Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File:                     Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier:          FC34QIZhu0WsR2ftetD8eWJznSMOMlJvP8B8Y+4xVYQ=
Subject key identifier:   B8:4E:53:EF:CE:AC:DC:34:3F:34:DF:A8:5C:F5:BB:AE:3C:C0:1D:A5
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer:       /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial:       01962DF3E1B94D2E8C3662F143EC74887D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number:          09AB
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
                          2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
                          3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
                          4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: 80lQR+WYZv3ZZyKCIbzbC4l+HvAIF10IcHcHUTrzGWI=)
                          5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
                          6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
                          7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
                          8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
                          9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e1:b9:4d:2e:8c:36:62:f1:43:ec:74:88:7d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=b84e53efceacdc343f34dfa85cf5bbae3cc01da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2c:d1:97:17:46:50:27:40:97:84:4a:e5:f0:
                    78:81:6d:07:9f:0d:a7:f7:e5:fc:d2:04:b6:bd:52:
                    8c:98:26:06:d8:16:63:60:7d:3d:6e:83:1c:c2:00:
                    48:56:4b:d6:dc:84:26:f6:30:d8:69:03:10:ee:3a:
                    4c:37:14:c2:8f:a8:29:84:bc:1d:70:20:cd:77:d5:
                    d2:3d:c2:3f:77:9b:95:a6:90:8a:3c:8e:ed:77:8e:
                    26:d9:36:ef:0f:20:54:12:ec:ba:0b:02:68:a9:a0:
                    4f:79:17:87:12:52:67:d2:84:72:5a:c2:33:3c:1b:
                    e3:4a:12:b9:fd:c0:ae:c5:0e:50:13:e3:ab:5c:b5:
                    db:55:1b:66:37:f5:14:52:11:6f:97:d3:10:31:43:
                    42:6e:54:4c:5c:47:d7:77:41:4d:dd:e8:06:a5:bb:
                    84:c1:cb:ae:a3:8a:3b:02:d3:74:8a:fa:2b:ab:af:
                    29:e2:7f:3c:54:7a:cc:22:f7:09:0b:0f:2a:5b:70:
                    cc:01:6f:8a:04:29:70:d0:23:eb:2e:1b:15:06:d1:
                    16:ef:64:b0:2e:b2:84:0e:02:d9:b8:0c:a9:89:88:
                    e6:e6:3b:8c:7f:4e:fb:28:91:53:dc:5a:74:93:7b:
                    18:67:18:2f:e9:20:68:24:d5:0b:70:a9:9b:fc:3d:
                    ee:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4E:53:EF:CE:AC:DC:34:3F:34:DF:A8:5C:F5:BB:AE:3C:C0:1D:A5
            X509v3 Authority Key Identifier:
                keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5a:fc:4f:c0:6e:76:30:64:64:d7:4e:cc:cf:ba:af:e6:f0:
         00:05:13:f4:75:8a:27:ff:6e:78:f0:cf:1a:0a:63:b9:d5:e9:
         01:2c:be:60:42:d7:4e:9f:ba:d5:36:8c:2d:56:b6:f7:38:cf:
         c7:bd:d8:02:ce:f9:e8:f8:01:7f:9f:02:9d:c5:d4:93:5c:f4:
         19:31:83:0f:95:13:49:00:f9:88:ae:08:80:91:85:ae:c2:03:
         09:4b:ec:75:97:b3:bf:05:00:70:1a:c3:53:2b:3d:d8:c4:d4:
         e7:78:75:f1:fd:f5:5b:52:45:e0:f6:c6:a3:a1:47:e1:ff:7d:
         4d:93:20:1a:e2:2d:30:5f:70:23:9c:8a:a7:8c:c7:36:e3:02:
         cf:34:c7:1e:e8:88:f3:c5:31:f1:f8:ab:a2:d1:34:30:1a:b9:
         bb:02:f0:1c:9c:a2:c2:91:fa:9a:0c:b1:cc:06:2c:b2:69:85:
         c1:5f:d7:d3:cc:04:7c:69:8a:f4:62:6b:6d:95:81:d1:d8:87:
         1d:eb:a4:a0:1e:21:d3:8a:c0:f9:28:81:3a:96:74:e5:dd:07:
         40:95:78:b9:00:a4:e8:b5:5a:af:a2:24:32:74:45:fc:08:65:
         a7:13:e9:79:a0:f0:15:f1:83:22:64:ee:92:97:de:2b:8f:ea:
         ef:94:71:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----