Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
File:                     ZKPnXG0KuryTHChHzaqGX7jX-c8.mft (raw, json)
Hash identifier:          r15ix88i0kF5+rD9qdECnGlKKTOOqx0lDgY2CwN71do=
Subject key identifier:   76:A6:47:94:A7:B5:81:A5:F5:9C:67:6D:6F:16:A2:5D:52:E3:8E:5B
Authority key identifier: 64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
Certificate issuer:       /CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Certificate serial:       01962E2B02E2A40BAFDCB2CCEF28CA08446F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: ZKPnXG0KuryTHChHzaqGX7jX-c8.crl (hash: ADP+I84arLG58mgxGQ1iiYuJJkpehsit+FxC354B0V0=)
                          2: y9vY7PQkblV9_5mGvnjpI_1sy2c.roa (hash: IUOwXFsA4FATdHPgwe2EY1C0pHGXri80WzQO/bHofMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:02:e2:a4:0b:af:dc:b2:cc:ef:28:ca:08:44:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=76a64794a7b581a5f59c676d6f16a25d52e38e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:7a:1a:8d:66:a2:33:7c:dc:63:37:a5:f7:
                    37:17:c6:6c:fa:bc:f4:8a:e3:41:13:0f:2e:14:44:
                    30:5f:bd:8c:7f:ae:f6:88:9b:bc:55:ef:53:56:27:
                    4b:24:8f:ee:9b:22:4f:6b:ba:9e:27:85:13:3b:bb:
                    ae:49:f7:ae:1d:c1:63:63:ea:a2:88:ed:cd:5c:f2:
                    b4:1b:fe:6c:cc:75:cc:50:1b:7e:2c:ab:1f:cb:64:
                    5a:2f:27:84:f8:97:a8:32:b0:a4:ed:66:60:f1:d9:
                    53:64:a7:61:c4:7d:70:29:b7:47:16:92:3f:98:3d:
                    19:cc:ab:df:3a:9a:d5:56:3d:12:58:6b:ff:f8:33:
                    75:9d:c4:9c:ff:9f:82:fb:4c:92:05:ad:d2:a5:cc:
                    44:31:70:01:81:a4:27:16:9b:60:34:8f:63:1c:29:
                    80:f4:33:27:5e:c3:ca:b7:08:10:83:62:25:ef:00:
                    d5:63:f2:83:91:be:67:d6:86:0d:5c:ee:cc:18:f4:
                    48:6a:fb:9c:76:54:65:34:ce:23:df:45:d6:99:a4:
                    19:3a:9d:2c:2f:53:87:e3:19:01:fb:71:21:fc:50:
                    99:9c:44:23:24:c1:09:bf:12:f6:81:3b:f5:0a:f2:
                    b7:69:5c:e3:30:78:1d:63:94:4c:90:ab:61:e2:0a:
                    b8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A6:47:94:A7:B5:81:A5:F5:9C:67:6D:6F:16:A2:5D:52:E3:8E:5B
            X509v3 Authority Key Identifier:
                keyid:64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:14:8a:79:f3:00:5c:2b:35:3e:b9:07:8a:da:4e:c2:85:
         a6:5b:2f:79:dd:b5:1f:f1:7a:8e:4b:7a:5a:04:f2:90:d9:78:
         41:f0:74:1c:2c:02:f8:6e:a2:c8:6e:bc:af:b9:49:d1:10:57:
         fc:b5:21:2f:64:c6:08:9c:ac:de:a1:25:58:4c:b7:c7:0f:71:
         83:82:87:6f:81:8d:bc:92:21:ad:87:66:f5:9b:03:98:08:d5:
         63:1c:5d:12:93:2e:62:43:2b:60:76:ad:f3:2e:6d:91:bd:1a:
         e6:4b:89:9a:88:cb:60:21:a2:31:c3:58:07:b5:71:e3:d2:91:
         b3:31:40:e8:eb:40:09:73:53:8c:da:85:53:cd:3e:93:d0:3c:
         fa:43:a2:70:65:0b:e5:8a:b4:4b:ff:f2:24:7b:1e:88:81:4c:
         a5:cb:4c:d9:98:27:52:14:89:63:e5:74:4d:ab:f1:f1:84:63:
         37:5c:0a:ce:e3:f0:a1:af:58:15:56:5e:44:a7:38:9c:61:49:
         22:ad:aa:ce:34:11:0b:10:f5:6f:51:d1:23:ce:c8:49:7c:a5:
         56:48:ae:40:b0:5d:55:f9:02:a8:48:e4:3b:dd:2e:64:b2:9a:
         64:99:85:51:67:5a:4c:8a:c9:ea:06:0f:0a:78:83:15:df:05:
         5a:6d:e1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----