Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File:                     ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier:          oYVVj12bGRHfwVeXT/avh6PWwEBOmKn45bey5KkPhzU=
Subject key identifier:   BD:F8:1E:85:A9:FC:4C:6E:F9:03:C8:D7:75:10:08:71:82:96:23:23
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer:       /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial:       01962FAB4DDD3B354299FD51B1EDEBEB5CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number:          0A35
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=)
                          2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=)
                          3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=)
                          4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: uwIQaGjJhHsqWGA6d+jfrfvwSLBqwYb2OT70K4U7Z2Y=)
                          5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=)
                          6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=)
                          7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4d:dd:3b:35:42:99:fd:51:b1:ed:eb:eb:5c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=bdf81e85a9fc4c6ef903c8d77510087182962323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:e6:f6:11:2f:01:48:b5:2e:2b:e3:f5:2b:
                    b0:ab:4d:e9:71:8c:32:74:23:c8:f4:8b:3d:c6:d4:
                    b3:69:98:01:94:74:b5:cd:db:14:47:ff:b6:6e:96:
                    79:01:85:f4:ab:16:bd:f2:5b:e6:21:9f:93:a2:23:
                    32:da:aa:b9:9a:a8:7c:0f:9f:11:ff:f1:32:e3:5e:
                    c3:2f:51:f3:ff:0f:de:49:27:08:59:67:81:d0:c3:
                    18:42:49:90:0b:8f:46:4d:39:00:64:2b:49:1d:7d:
                    0b:8f:16:2d:61:37:f1:0f:f5:19:62:3d:29:92:06:
                    6c:f0:72:03:8f:c5:6b:85:c7:aa:54:17:18:1d:a8:
                    ec:ed:81:5c:13:a4:1a:51:0f:a8:64:19:f4:83:cd:
                    02:28:86:97:75:13:d1:ea:a2:aa:06:08:9d:4d:fe:
                    0e:b8:4d:8c:3c:49:e1:fe:9b:17:f9:f3:8a:57:91:
                    6a:63:cc:20:37:6b:ce:63:81:03:50:d7:c9:55:01:
                    7b:71:bb:3c:13:0e:a3:39:bc:27:95:d3:60:e3:2c:
                    16:e0:89:5d:0b:47:81:8e:d9:bf:9e:5a:af:88:37:
                    8a:95:34:f1:8b:b6:16:a4:f5:21:46:e6:43:d8:c4:
                    e3:39:45:a2:c9:26:19:1b:08:6f:e2:b4:96:ce:f2:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F8:1E:85:A9:FC:4C:6E:F9:03:C8:D7:75:10:08:71:82:96:23:23
            X509v3 Authority Key Identifier:
                keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:f4:b1:50:76:d7:c2:a2:09:3a:2b:9b:02:31:21:8b:f1:
         64:24:db:c7:2e:f1:b7:90:34:c5:12:d6:2d:af:f3:81:cb:99:
         83:f6:73:15:cc:3a:6e:e0:42:7f:fc:41:e2:79:77:e9:7b:90:
         66:a6:5d:a3:99:75:8c:73:27:9a:ce:6b:26:3d:2d:45:61:d6:
         08:65:f9:3a:a5:88:16:c0:5f:0b:d7:ae:01:c4:f1:bd:da:b9:
         86:cf:2b:49:5a:a7:b7:c1:c9:65:fd:a0:e3:a4:91:d5:29:49:
         f6:c3:21:73:56:f8:b7:76:a3:17:2c:e6:30:e9:51:9e:89:fb:
         df:36:f1:1b:5f:41:53:87:8e:2e:84:a4:aa:63:36:f1:a0:97:
         98:80:6f:52:7c:cd:0d:df:50:9c:61:03:09:18:a6:0f:2c:af:
         ed:fe:56:9e:f8:19:15:a7:43:20:ca:e6:cd:c0:59:fa:f6:40:
         bb:18:2c:16:08:cb:4c:b9:0e:4b:25:d5:eb:db:18:ea:c0:ee:
         5d:d8:fd:58:bf:2a:b2:ed:cc:98:52:62:ce:50:c1:af:b9:94:
         dd:69:3d:5a:83:ca:41:fd:63:01:05:51:3e:da:3c:85:c9:94:
         36:b8:0a:37:00:62:65:d5:d3:ca:2a:65:3f:c1:dc:7f:07:57:
         cf:4d:fb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----