Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File:                     zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier:          zXGX/XCgHupufq4amXCi3PiErphByaUdikbdY98SWts=
Subject key identifier:   F8:C4:17:A3:02:BC:64:E5:08:C2:87:D7:56:C7:A9:6D:84:D9:D9:EC
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer:       /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial:       01962ECF5D5383769402AE61FE74E53A2FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=)
                          2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=)
                          3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: s8xFnkXNwFqlIhi9dsMM6scKn6sxBFx3NUUaHTI2Cns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5d:53:83:76:94:02:ae:61:fe:74:e5:3a:2f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=f8c417a302bc64e508c287d756c7a96d84d9d9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:d3:be:ca:62:c7:24:fc:28:7b:5a:88:33:
                    e9:08:4f:c4:e7:45:5d:0d:13:e9:3a:09:59:93:2e:
                    cf:80:f0:38:15:97:8e:4b:5d:47:3c:11:f7:52:ba:
                    8a:88:ab:2e:5f:21:31:53:23:84:aa:04:37:06:fc:
                    ff:f0:93:6b:6d:94:ec:2e:17:74:a1:ac:d9:35:33:
                    62:23:3f:87:55:46:63:29:4a:bb:a5:aa:63:ae:79:
                    04:c9:b9:1e:a1:2c:36:1d:2e:84:60:23:89:77:e7:
                    9a:9d:e2:69:28:aa:37:9c:fd:b3:c4:2c:57:5b:1e:
                    c9:31:91:61:43:5c:f6:c8:68:56:da:1c:06:e4:f4:
                    46:d6:ee:1c:79:26:33:19:67:53:54:d7:7c:1f:1c:
                    f8:bd:67:5e:dc:25:e3:5f:92:8f:90:49:08:e8:94:
                    70:e8:dd:ac:fe:6c:78:34:7d:da:a9:80:a1:0f:fd:
                    49:fa:03:8d:bf:2b:8c:82:d9:50:b9:a4:57:a3:4b:
                    19:e4:33:3c:54:42:d8:ec:33:6b:80:3a:33:32:3e:
                    19:04:ec:26:5b:81:24:01:ed:6b:2f:2a:43:84:1c:
                    11:a0:1e:fd:cd:54:a5:0b:eb:90:b8:45:18:17:d4:
                    59:00:70:7c:6b:d9:cc:82:88:fe:74:e5:03:37:70:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C4:17:A3:02:BC:64:E5:08:C2:87:D7:56:C7:A9:6D:84:D9:D9:EC
            X509v3 Authority Key Identifier:
                keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:26:7c:61:4f:8d:c9:1a:d9:5b:ff:5f:5a:f1:bf:3a:e7:87:
         d7:63:8a:1b:fa:a6:57:5d:64:33:81:ac:c1:2d:f3:9b:c8:97:
         ae:be:85:f1:51:77:1c:07:0e:78:72:ea:ff:3b:45:fb:6a:76:
         8f:65:02:10:d5:91:0f:7e:22:ca:d1:4e:0c:3f:08:b8:0e:f7:
         4f:4e:a3:a5:bf:8f:ee:00:d1:ef:39:ce:22:ac:ab:4f:ed:9b:
         fe:64:4c:3e:59:b9:cf:e9:9a:b7:b3:61:f7:b5:2b:d7:ce:4e:
         64:06:dd:08:3e:e4:9d:e3:b6:e0:88:6d:c2:ed:21:e7:67:4e:
         98:a9:81:49:0d:14:40:fe:b7:90:50:41:13:97:03:2c:68:e3:
         8f:bd:50:75:93:38:23:13:49:2a:3a:05:d7:80:96:c2:f7:dd:
         fa:61:df:59:a7:ba:96:2b:37:9d:1f:fe:06:ca:39:0f:97:b0:
         e2:b9:e8:f8:83:6a:d6:26:25:39:da:2e:9c:55:71:d2:a4:ad:
         da:f4:5a:40:6b:a0:3c:16:df:9a:f0:82:82:5e:77:21:44:2a:
         6e:da:d9:e9:4a:48:a8:a6:40:de:84:a8:34:04:94:4f:68:1a:
         7a:4c:c8:4f:01:9c:33:c8:5f:6c:18:09:2a:8c:93:ab:88:58:
         60:2f:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----