Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File:                     g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier:          XjUhEToFr615DAenfTxrTOqGppcswsdLSPgICaW9O7c=
Subject key identifier:   AE:9C:7C:CE:15:86:8F:35:63:58:E9:A4:37:52:31:59:FF:47:BC:7D
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer:       /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial:       01962F067F1FA7C32DD326842EE3E53F68B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number:          0FDD
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: F478KPNWaWgwHEjAUDWV7KlTqQA.roa (hash: fiVEyWrn82XeJgJcuTMWEO2YQxgfDNcoh754eidkrnE=)
                          2: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: PnynPxEysTNDMHMuqe865E0pBDyOUjbj6eJ+F7OuYpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7f:1f:a7:c3:2d:d3:26:84:2e:e3:e5:3f:68:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=ae9c7cce15868f356358e9a437523159ff47bc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6a:21:19:4a:5a:12:61:5f:fd:81:8a:05:b1:
                    b7:24:f4:0f:c9:55:d6:ba:7b:df:3c:00:df:e4:16:
                    b7:c8:d2:aa:b9:09:31:f2:d1:8c:b2:20:94:d9:ea:
                    3a:f3:32:1e:ac:ed:64:25:9c:13:fd:71:3a:51:af:
                    b7:2a:c0:8d:58:32:57:17:8f:1b:6d:32:a1:6e:24:
                    ea:f2:2e:cc:30:80:e6:3f:18:3e:dd:fc:92:64:e8:
                    ed:78:17:38:ae:fd:e5:76:66:79:81:6e:a0:4e:32:
                    a5:16:af:32:40:57:ff:ca:96:65:a4:25:e6:99:1d:
                    07:15:66:be:4c:5b:21:f7:0f:c2:ed:1b:c7:6d:ba:
                    66:00:3d:b3:96:ea:dc:2e:b1:81:65:d1:e5:81:07:
                    53:df:55:1e:3f:cf:e0:2f:1c:00:52:8d:87:83:87:
                    79:ee:60:7b:e3:37:58:eb:49:c7:56:be:1f:fa:60:
                    89:b3:88:6f:be:3f:a8:fc:e7:17:89:08:41:e1:6c:
                    da:80:56:8c:43:cb:92:b1:10:39:ab:a1:58:1b:f9:
                    3f:68:ea:8b:b8:c6:38:70:1f:28:63:ee:31:4f:39:
                    6f:fe:ce:af:73:9e:85:46:ab:80:da:14:75:5d:54:
                    45:03:b0:63:66:d5:e8:4c:92:a8:65:4d:e2:50:6c:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9C:7C:CE:15:86:8F:35:63:58:E9:A4:37:52:31:59:FF:47:BC:7D
            X509v3 Authority Key Identifier:
                keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:54:34:30:1b:1d:d6:1e:c7:16:02:b8:c4:b0:a9:68:4f:02:
         83:41:a9:9a:be:56:11:9d:2c:a7:8a:8a:ea:71:20:0b:65:1b:
         e1:e4:1e:bc:db:f6:23:6a:07:84:5b:96:6d:04:ee:23:79:9d:
         16:91:7f:74:4e:da:a3:e2:c6:74:99:3f:db:2c:00:b7:89:ba:
         21:bf:82:fc:a5:8a:c5:1c:9e:21:66:a3:07:2a:df:bd:13:68:
         de:7c:dc:23:b9:fb:ee:51:5b:87:5d:93:29:05:4b:bd:96:d6:
         ce:7d:e0:88:94:17:1f:d4:d9:da:38:55:97:6c:c1:97:e9:e1:
         a1:38:a9:58:28:3c:bf:d1:2f:5f:bb:a5:ad:31:e9:90:a6:dc:
         20:74:b3:48:9a:ff:f4:08:bf:05:43:16:71:b6:f5:42:33:fd:
         87:e2:cc:d1:03:b7:8e:a2:25:8f:f5:c8:27:a8:f6:3e:7c:42:
         07:91:e1:c6:0e:81:c3:67:c4:ba:46:72:09:02:31:1f:69:7b:
         25:e1:a0:c9:52:09:d4:62:2c:8b:88:b3:05:10:52:c6:1b:67:
         a1:f1:e9:8a:86:f4:29:50:df:83:92:df:1d:4f:4f:d2:5e:8b:
         f8:5f:de:cc:72:cd:3b:7e:ca:6b:a3:68:cf:8a:0e:7f:a6:76:
         e7:d7:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----