6b:bf:f4:ac:b6:0a:54:1c:0d:c7:f4:f6:2f:c2:17:bb:
         4e:a2:60:02:4e:cb:82:22:5e:6b:90:62:2a:dd:af:c4:65:0a:
         af:9a:b6:de:c1:05:9c:d8:70:d0:c4:cf:20:af:8e:c2:e4:cd:
         a7:63:e4:1d:d5:da:d8:69:aa:07:a7:7e:0d:72:ae:a9:15:6c:
         9e:14:68:80:75:3b:c8:5c:b5:6d:2f:bc:eb:15:d5:5e:ff:71:
         4a:5b:35:3b:95:0e:35:3e:4c:8b:3a:2a:51:15:87:3a:f5:f9:
         e4:96:66:11:39:7f:22:c8:a9:10:0a:54:55:1f:cd:be:59:8e:
         61:d9:95:8b:f4:d8:77:ba:f2:22:16:6d:fa:a8:d6:90:31:ec:
         1f:8e:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----