Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File:                     Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier:          BOw5ECfAcsmmmlw3qLX3ExLfNCbPfYOapqu2wXmLME0=
Subject key identifier:   F5:61:27:08:FC:44:B1:B6:0D:82:59:38:0B:34:5A:78:E1:8B:11:FC
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer:       /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial:       01962FAB8B00031A697E261C6F99785F5AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: cJE2MvF8BGQMBSP2PtgW8PDorIWZA4lcbRKwQo4r96A=)
                          2: vICAXNaVi9WpUOInUKGa4x8kVzo.roa (hash: wwadTuvBpX7uW9J+Oei6uXdC+2oxhi7N3s69AlGUoYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8b:00:03:1a:69:7e:26:1c:6f:99:78:5f:5a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=f5612708fc44b1b60d8259380b345a78e18b11fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:3b:3f:6e:dc:81:78:05:ef:35:31:cd:5a:
                    1c:88:49:23:80:36:5c:49:7b:ef:69:24:5d:5f:57:
                    aa:93:1d:e3:9f:94:57:20:dd:72:3a:1c:6a:ca:6e:
                    2e:35:a5:44:7d:0e:fe:b2:c7:0a:6c:b6:70:d3:af:
                    df:23:cc:4a:2c:81:0d:98:0b:d9:a9:b3:84:7d:c6:
                    10:87:97:fc:d7:b9:91:b6:85:db:6f:af:7e:bb:f0:
                    ef:fd:8a:d0:94:81:e0:15:84:ae:a6:85:57:a6:53:
                    89:42:18:1a:7c:d5:f3:bd:b5:a7:a2:32:79:5b:14:
                    e1:01:38:77:e5:c6:e2:d2:96:f2:93:46:bb:8a:c0:
                    4f:92:1f:75:cb:fe:97:d4:83:1d:50:ef:55:ac:3a:
                    b9:7c:8d:e2:41:dc:38:82:5a:66:20:be:7d:2c:8d:
                    39:13:0c:1c:1f:89:1a:62:ec:b8:f1:95:94:83:86:
                    de:44:49:9d:a3:54:e0:b5:4a:7f:61:ad:27:bf:02:
                    a4:06:9b:b5:40:d7:41:93:59:f5:ae:ee:c3:a8:9c:
                    28:b5:b9:79:a9:34:a3:c4:c6:9d:a0:6d:a5:8d:e9:
                    11:57:fc:6d:11:97:b6:b0:70:ec:18:34:0d:d1:c9:
                    31:ee:55:3e:9a:0b:8b:bc:12:3c:ea:06:34:c6:a4:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:27:08:FC:44:B1:B6:0D:82:59:38:0B:34:5A:78:E1:8B:11:FC
            X509v3 Authority Key Identifier:
                keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:79:47:0a:bd:b8:d1:9f:2b:a0:18:52:0b:6b:fc:37:cb:
         48:0c:2e:15:ee:3d:74:73:e3:19:21:74:5b:08:10:86:46:2b:
         c7:27:e6:3a:d0:b0:7f:44:60:b4:41:8e:48:e4:b8:6c:aa:3d:
         bf:a5:30:7d:26:b0:4c:91:b0:d9:33:0f:6e:ab:af:f2:23:ea:
         93:90:39:ab:41:c0:d7:de:f1:46:fb:fa:10:cc:8e:3b:8a:9f:
         6d:cb:c1:2b:ad:e8:49:92:89:a1:e4:f1:19:35:98:d5:a2:9b:
         ba:66:b3:e2:80:6c:c3:d6:f5:f7:2c:71:00:a1:65:9d:f5:07:
         f2:71:05:24:41:9c:20:6e:e6:da:d0:b2:2d:92:80:87:b0:a7:
         3d:e8:8e:75:de:4c:86:d2:49:ed:b0:9a:b7:5a:bf:60:6c:b0:
         db:06:54:b2:87:51:be:ec:83:ee:f1:bb:a5:07:e2:57:6f:f8:
         25:00:d3:b7:d1:8d:55:4a:9b:3d:eb:b0:42:bc:ae:85:fe:fe:
         e7:69:f2:b8:46:df:10:09:cd:42:4b:d7:e6:7b:cb:c4:f9:4b:
         23:35:48:ca:ec:fc:cf:8e:d3:a3:12:c2:1c:19:f2:72:d9:17:
         cf:90:96:38:9c:1d:bd:72:c2:c5:f6:9f:74:aa:94:9a:40:fc:
         aa:97:13:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----