Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File:                     dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier:          EyDqLoBNgFeVxa6QP7jtIn3bkBRQ2n84disVyKmZcnM=
Subject key identifier:   F4:12:71:3D:15:1D:FD:69:C0:26:B3:AA:41:95:EC:C8:42:DD:A7:48
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer:       /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial:       01962DF4399AB47700E22A04E1B7ACBC4CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: gCtJOTABheesyXNQp/9/i2dE7yRRevJ6zr7GlSmHWG8=)
                          2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:39:9a:b4:77:00:e2:2a:04:e1:b7:ac:bc:4c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=f412713d151dfd69c026b3aa4195ecc842dda748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:06:5e:c5:b8:7a:45:f9:a7:76:41:9e:cb:
                    9c:13:85:3f:e3:6e:29:28:4f:11:cb:e9:f5:b3:a1:
                    f6:61:93:af:d9:0a:e6:e1:24:ce:17:12:98:73:d2:
                    4c:63:5c:1d:05:93:f8:91:36:9e:c4:5e:34:8c:18:
                    4d:0a:a5:c8:73:a2:03:ec:34:cc:ef:13:22:f3:90:
                    fe:2f:2f:3c:10:1b:a6:a8:e1:a9:43:62:23:ba:cc:
                    2b:33:1d:b2:c0:5c:1f:ce:2f:1f:19:19:d9:48:ce:
                    63:a3:74:49:74:91:cf:b4:53:d7:5d:82:16:96:37:
                    b7:37:92:f4:49:66:52:63:53:9a:96:6c:12:20:45:
                    85:3b:eb:28:44:0f:98:3c:58:b9:a4:69:d0:81:ac:
                    7f:9e:27:88:e2:ca:04:f5:89:ee:cc:0b:a6:c1:a9:
                    af:61:70:71:ae:32:42:77:2f:3d:95:6c:5a:05:dc:
                    d7:e9:57:9e:25:fe:72:e0:d5:5e:b6:1b:21:65:15:
                    7d:06:a3:f7:d1:b7:ce:be:79:03:0b:85:3e:3f:43:
                    f8:89:95:ce:7d:7c:c7:05:36:4d:da:85:85:58:53:
                    e3:7f:50:e1:b5:63:ee:8b:39:1e:28:a0:3e:80:7f:
                    5a:9d:5b:92:cd:87:b3:b5:6b:57:32:96:6b:b9:16:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:12:71:3D:15:1D:FD:69:C0:26:B3:AA:41:95:EC:C8:42:DD:A7:48
            X509v3 Authority Key Identifier:
                keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:96:5a:02:e2:f5:2c:5a:d0:68:31:51:e5:d6:66:5d:e0:95:
         6a:75:c6:65:4c:71:45:84:9a:67:c5:44:9f:50:d1:16:81:0b:
         86:4a:a6:a7:82:ee:09:5d:72:9b:10:b0:60:80:5f:17:43:1c:
         30:51:7b:cf:ce:65:ac:22:0b:88:de:8b:37:66:09:ad:25:94:
         0c:37:54:1d:40:6d:bf:c8:37:f0:fd:01:e7:53:31:8a:84:62:
         f8:ce:fb:ff:4a:87:5c:22:99:68:14:56:4c:96:d1:0e:c5:68:
         46:ca:6b:a1:d4:3d:ac:56:b7:ba:f2:60:d0:5e:c7:6f:01:8c:
         84:ab:ce:97:ed:91:ee:39:f4:23:78:24:4b:12:0c:1f:07:8a:
         b9:cd:a2:56:0b:57:e3:80:57:33:79:49:41:7f:52:8a:ca:0a:
         fb:fc:ba:4a:98:7a:2c:b8:6c:94:5f:2c:1c:fd:fa:7c:e9:83:
         f6:e1:ab:ac:60:9d:33:9e:0b:49:97:70:64:0b:b1:f0:89:9b:
         c1:e5:7a:8d:a2:69:ac:ef:53:84:e1:79:4d:a7:69:d2:22:b0:
         f0:d1:8d:11:64:70:05:e8:58:72:7b:d2:9e:8d:68:db:74:e6:
         f9:91:b4:a1:b0:e9:2a:ad:4b:f8:e2:e8:cc:77:26:b9:27:7a:
         40:bf:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----