Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File:                     ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier:          +dumBC3yYAAsYoRk/VYlWrTF+86TEH8L8irpTB/YyDs=
Subject key identifier:   C2:26:4B:0E:91:EC:8B:F1:66:39:57:DB:24:E3:C6:B4:39:E2:43:7F
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer:       /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial:       0194BCE0920E17066812CD25A66B4407AB72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 15:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:21 +0000
Files and hashes:         1: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (hash: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=)
                          2: 64_MTb5KgxHA8ajybrrfkFaqSHo.roa (hash: 3HoEZ5o8a764cMBp72+Je8xSTOL3XWu1W9vfmUxztJY=)
                          3: NcFH54U_2J6k3O8FG01A4l3YkX4.roa (hash: /kjUMIh5yITP6UOhs7cpgkxUJuo6AlmV12M3gHqX+6U=)
                          4: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (hash: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=)
                          5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: CC98SMPceKdb4oTJI7nO95LJ9zLFHkiV0gWGFXH3Pd8=)
                          6: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (hash: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=)
                          7: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (hash: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:92:0e:17:06:68:12:cd:25:a6:6b:44:07:ab:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
        Validity
            Not Before: Jan 31 15:00:21 2025 GMT
            Not After : Feb  1 15:00:21 2025 GMT
        Subject: CN=c2264b0e91ec8bf1663957db24e3c6b439e2437f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:8b:ca:32:56:2e:c6:84:da:6b:d3:d1:32:
                    52:3b:46:1e:18:42:7d:0a:4d:45:f4:4f:82:2e:8a:
                    b6:60:12:c1:57:cf:68:3d:d2:05:0e:ca:81:4b:e7:
                    dd:89:03:4d:16:0c:96:b3:ed:e8:69:f1:80:e9:25:
                    fc:bc:29:4a:f9:21:66:90:d3:c4:ee:13:a8:70:c5:
                    05:43:10:7b:8c:42:8f:3b:e6:71:ed:47:78:d8:2e:
                    d4:b7:35:0d:3c:0c:dd:77:a8:f2:b6:66:9b:fb:a6:
                    bf:1b:9a:da:fe:4d:a2:8d:c0:0d:b7:c2:d7:10:a1:
                    a5:0a:95:1d:75:5c:6b:8e:07:16:4d:6c:38:e3:8b:
                    3e:74:e1:d4:76:5b:97:37:af:14:b0:ab:3d:1d:db:
                    d7:ce:e6:a3:64:8a:a8:d9:67:d0:72:7c:28:9d:62:
                    5d:54:02:e2:e1:dd:33:a1:45:22:86:6f:aa:4e:0a:
                    57:70:f6:a0:e9:33:6f:48:67:ba:f6:05:3d:1b:90:
                    f8:b7:93:c3:86:77:5f:33:3c:9d:4b:f1:89:c7:9b:
                    7b:6e:ce:52:a7:5c:5f:46:b9:00:35:33:d6:82:f3:
                    ff:23:94:81:b7:00:d6:83:8d:ed:dd:c7:ef:a8:e0:
                    23:57:b9:c0:4a:69:0a:cb:8e:8b:df:5b:73:41:b6:
                    44:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:26:4B:0E:91:EC:8B:F1:66:39:57:DB:24:E3:C6:B4:39:E2:43:7F
            X509v3 Authority Key Identifier:
                keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:73:e9:a2:32:9d:65:68:8e:e9:cb:25:68:15:53:69:ba:a6:
         5a:c5:9a:be:6f:b3:2d:d7:81:fe:58:2a:82:2d:dd:38:0a:77:
         16:d3:86:8e:6d:05:37:25:4e:34:95:4c:78:b3:ec:27:40:c2:
         cd:55:78:45:ed:e0:b0:72:1f:fb:1f:28:64:43:b6:0b:c1:13:
         89:1f:86:25:d9:61:b2:02:2f:aa:5f:b9:30:77:95:c4:82:6c:
         26:89:c1:82:85:40:45:88:dd:31:32:be:83:87:92:a3:4e:96:
         2c:01:56:1f:f5:ab:3d:82:5d:85:36:dd:d7:49:a9:26:f3:34:
         ef:73:c1:5e:29:03:98:5e:62:4d:0b:45:1c:79:92:6e:2a:a1:
         a2:36:cf:7d:7d:42:44:74:47:f8:99:42:ee:18:cd:70:0f:35:
         c2:71:08:8b:a3:c5:37:76:3d:1f:3b:5a:21:99:1c:fc:18:58:
         1c:aa:c1:61:b1:cd:c9:00:d3:73:7d:42:45:e9:4e:4f:e4:4b:
         ca:08:04:86:6f:78:7c:cb:15:f4:27:19:14:de:c5:9e:4e:44:
         fa:6c:05:33:b2:cf:23:c9:16:2a:1e:09:24:5f:79:a5:34:67:
         32:cd:25:c3:73:24:a5:b3:97:0c:de:f9:94:db:09:15:ea:6d:
         a6:d7:df:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----