Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File:                     z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier:          7y3GPMgPRR3/a0a26YZG58P7DxTYqtw9c/t28o6DGXQ=
Subject key identifier:   84:D0:94:83:5A:B3:A9:E6:A6:87:A7:A6:DF:BB:8B:42:EC:BE:55:EF
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer:       /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial:       01962F06C4244FCC7125F61B7377E9570B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number:          020B
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
                          2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
                          3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: yb495cqL0UfAgzfH9CwbiFaQHEHuqeDCL10Pgkh56jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c4:24:4f:cc:71:25:f6:1b:73:77:e9:57:0b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=84d094835ab3a9e6a687a7a6dfbb8b42ecbe55ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d2:b0:66:c0:c8:4e:ce:f9:76:a7:e1:ff:1e:
                    66:a2:bf:3e:7d:10:1d:f1:5c:2c:b6:19:8b:94:ea:
                    ef:c3:41:a6:eb:87:11:43:f8:94:1b:f6:46:4d:24:
                    32:87:1e:6e:dd:31:d8:d5:42:db:17:1a:48:36:11:
                    ca:08:bc:c5:a3:e1:b8:df:83:59:ad:68:41:70:f7:
                    8e:e1:68:13:41:35:b7:80:a4:b9:40:fd:25:b1:66:
                    a3:e2:13:be:3d:7e:58:74:17:de:1c:68:70:de:62:
                    29:b7:50:0f:ed:72:75:29:bd:05:9e:09:4f:84:a9:
                    bf:27:ec:ac:06:84:51:fc:02:f7:5b:82:7d:a1:6b:
                    06:f1:63:ae:37:a5:71:3a:35:26:63:6f:aa:51:a3:
                    23:6c:6f:ef:83:1d:b1:6b:2a:10:b1:b8:1b:9f:c5:
                    ab:6e:40:ac:2c:d7:f6:9b:8e:0a:9b:ff:39:a5:c4:
                    6f:a5:05:42:b7:7e:9a:d2:a8:4e:f1:0b:5e:86:94:
                    1e:0a:4c:d4:7d:bb:65:9e:33:c7:84:2e:02:56:25:
                    63:8d:54:a1:bd:fb:cb:d9:8d:29:26:db:c8:55:d1:
                    01:e5:56:d1:5e:70:52:90:4d:ab:3d:75:f3:d5:19:
                    0c:af:13:65:bb:43:cd:b8:37:9e:b2:12:54:d1:e6:
                    f9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D0:94:83:5A:B3:A9:E6:A6:87:A7:A6:DF:BB:8B:42:EC:BE:55:EF
            X509v3 Authority Key Identifier:
                keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:d9:f3:db:69:64:f8:62:03:b8:17:f8:1c:1c:dd:70:7f:
         99:14:cd:43:ff:87:c7:11:38:f1:79:f3:f4:2f:04:e4:fb:a8:
         cd:64:b0:be:6f:bd:eb:b0:8d:62:cd:96:16:c3:8c:c9:52:d4:
         7e:c4:6a:4a:b9:8c:65:4b:07:99:bf:dc:68:22:4b:f0:5b:82:
         9e:37:c3:5b:f5:c4:88:7e:70:ab:4c:58:b8:57:53:e6:7f:55:
         f7:62:c7:49:2f:68:27:ab:0a:05:24:5e:52:c2:83:bc:bd:ef:
         63:59:d8:7c:81:46:9c:9c:a7:a7:7e:7c:02:6e:31:4e:7d:09:
         c4:29:e9:14:be:90:df:bb:57:86:dc:2d:b4:e5:db:74:eb:85:
         fa:ee:2d:f1:66:33:50:88:a6:14:03:5e:0c:8a:12:ab:20:4e:
         ef:8e:b8:18:a4:e9:08:0e:28:3a:b6:4e:81:c9:87:7f:2d:46:
         65:3a:90:30:2d:00:53:94:04:ef:5f:06:da:04:12:da:da:bc:
         73:5a:a7:d4:de:86:99:88:85:7e:c6:3b:cf:a4:94:08:2c:a9:
         40:26:8d:23:2f:d0:6c:f2:ce:0d:b1:34:94:04:17:df:0d:7b:
         5f:5c:76:8c:0d:7d:93:b5:cb:5e:80:89:26:7d:35:eb:bb:b7:
         3a:d7:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----