Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File:                     zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier:          FU1pT6YOWARyInRpm/rjo7g50YNJCP/oXfSyDHARL34=
Subject key identifier:   C8:3F:21:A1:5F:54:80:A4:A8:4E:AE:71:72:BF:25:A2:3B:67:AB:DB
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer:       /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial:       01962F06F3EDC492E8F4A8BF7CE93C543943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number:          142A
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
                          2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
                          3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: LQVlIh8ZTKWo4xH9xnnuQpSk5ompVkI/UTKLJIYT+rg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f3:ed:c4:92:e8:f4:a8:bf:7c:e9:3c:54:39:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=c83f21a15f5480a4a84eae7172bf25a23b67abdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:91:7f:49:5d:19:66:a5:b4:09:6f:7d:b5:
                    2e:5f:d3:59:3e:56:f5:52:fa:12:de:15:f9:8a:b8:
                    73:2f:d5:a2:e0:ba:5a:15:ef:71:e0:38:a5:cc:a3:
                    70:9e:3c:77:26:4b:41:d9:ee:e7:44:15:23:f2:d6:
                    4f:b7:c9:df:b7:aa:e3:f8:43:41:84:fe:ea:bc:37:
                    68:07:b9:f4:08:20:84:9b:15:08:98:8c:3a:56:e9:
                    8f:7e:5d:2a:f6:29:c0:5b:0d:71:92:00:98:c7:01:
                    1d:72:de:3e:55:91:b0:ca:6f:dc:0b:8a:f4:16:6c:
                    87:18:e7:48:a5:8e:a5:a8:2a:e6:e6:d5:30:ef:cb:
                    a5:58:24:78:e3:7c:ea:d3:97:0b:4d:18:2f:f1:8d:
                    7a:eb:d4:42:87:0e:cd:e3:0d:2d:37:92:6a:05:1a:
                    01:22:1d:9d:af:2b:c5:00:43:df:ea:29:12:b0:59:
                    9e:69:a8:05:f0:c4:82:f1:38:56:85:2c:1c:2a:c6:
                    c9:00:72:2e:08:cc:50:98:b0:d6:5e:1d:6b:75:94:
                    f7:6f:f7:cf:0f:ac:00:c0:f8:ec:d7:e6:5a:af:2a:
                    6c:e5:67:88:c6:b1:62:6e:99:83:a7:b8:e2:9e:49:
                    2e:7a:b1:44:06:e9:59:41:36:bf:76:0f:92:0c:98:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3F:21:A1:5F:54:80:A4:A8:4E:AE:71:72:BF:25:A2:3B:67:AB:DB
            X509v3 Authority Key Identifier:
                keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8e:2f:6c:6f:e2:67:59:57:63:e0:c1:64:41:8e:f6:8f:4a:
         9e:9c:69:ec:52:31:c2:35:f3:b9:20:1e:aa:6e:cf:4f:f6:f8:
         7f:33:08:c1:68:0a:79:ea:9d:18:75:51:bf:dc:8d:05:6c:37:
         34:12:7e:76:35:fb:f0:99:b4:86:2c:f3:e1:ac:45:83:90:30:
         8f:80:84:f2:9d:70:01:7f:f0:b7:5a:d0:03:ee:2b:7c:c2:6d:
         ac:a9:23:17:a8:68:30:13:cd:cf:11:d5:bc:f7:62:95:c2:6a:
         b4:bd:70:3e:70:3c:2f:0f:82:62:51:7f:e2:6c:a4:78:ab:9a:
         4c:5b:f8:5b:e7:ca:85:9b:28:b9:0a:00:62:56:ea:bc:51:09:
         a0:ad:0f:ac:8f:75:ac:e5:88:c6:aa:0a:c3:c3:1d:96:47:7d:
         e4:a0:d6:50:8a:c9:92:5a:b8:e6:2b:30:99:c0:ae:43:cf:40:
         4b:6f:7c:13:48:6d:1c:a1:28:f8:a5:85:14:1d:60:fb:e0:51:
         9d:5c:dc:cb:95:39:b4:fc:49:8c:14:33:ac:3d:08:c8:77:f0:
         a4:6a:75:34:27:2f:b5:e2:a3:6c:ed:d9:22:2c:00:40:44:cb:
         92:e4:4b:a6:66:2a:f1:ba:34:aa:e8:30:ed:b7:08:8f:fa:55:
         ff:3e:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----