Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File:                     ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier:          Xr33fhT+6AeRd0uYgIu130f1eBZ26VdrzD7z7DktMuk=
Subject key identifier:   AC:AF:39:52:A3:EF:9B:F4:EB:D0:9D:08:73:B8:35:49:29:61:90:FA
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer:       /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial:       01962F063ED9F549ADF8AE0E5DCF805BED07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number:          0825
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 1WnsILYxjGfpft24w4cU0Z9HVy0.roa (hash: mXH7nwV2vIU6tKBb8bErNfD249HtR3Br3nGu9VJRl4A=)
                          2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: dtNxsYB7Ifu7Rr4SNFuVvmrI/FFLlpO1hYX/YFdkzQI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3e:d9:f5:49:ad:f8:ae:0e:5d:cf:80:5b:ed:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=acaf3952a3ef9bf4ebd09d0873b83549296190fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:55:ab:e7:e7:d4:5f:79:31:c3:f3:6b:36:46:
                    3d:8c:80:40:38:f2:ac:77:c1:56:fd:be:84:75:36:
                    8e:ad:74:a5:96:00:26:9d:09:25:ed:e6:74:25:28:
                    79:57:a6:8f:83:78:72:41:56:2e:7f:dc:31:ce:49:
                    eb:4f:62:dc:2f:ad:d3:3c:b1:d8:f5:40:f6:21:2e:
                    46:98:d4:50:7d:5f:a9:62:3e:3a:40:51:09:a0:68:
                    87:af:ec:e7:d3:52:6e:35:27:d7:7b:a9:36:2d:9c:
                    36:8d:d7:73:c0:98:28:d6:0a:5b:10:09:d2:61:13:
                    3d:59:a9:f5:c7:04:71:6c:90:e6:1e:a0:a3:bb:ab:
                    f8:83:8b:53:ac:83:b9:40:f2:0d:73:bd:59:53:8d:
                    ba:e4:07:a6:58:77:1d:4b:7c:8f:43:b6:3e:0d:9e:
                    d7:67:d4:2b:22:70:88:78:9e:10:fb:41:8a:3d:1b:
                    fb:71:db:85:0d:d5:eb:ad:a6:01:71:f0:d4:b0:16:
                    c8:da:ac:75:67:c0:ed:d2:f6:9f:f4:40:c1:d6:07:
                    fe:e5:c3:ea:41:c8:29:db:dc:9c:f6:1e:35:2b:b3:
                    6b:63:69:65:d8:b5:92:6a:22:32:4f:26:19:82:0e:
                    71:d4:15:de:48:58:50:66:78:3c:69:e6:55:6e:4c:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AF:39:52:A3:EF:9B:F4:EB:D0:9D:08:73:B8:35:49:29:61:90:FA
            X509v3 Authority Key Identifier:
                keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:41:6c:53:3d:dd:66:11:e9:c9:a0:c6:45:8c:e0:a9:12:c4:
         90:8f:4c:32:e4:65:c3:e7:0c:38:82:3b:a0:0e:f5:57:62:83:
         b9:fc:3c:df:f0:69:f1:d7:aa:ea:8b:3c:92:f9:74:8b:c8:66:
         83:d9:bb:de:d9:eb:16:00:ac:c5:02:4b:f5:49:90:f1:ba:59:
         a6:82:4e:f5:37:ab:91:86:0e:87:19:5b:a7:f8:01:9a:b8:5e:
         7f:2c:4b:af:db:2a:23:c0:80:81:ab:b7:c9:86:0e:47:ad:14:
         94:17:16:ca:00:67:66:c2:8c:52:3a:08:13:68:84:2b:ec:f2:
         c6:cd:ee:45:0b:9d:d0:80:33:4b:1e:04:19:16:28:88:bc:61:
         06:f6:9d:df:ef:77:3c:da:1e:ce:af:57:0a:64:e5:47:8c:3e:
         d4:d8:68:ab:97:40:6e:0f:ba:7e:ce:21:0a:c5:49:dd:35:90:
         d8:b9:3d:20:2a:a6:a9:ea:dd:56:78:68:8d:40:24:b4:d1:5f:
         6f:74:f1:91:20:83:10:3f:8c:74:78:ac:15:21:ec:0b:e6:84:
         f4:7c:43:89:f4:b5:19:00:da:d2:fc:b9:74:22:63:e4:f7:39:
         0a:96:3d:32:19:bc:6f:be:e4:6b:bb:f8:9c:1e:f7:a3:51:c4:
         ed:ea:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----