Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File:                     zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier:          Mdxo6+NGFDfoIwyJwZb50IQTfdtFlOsHH3fQpaK1TS8=
Subject key identifier:   72:49:95:91:8F:4F:F5:F6:D2:9F:5C:97:16:0A:43:E9:A6:02:5E:0D
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer:       /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial:       01962E9867114B2AD67D1CDE3771E4B0A582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number:          1035
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=)
                          2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=)
                          3: kAtcjeL4q23GFCUbpg4QtXInyEI.roa (hash: 5K8wPb3jbiUlLft+liX8W5eEXe9eE+pHlH9nNwzDSk4=)
                          4: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: Rl/ra2zSHMWqSe9Rcox+IDx4x1kLy7CGtCmxLRYFb2w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:67:11:4b:2a:d6:7d:1c:de:37:71:e4:b0:a5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=724995918f4ff5f6d29f5c97160a43e9a6025e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:f9:21:21:b4:dd:48:4a:e7:3f:6f:e7:c1:
                    2b:bb:d4:31:36:09:bc:df:7d:17:25:0b:e2:a8:47:
                    16:d0:b3:e6:02:23:d8:5f:34:be:73:a1:7c:b7:12:
                    06:8e:a1:11:8e:a3:a4:8d:03:11:9e:01:7d:01:59:
                    73:13:da:7a:f1:c4:33:f0:b0:35:1f:dc:b2:c2:26:
                    2d:fd:5c:98:c2:9c:42:fa:52:8f:0e:9b:57:7a:ae:
                    d6:53:c8:06:e5:40:ca:38:be:41:a0:15:80:3b:db:
                    5c:aa:b1:4a:f1:a6:bd:28:a1:02:30:73:ad:36:30:
                    a5:ff:57:97:80:fe:c7:0c:49:10:50:3a:aa:df:9a:
                    a4:79:84:e1:d3:91:7a:cd:00:a6:0e:1f:c4:46:b4:
                    99:d6:a5:55:a9:6e:e4:f9:19:d9:3f:30:e6:87:e2:
                    59:f9:14:e8:9c:e7:ef:d9:63:3b:54:04:b9:2c:ea:
                    22:a9:09:5a:5a:c4:a1:4d:ad:d3:01:f4:ab:05:0d:
                    e5:cd:ef:5c:34:83:df:53:5b:59:6a:e9:99:ca:ce:
                    07:14:4f:6e:ee:a1:fa:73:c0:90:51:db:60:48:ba:
                    1a:04:71:71:39:f0:77:08:09:00:b9:9d:7a:64:0b:
                    d8:c0:af:6f:d3:28:dd:ff:c4:93:26:2d:9b:6c:8a:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:95:91:8F:4F:F5:F6:D2:9F:5C:97:16:0A:43:E9:A6:02:5E:0D
            X509v3 Authority Key Identifier:
                keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:71:3b:4c:90:6d:ab:b4:0e:2f:81:8d:8d:a0:8a:d8:fd:92:
         8b:27:ab:39:d8:61:21:29:c2:35:b7:9c:83:6d:b4:c2:62:eb:
         e7:81:5e:58:f8:3c:67:86:de:df:1d:f4:db:09:64:a3:2b:d0:
         74:2f:dc:33:a1:d5:48:94:da:b1:c6:be:fe:36:f9:50:64:7c:
         00:35:68:f2:b9:63:9e:a2:0f:0f:58:7b:79:94:41:ce:9c:da:
         77:cb:c7:39:80:62:20:a3:f8:a2:0c:e4:48:e7:c2:76:cb:6a:
         73:dd:fc:ad:57:46:f9:bb:63:fd:7f:54:cf:4c:af:fc:ef:48:
         f0:cd:d6:81:6b:4e:c1:87:c6:dd:48:aa:3f:37:dc:74:2d:89:
         39:4e:ce:cb:68:7b:8f:56:c2:1b:ce:d4:99:3c:d2:ce:39:72:
         b0:e1:9c:55:7b:3d:71:c3:b9:5c:75:e6:cb:0e:a7:40:cb:ee:
         bc:87:06:73:c3:c8:2c:53:9c:d4:22:86:4b:d3:a8:27:61:70:
         fc:42:fb:15:94:c4:31:e5:f0:ed:f3:f1:5f:e7:53:bb:53:3d:
         5e:55:a7:95:17:b1:54:ef:53:e0:47:e2:ad:09:fc:2d:a2:95:
         78:7d:34:ad:37:3b:51:69:31:33:98:11:32:a5:d4:18:f1:b4:
         1f:5f:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----