Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
File:                     zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json)
Hash identifier:          DP3TuFa71QDKFcfDe4oVaKSJWnAZOhr1jKwHlQ5ns30=
Subject key identifier:   CA:E2:F8:FF:C6:E2:5D:49:F7:23:19:0E:CD:47:0A:A8:83:C9:73:50
Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
Certificate issuer:       /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Certificate serial:       01962E2AC62A9E3B151CBE68263951EF7727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
Manifest number:          02AA
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: Kj9VfdUCgMk4aGgFNgZJ64WvAz4.roa (hash: B1YIPHashB6NFlEh7qNPbd/2OLMoFdhR39F9O5/IGts=)
                          2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: QRRTXAZymYCcRhJmuKbHLaqp7OyKOmupTfaQUHSWiMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c6:2a:9e:3b:15:1c:be:68:26:39:51:ef:77:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=cae2f8ffc6e25d49f723190ecd470aa883c97350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:80:f0:66:0e:3b:44:83:52:65:8c:e9:1e:
                    85:5d:49:bc:a2:91:a0:86:68:52:19:8b:e5:45:b5:
                    da:34:f3:b6:36:8c:33:e9:9c:60:dc:17:50:a1:99:
                    26:e4:41:5d:6b:81:95:53:0f:7f:f0:e7:85:cb:ba:
                    6b:44:22:a7:b1:05:4f:b8:4f:17:8e:33:5c:91:b0:
                    8c:9f:75:cb:1e:82:8f:a1:66:13:df:d1:4f:d3:56:
                    a1:04:7b:10:fb:e2:2c:62:a2:1f:13:7e:c1:c4:f8:
                    f2:85:83:fb:bf:86:5d:e6:1e:6c:1e:14:76:c5:8b:
                    65:59:fb:34:e5:1a:8d:79:af:88:86:37:63:fa:0a:
                    f9:4c:2c:2b:d9:d7:05:64:50:0f:4a:a4:9e:05:c7:
                    3d:f4:61:b5:f7:f7:24:c2:a7:b7:4a:f2:22:3a:1d:
                    ef:b5:ad:55:20:76:23:d3:fd:72:19:2c:59:b8:d9:
                    eb:11:29:95:45:12:98:4c:1d:6a:b5:14:61:61:9e:
                    4c:7e:c9:15:50:c0:de:17:e5:05:35:6f:aa:9d:fe:
                    b7:dc:ef:2a:a1:cf:ba:f0:93:63:9f:37:b3:df:84:
                    41:47:d9:c2:83:65:8a:e3:d8:11:e0:de:8e:1c:d0:
                    fd:00:78:59:5b:4e:d8:4a:fa:dd:fb:67:f4:69:32:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E2:F8:FF:C6:E2:5D:49:F7:23:19:0E:CD:47:0A:A8:83:C9:73:50
            X509v3 Authority Key Identifier:
                keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:98:97:7c:48:e1:e2:83:7b:2b:0c:f1:da:97:69:be:ea:9e:
         a3:c9:f7:0c:44:f1:44:25:05:bf:13:b4:9f:16:a4:23:2e:57:
         d3:1c:dd:0a:df:68:bd:c7:54:53:7d:94:94:6a:a1:e3:c0:84:
         68:20:52:40:02:67:ca:a9:c3:9e:bc:0b:e8:77:d0:f5:a3:78:
         d6:7c:64:70:0b:83:e3:d1:be:8e:37:d1:e4:74:dd:f1:67:e0:
         1d:67:9e:de:06:e6:16:ff:f7:f8:c7:53:2b:f8:c6:bd:c8:e5:
         fe:bd:52:9c:32:8c:9f:8f:18:8c:40:d5:c0:b6:0f:ea:ab:a9:
         01:32:77:ce:64:87:d2:3d:4d:ff:e8:50:22:3a:1d:e1:d6:c2:
         9c:4c:11:42:d7:53:d2:66:a9:4f:82:43:d9:6f:0d:93:9d:bc:
         ff:c0:40:8f:03:3f:f6:ec:79:12:ff:8a:a8:0f:eb:b5:55:10:
         a4:38:df:d2:41:52:d9:ff:87:4d:2f:43:97:8d:96:7a:3d:e3:
         f1:10:68:c7:ce:f0:03:40:99:d3:77:ce:c0:ca:75:51:ab:e7:
         df:0a:b9:94:cf:1c:fe:2a:34:47:8f:38:0c:ab:63:a4:b1:2b:
         7a:f3:ba:09:1b:d4:6e:f5:69:a4:ac:48:40:3f:c8:7e:85:6f:
         df:7e:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----