Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File:                     zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier:          8z7x6Ix137E2jWQe5MNVGQwNLxRkZt4wl48J3l2tbA4=
Subject key identifier:   32:A8:B0:6A:B6:AB:32:D6:98:81:F4:7F:41:5B:48:00:F5:E9:E1:8E
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer:       /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial:       01962F0681BAF27A72337D4C00F8B8194922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number:          049A
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=)
                          2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=)
                          3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: WGFnwFQE+OB0TjepAE7ypxkmqrE5rKajRdUrUGwDcL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:81:ba:f2:7a:72:33:7d:4c:00:f8:b8:19:49:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=32a8b06ab6ab32d69881f47f415b4800f5e9e18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:92:2a:28:f8:7e:b2:ec:22:9d:9c:1e:48:
                    12:5c:6b:9a:5c:dc:84:c3:dc:6e:be:3a:f7:d8:54:
                    b6:28:91:dd:9a:ab:d1:0d:89:59:a5:2f:4d:f0:ac:
                    46:12:0c:a6:2d:73:ee:d7:46:d2:25:e7:4f:b3:e4:
                    f6:fb:32:c8:70:40:2e:09:59:ee:5f:ec:b4:14:1f:
                    05:9c:ed:27:d9:f9:62:62:7f:29:fc:fc:65:45:bc:
                    43:b2:39:b1:9b:85:6f:a3:bc:13:92:bd:81:16:a6:
                    b7:ba:18:de:59:52:d8:2f:e3:75:46:2f:13:29:43:
                    00:eb:eb:04:64:d2:56:07:e7:7e:27:ed:38:c2:fa:
                    cf:34:05:8b:31:c8:a4:46:0d:bb:31:47:eb:d2:51:
                    e2:09:8b:3f:2a:f5:75:31:cb:80:14:37:0a:18:62:
                    47:f0:56:0a:06:9c:ae:4a:e8:60:05:39:ee:36:57:
                    66:85:ad:5c:a8:de:4b:6f:ff:2a:97:4c:11:88:fc:
                    c4:d9:00:ed:16:49:43:db:fa:f2:c8:58:ca:17:11:
                    56:eb:b9:e8:58:73:c2:63:f5:b4:52:d4:68:c2:d9:
                    0c:a3:fb:e8:7f:de:74:fb:bf:c7:0d:7a:8b:7b:57:
                    7f:5a:b1:7d:00:9a:4c:24:c9:94:20:13:58:7b:8e:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A8:B0:6A:B6:AB:32:D6:98:81:F4:7F:41:5B:48:00:F5:E9:E1:8E
            X509v3 Authority Key Identifier:
                keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cd:d2:71:d2:83:9b:89:11:93:a4:69:4a:a3:f7:e7:de:94:
         fa:08:bd:e4:21:fe:9a:9e:e6:ac:e5:82:98:46:25:69:54:03:
         86:b7:97:96:3e:e3:64:ab:4b:c0:c4:5a:16:61:d0:ec:4a:7a:
         c6:cf:83:eb:e4:b0:89:e8:f4:66:62:12:9f:76:63:23:bf:49:
         87:2f:70:43:67:09:fe:89:66:3a:35:ce:f1:72:de:d6:7b:3c:
         27:94:ae:e6:21:bc:ee:58:30:87:58:3e:6f:17:a6:f8:f7:cc:
         68:63:2c:d2:7d:c6:97:f9:f7:d2:11:a8:21:fc:8c:ef:8a:b2:
         3a:9e:1b:72:0a:1f:04:51:87:6e:67:64:31:da:6e:a7:72:86:
         2a:13:ef:8e:48:32:f4:1a:cd:48:fc:a3:80:14:36:d5:80:58:
         27:f9:71:d3:f0:be:fa:3f:9a:26:b3:1e:ff:0f:96:44:e1:e3:
         86:9e:88:b6:1c:e1:a8:8d:08:ea:ea:a8:54:ac:ff:90:91:c7:
         43:4e:02:6d:e5:fa:19:8b:6a:c4:30:c5:da:57:f7:5a:f8:7a:
         ef:86:49:ce:15:83:2e:f8:25:25:e0:0a:14:5a:f4:74:27:4f:
         6a:40:18:4f:db:14:9e:93:d1:23:00:1b:c2:ca:42:51:b1:21:
         fe:91:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----