Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File:                     zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier:          YIhjCp9vyL1+PHTewDsi1EssGIf5jXlWmrZ7JMGze6Q=
Subject key identifier:   87:AC:3D:CC:E9:19:98:40:58:97:AE:17:67:F9:2D:93:70:8F:0E:54
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer:       /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial:       01962ECF7B5E422A80A931534554D2692408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number:          0A98
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
                          2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
                          3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: Ej1GLTS0e5LfDbngASPuXaUv6ypN8n9qfEyaaPL/0I4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7b:5e:42:2a:80:a9:31:53:45:54:d2:69:24:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=87ac3dcce91998405897ae1767f92d93708f0e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:df:5b:d2:47:c0:d0:10:ff:29:e8:d8:29:
                    90:85:f1:34:e8:46:43:6a:4e:de:2a:1c:7d:53:4c:
                    c1:70:ee:ee:40:d7:72:7a:ff:2c:0b:22:bb:e3:74:
                    85:73:3f:4c:d6:ed:87:a5:97:81:25:c5:db:e5:f6:
                    b5:0f:e7:03:ff:c5:a7:ab:e5:ca:a5:04:1a:bf:73:
                    9e:ee:22:1e:78:73:1f:02:86:d9:4e:5b:63:9f:c7:
                    d4:40:5f:52:1e:08:68:72:bb:e8:26:34:be:7c:5b:
                    7f:72:e2:de:58:60:18:42:df:7b:01:eb:0e:d7:a7:
                    9e:c5:26:a7:2b:5b:03:a0:1a:60:a0:09:21:91:6e:
                    61:48:a3:9a:05:09:a7:62:52:05:94:47:49:4e:63:
                    85:64:25:01:b6:15:86:5a:45:e7:a6:4a:b2:76:17:
                    24:eb:6c:78:8a:95:2b:d5:c1:de:ce:ce:24:18:90:
                    80:85:08:b6:d3:e9:2c:b2:08:60:80:d5:c0:a4:7f:
                    56:59:90:ca:7c:fa:4f:51:8d:06:b4:eb:71:dd:5c:
                    dc:ce:2a:47:ea:00:8a:3e:c0:56:49:dd:7c:1d:cb:
                    bf:3d:cb:c9:6c:70:82:ad:da:df:17:94:15:68:d6:
                    15:b8:d3:a2:8d:52:07:af:35:fc:ac:90:a5:13:c6:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AC:3D:CC:E9:19:98:40:58:97:AE:17:67:F9:2D:93:70:8F:0E:54
            X509v3 Authority Key Identifier:
                keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:98:c4:bf:1a:68:8a:d0:58:6f:d7:a1:2c:63:7b:16:ca:71:
         d5:4a:f3:b0:33:d7:f7:1b:11:d8:c8:3c:f8:21:b0:ef:73:58:
         8d:75:63:52:60:74:df:8a:e7:03:d9:f7:08:a8:1f:f9:35:65:
         0a:4d:16:e2:6f:ca:4e:c6:5e:2c:a1:0a:aa:ce:ae:08:b4:51:
         c2:57:f3:5d:32:ad:f6:71:d0:6e:05:13:d8:07:ab:f1:10:13:
         42:73:35:f3:95:a1:53:af:39:8e:9b:53:34:dd:c9:74:90:2e:
         53:a8:df:76:c9:c9:dd:27:77:07:64:e2:b1:7d:de:76:a7:ca:
         5f:fa:8d:f3:24:3b:7a:cf:a2:e9:74:60:d4:c5:f5:12:d0:fa:
         c6:b5:a3:7b:ec:c2:c4:77:9a:1b:ac:db:bb:5d:19:21:04:7d:
         42:89:77:72:95:0b:34:87:59:a2:6b:eb:54:7d:8c:6b:63:a5:
         1c:53:67:18:52:12:4a:ac:8f:59:5e:59:d0:bd:e6:20:f7:ea:
         2b:0d:b5:b2:a7:97:9a:1e:11:cd:8a:ce:28:1c:3d:41:31:a7:
         14:96:c1:d6:bd:ca:5b:91:c7:6c:9e:9e:07:c7:cf:91:08:9b:
         63:a5:8f:9b:5e:3b:02:8b:4c:93:ba:92:cb:9c:da:0a:c7:1c:
         a7:17:df:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----