Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File:                     Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier:          e/f3baWc9T4Y3Nrka0ZBSc7M3FtTmVval0ItDQee3Kg=
Subject key identifier:   48:6A:02:12:25:FB:FB:70:35:01:25:52:31:C1:80:D4:D3:27:62:A5
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer:       /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial:       01962E993E0A380DC95D5DD88959C535FA06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number:          123B
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
                          2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: vTQdX/l7jlCDJuDFxyi8pMriutTm2adLVA+5GL3ukZ8=)
                          3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3e:0a:38:0d:c9:5d:5d:d8:89:59:c5:35:fa:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=486a021225fbfb703501255231c180d4d32762a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:8b:6d:4c:c4:f8:0c:ba:81:63:d0:55:8f:
                    07:1a:e9:6f:1f:0a:2e:0f:30:be:c3:94:07:7c:b2:
                    eb:9c:fe:6d:04:70:ce:6b:70:c9:3e:0d:f7:b7:25:
                    95:b0:60:e0:60:09:8d:ba:70:5a:ef:2c:78:f4:cb:
                    33:a9:ad:fe:f2:cc:9a:1a:62:85:8d:c5:2a:c3:90:
                    ea:82:43:32:01:4e:c1:fe:01:8d:ff:49:07:e7:11:
                    f6:5a:60:f1:98:8d:0a:52:6e:60:df:61:90:93:19:
                    2e:75:33:75:73:ce:b8:1c:b8:05:89:58:07:1e:42:
                    52:00:0f:c4:17:c5:30:ea:46:31:1f:45:af:e4:ad:
                    1b:d0:6c:34:c3:e4:af:11:62:88:53:ce:b1:1b:40:
                    a8:cc:ea:68:00:41:e1:f5:29:04:ac:24:43:98:8c:
                    f2:cd:fa:8d:30:11:44:37:8d:12:95:f2:0c:bb:4a:
                    33:4b:90:12:ed:94:15:c6:34:aa:56:62:86:f4:42:
                    18:12:a3:0f:20:f3:a8:95:00:57:93:73:d0:82:8b:
                    d4:05:9f:a9:c1:62:6b:19:7b:7e:b1:da:84:f1:f9:
                    0b:e2:87:a5:ca:ae:a6:6c:6e:1d:08:d6:25:d2:76:
                    6c:57:2d:99:95:43:47:42:2e:c3:00:bd:b6:27:ef:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6A:02:12:25:FB:FB:70:35:01:25:52:31:C1:80:D4:D3:27:62:A5
            X509v3 Authority Key Identifier:
                keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:5e:26:42:22:6f:fb:ba:d9:a2:08:da:f9:0e:47:ef:fc:
         3c:dc:ff:61:17:96:b3:2d:f9:4e:d9:6e:55:04:db:74:d7:b5:
         c4:6d:20:e3:8e:12:47:27:76:33:79:70:22:06:d7:1f:f1:8c:
         d6:7e:16:73:78:a4:d1:ad:a5:74:0e:2d:1b:29:85:5d:0a:a7:
         d9:14:1b:bc:b3:38:5f:95:ef:b4:63:6e:11:92:3c:dd:fe:2b:
         fb:ad:22:8d:72:39:1c:e0:4b:f7:63:b0:40:0a:c9:14:9c:8c:
         7c:3c:1e:96:7e:5e:81:66:80:da:6d:83:22:8f:26:8c:97:a9:
         e0:27:6c:67:21:f6:17:d5:11:7e:c0:c1:7b:72:89:1d:75:21:
         d8:ae:80:de:a3:5a:d5:2a:e4:91:d7:15:51:fd:72:ae:3d:fd:
         f0:ec:39:c0:74:cb:41:14:06:75:77:6f:a6:8f:41:8d:66:35:
         9d:bf:d3:cf:98:75:44:1e:24:d5:5c:28:98:51:4d:d0:2e:2e:
         21:ee:ff:c0:a6:d2:15:e6:d6:cc:fa:ba:aa:34:e2:06:4c:ed:
         7b:dc:b9:39:9c:12:b3:36:fc:fd:9b:c5:e7:e5:ce:b3:0a:5f:
         40:5a:31:51:94:06:91:80:00:36:f9:ed:ed:7f:73:76:51:4d:
         7a:77:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----