Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
File:                     ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft (raw, json)
Hash identifier:          WEKqhG0ZVYdmBeaoIU/zFiR9CZtbnQaF0EbgOJZyXdA=
Subject key identifier:   31:BD:CF:4C:7A:1D:E5:63:B2:CB:2D:B8:B0:27:A1:94:33:AC:3C:25
Authority key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
Certificate issuer:       /CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Certificate serial:       01962F74687FCE5FECB342881E0CFD7268B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: KWbEbWMWx8GsR8Asb1Hi7iVj3A8.roa (hash: w7QiyqZy99cacAStF09i7GMZP3QKH24tEZwntPEoeMs=)
                          2: ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl (hash: jvGNmojyySWVZbJ0PjsEiVjKgDTc78evZWd/xcPmPic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:68:7f:ce:5f:ec:b3:42:88:1e:0c:fd:72:68:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=31bdcf4c7a1de563b2cb2db8b027a19433ac3c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:71:c5:9f:0a:64:f6:54:a1:a6:e0:cd:ab:
                    da:0b:e7:1b:e1:bf:6c:fb:69:3b:fb:2d:fa:17:b6:
                    26:82:17:3d:94:5d:bf:e5:fd:e4:7f:66:b8:01:ca:
                    14:41:4e:cd:55:0c:e6:76:80:09:c0:58:3b:30:1d:
                    d6:1f:48:c5:16:cc:a5:36:db:ed:39:b3:8f:7c:50:
                    e4:c9:61:f2:6a:47:eb:41:47:80:2f:78:fd:1e:e8:
                    06:8f:2f:83:83:f2:3d:c6:58:22:00:6b:b6:ea:cb:
                    7c:65:e5:2c:73:76:71:b8:53:c7:17:d4:65:1d:36:
                    c7:35:33:5f:42:bc:b2:c7:4f:9c:75:fe:4c:1c:c6:
                    fb:cf:9b:25:d3:c5:8a:f3:07:fa:4a:68:61:39:6c:
                    25:4b:09:a1:47:53:ca:e1:c4:2c:5e:31:53:bc:97:
                    c2:68:6b:4f:67:61:e3:73:0f:52:12:52:fc:bd:85:
                    89:1f:b5:94:a4:06:cc:51:d0:ff:c4:ee:6b:55:c0:
                    1c:d2:13:f9:95:c4:ec:53:e3:ca:d9:50:ab:43:e4:
                    64:59:64:82:d4:ae:ac:6d:6a:ef:78:f6:ea:79:fb:
                    20:b6:c7:2b:d0:8c:6b:96:16:84:e7:b3:2c:a2:31:
                    ba:25:ca:b5:5d:27:82:6a:7a:56:29:f4:33:db:e3:
                    b1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BD:CF:4C:7A:1D:E5:63:B2:CB:2D:B8:B0:27:A1:94:33:AC:3C:25
            X509v3 Authority Key Identifier:
                keyid:65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4c:8f:4e:52:05:82:68:d0:06:04:c0:0a:fb:ae:71:82:1c:
         08:af:1e:43:dc:5b:53:2b:2d:26:2b:2e:f1:61:67:22:dc:57:
         77:e4:1a:84:64:7b:b7:ce:6b:4a:02:b7:fd:bd:55:61:c1:0d:
         0d:ef:65:47:2e:71:f1:7d:d1:f9:fe:1e:5d:1b:27:eb:05:1b:
         13:db:c7:a4:63:a8:48:4f:79:f2:ec:9a:ee:09:38:1f:6a:01:
         ba:a3:d1:ed:19:ad:30:67:02:b7:4f:45:b6:2f:45:47:76:68:
         c1:2a:3c:f6:be:cd:af:f8:4a:33:9d:30:d2:3a:9a:37:7c:8d:
         0d:5b:ed:02:90:a9:d7:ec:c5:68:7c:22:89:11:7e:d1:fd:a1:
         b9:d0:91:6f:b5:7e:9a:ff:51:ab:08:4e:12:3e:fe:77:76:74:
         40:95:22:17:08:cd:5b:5f:f3:f0:29:82:6e:bc:b6:c4:c7:48:
         a9:55:d1:cb:12:65:81:e6:14:4e:09:da:8f:92:77:21:3c:5f:
         2d:64:4d:f9:d9:0f:2a:be:56:28:f6:8c:ce:c1:36:c4:8b:20:
         d8:01:8b:ea:af:1c:db:74:66:db:c4:e0:7e:b7:9f:33:a4:a8:
         4f:57:51:0f:34:63:e9:c6:f6:84:73:c2:1c:ce:56:8f:24:93:
         f0:93:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----