Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File:                     ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier:          CApw0+CJH6tkib4uSEn5Rim1Hmp7EFDBLiDM6Y137k0=
Subject key identifier:   4C:3B:59:7D:DC:5B:18:B5:65:3D:F5:B2:D1:D8:32:A3:3A:A9:25:E0
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer:       /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial:       01962F74C9708C0B98D8DBF2F54146FAA27B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: U0b6gboi64n531Jc6zyEuav6vyg.roa (hash: PZafjNuKkOPJe0JHguIOtwXHpUoa+ViotM7w88t40Yc=)
                          2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: vmkZdtHDibmBqapLywd6vDjt2Ag8/rAyDFhFAuIqE9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c9:70:8c:0b:98:d8:db:f2:f5:41:46:fa:a2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=4c3b597ddc5b18b5653df5b2d1d832a33aa925e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:5b:05:c2:ca:3e:36:c1:26:98:07:ad:f8:
                    c6:1a:dc:c8:4f:75:17:91:ce:02:fd:31:2e:55:d1:
                    bb:c2:3c:2a:7e:38:7b:36:11:f8:82:5c:e7:d0:16:
                    92:81:53:ad:ed:e0:98:24:b5:c0:64:e9:cb:b9:6e:
                    c9:67:95:7c:ec:d8:99:14:21:35:af:9d:72:cc:57:
                    17:cc:ea:ec:62:dd:1a:62:ae:3b:1b:c4:1c:f4:07:
                    14:74:75:f9:bc:80:c4:11:1d:91:1e:70:78:9b:8f:
                    25:02:ce:90:70:ae:55:61:6b:18:37:4a:9f:e4:6b:
                    21:d2:c7:a4:c1:31:02:f1:76:7a:33:41:2e:51:9a:
                    b0:b1:b0:35:f5:1f:09:05:51:1c:e6:16:15:0d:c0:
                    58:63:b6:f7:91:c0:de:bb:3b:f4:ee:e4:c4:91:98:
                    67:71:f2:f9:fa:8d:74:b2:fd:3c:09:c8:74:22:fa:
                    48:df:36:30:36:72:a6:33:eb:d7:64:f2:6b:28:14:
                    30:e6:ac:dd:53:21:73:57:2e:eb:29:26:6f:6e:6d:
                    83:b1:02:16:6d:75:5d:de:b8:36:86:6f:f1:7a:27:
                    53:bd:e9:e6:0f:a3:0d:7c:a1:72:ba:1f:54:35:a3:
                    02:ee:8e:d2:be:f6:6d:6c:20:bc:86:bb:e7:48:0e:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3B:59:7D:DC:5B:18:B5:65:3D:F5:B2:D1:D8:32:A3:3A:A9:25:E0
            X509v3 Authority Key Identifier:
                keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:34:1f:71:49:f5:d4:71:4d:1d:3c:05:ef:0a:65:f2:c7:e0:
         8e:8a:1d:03:3a:4b:41:36:e7:4d:35:b4:5b:e9:a3:57:88:d5:
         e4:c5:8b:21:64:4b:0b:9b:cb:f8:e6:a1:4f:30:ae:53:9f:89:
         57:bf:71:c7:47:f9:ce:48:a1:9c:25:b7:15:02:d7:ad:c9:22:
         12:c6:ee:d3:79:a3:09:0c:9b:fa:14:88:03:ec:ed:d1:87:09:
         65:57:8b:83:b8:3b:a8:fc:5c:5d:88:ce:b6:68:87:20:eb:57:
         8e:11:18:88:62:8d:26:f0:42:aa:d3:ba:6f:5c:9c:a2:94:d9:
         af:00:5b:b0:8e:16:fd:08:7d:c5:54:ee:42:61:ab:b1:56:54:
         f9:e0:b5:3b:a0:e3:9a:3b:4e:9e:f6:ca:1b:2b:37:b3:cb:88:
         66:05:c6:b8:0b:19:a3:01:4c:3a:a2:24:2f:95:ea:68:7a:57:
         79:48:9d:5d:e4:c4:62:ca:25:0e:4f:8c:b3:cc:82:c4:b1:19:
         69:fa:03:ab:8b:28:29:af:43:97:f8:d1:da:e2:37:2f:1a:4c:
         d5:6a:02:fa:c9:05:fc:49:6a:75:1f:18:52:d9:f4:56:03:64:
         83:be:bf:11:a4:a2:fe:e8:2d:a6:97:cf:ee:ef:7e:4c:85:77:
         6a:fe:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----