Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File:                     Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier:          lUXV34/4wDEYC0fl8TgTHBtk33lkE2XlLai7Loy2X5M=
Subject key identifier:   E6:34:D9:65:6D:31:4C:A4:0B:10:F9:DC:3F:B1:0C:1C:87:16:41:8F
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer:       /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial:       01962E98D80D6CE1AD253D6EA60B4A2ABF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number:          0BAC
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
                          2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: Lj13hrQzvnS6lx3OU14aRIVJzP3e7nKPNDGAy8r6tqo=)
                          3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d8:0d:6c:e1:ad:25:3d:6e:a6:0b:4a:2a:bf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=e634d9656d314ca40b10f9dc3fb10c1c8716418f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:b9:5b:09:af:51:4e:41:71:45:5c:e0:64:
                    82:d9:ed:eb:a5:3b:65:d7:ea:8e:b2:b4:1e:81:6a:
                    8d:1e:96:de:2f:ae:fb:c9:99:97:ce:d8:ba:37:e7:
                    9d:7c:22:f8:84:3e:fd:5b:ae:11:4d:87:66:c0:84:
                    2a:45:7f:98:23:c3:f5:2f:f7:24:1d:a8:94:2e:05:
                    bb:df:79:9e:1e:49:26:75:e9:b2:0e:17:b3:b0:2f:
                    9a:e2:6f:ec:41:d1:25:79:5e:29:10:48:bd:38:64:
                    28:49:52:6f:48:da:11:99:48:fa:dd:67:a1:eb:a4:
                    7b:6a:cd:be:00:35:25:94:7b:dd:a9:fa:65:b6:23:
                    85:87:02:d6:b2:a3:84:cb:7c:ba:3e:13:72:36:e1:
                    f0:1e:a1:7c:57:ae:24:dd:7c:9f:bc:4f:1c:ba:fe:
                    f4:ac:57:ac:4f:ad:aa:f5:6c:2b:2e:92:57:9c:14:
                    ed:69:68:a7:fe:82:e4:46:56:c7:be:c2:83:77:a6:
                    fb:bf:1f:2a:42:d7:19:d7:f4:e7:1c:a4:0f:c1:73:
                    a2:bf:85:89:c4:2d:cd:c0:f0:ff:2d:c6:5d:fc:67:
                    fe:4b:09:c0:5e:9f:f4:ad:9c:93:2f:6e:08:8a:09:
                    60:a5:5f:7e:fe:f5:db:5c:05:5a:63:3c:63:29:7c:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:34:D9:65:6D:31:4C:A4:0B:10:F9:DC:3F:B1:0C:1C:87:16:41:8F
            X509v3 Authority Key Identifier:
                keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:f1:c9:cb:ae:48:74:7a:a8:0f:09:44:39:83:fa:48:10:ee:
         ee:af:27:48:d6:63:69:36:a5:c0:12:fe:d1:a9:65:40:77:8d:
         54:30:9d:0d:7a:b2:bf:fd:c4:34:a6:ca:b9:d8:4c:38:e1:12:
         76:d1:34:9f:36:6b:ec:77:ae:96:0b:96:72:bf:5c:57:71:a8:
         f5:ff:96:46:9e:89:6c:84:dd:be:1b:ef:12:16:7f:7c:07:3d:
         fe:9b:c5:f1:7e:9e:38:9f:ea:f1:da:16:22:04:95:56:c5:d8:
         4f:80:35:6b:4b:9f:89:0a:82:ad:36:0f:2c:b9:40:df:ad:90:
         53:d9:5c:5d:d3:f1:8b:4f:55:18:8c:77:08:24:f2:4f:19:f7:
         0e:a7:d1:76:bc:59:29:47:ad:da:a1:3e:96:17:6b:a8:94:22:
         cb:01:c4:08:fb:75:03:c4:c1:20:e7:44:ef:f4:3c:74:04:c5:
         69:41:23:af:46:06:ce:6f:6d:7b:09:88:21:56:1b:30:5b:93:
         81:a9:4a:6a:17:49:69:02:b2:af:47:cc:1e:ea:87:d6:50:55:
         c6:de:96:79:b8:6f:75:c3:3e:22:04:00:b4:c6:60:8f:d7:7b:
         89:15:21:c2:a2:90:bc:91:8f:60:88:e9:f1:5b:94:84:41:c1:
         a8:8b:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----