Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File:                     ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier:          v5aChuf2/UleMwi886GI7vn2Z5g4faTiK5AiZydof74=
Subject key identifier:   ED:00:F2:C9:EB:BC:FF:F9:A3:5A:3A:A8:0E:14:18:EE:12:2B:EC:12
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer:       /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial:       01962E2B381397D577D419627B6FB7772E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: g52JlsW2JW8wtyHii0G4aE+yaK4qqUzvAOjbF6k+4MA=)
                          2: d98mF8VuRmp24iJGNGtsA82Qm3k.roa (hash: St6m9PVExFvayS/533ff6DbQIFfqWRPHTLli6ct6T54=)
                          3: pxA2emkj1Wi4hN6RLcWYaRGwohw.roa (hash: uZbURZqzj+fL5lJVe1ufQh9sUQe5T2Re+0qL38WwpV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:38:13:97:d5:77:d4:19:62:7b:6f:b7:77:2e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=ed00f2c9ebbcfff9a35a3aa80e1418ee122bec12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:31:c0:76:6f:7e:46:8f:3e:6c:19:de:5f:
                    6f:3e:51:bd:32:99:99:69:24:33:4a:57:d3:da:ed:
                    7a:fe:d8:b5:e9:a3:25:30:cf:cf:3b:59:eb:4b:c3:
                    76:8d:ae:89:da:a4:30:05:6a:ff:b4:9b:ca:34:58:
                    a7:ca:59:01:eb:a1:cb:5c:8b:b3:95:22:ed:2f:47:
                    e2:37:a7:69:5a:60:42:6c:1e:c0:7a:26:af:a0:d7:
                    f5:d8:df:a7:52:14:01:02:9b:22:75:43:c2:00:47:
                    39:f6:66:0e:15:11:c3:34:8b:02:21:13:aa:4a:ad:
                    38:a5:a9:0e:f1:37:e2:4b:60:ff:6d:a2:89:9b:49:
                    14:13:ab:d9:d4:fc:7d:31:ef:5e:7a:d2:d6:73:fd:
                    1e:14:61:9b:04:70:e5:6e:cb:06:9c:d1:b4:18:05:
                    d8:57:fb:7d:74:f6:5f:b8:23:cd:c8:c4:d4:16:ba:
                    a8:9a:6a:60:2c:77:ed:b2:c1:81:15:5f:e3:bc:62:
                    d5:0a:ab:e5:36:03:ea:c1:d4:1c:63:01:af:08:17:
                    5b:9d:0b:f2:ad:bc:83:b3:bb:3a:3f:ff:88:52:e1:
                    85:f8:96:01:9e:8f:24:d0:7f:f2:a0:d3:4f:49:19:
                    c9:21:ab:3c:17:7a:8b:83:74:af:7e:a7:0f:c5:01:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:00:F2:C9:EB:BC:FF:F9:A3:5A:3A:A8:0E:14:18:EE:12:2B:EC:12
            X509v3 Authority Key Identifier:
                keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:29:6d:bc:53:a5:d3:c8:20:f5:ec:0e:b4:5e:70:d2:23:08:
         89:7b:30:ab:de:e5:73:f5:b7:33:14:0a:11:c6:fa:25:81:0d:
         fb:c4:93:41:25:5f:45:3b:27:c2:93:16:4c:21:c1:40:b1:dd:
         ea:69:ef:c3:03:4e:32:14:be:02:8f:06:96:31:5a:57:ab:e6:
         b6:e0:20:9f:09:86:8a:2d:01:78:63:b1:79:01:40:a2:04:e3:
         82:ec:50:b6:c9:ce:a0:6f:1f:c7:ec:40:34:2f:45:1b:d0:6b:
         f2:03:99:ac:d5:64:df:8c:8a:d7:59:3a:ec:19:d8:85:6b:91:
         f0:47:d3:7e:fc:9a:76:0a:2d:e8:ff:5d:bb:8f:ca:3e:40:e5:
         88:f6:12:42:70:20:c4:3d:d7:05:ee:1f:04:72:8f:dd:bf:2a:
         36:c5:f0:c7:8b:95:33:93:55:2c:25:7e:20:c9:d3:a5:88:9f:
         cb:2b:0f:10:e8:07:fc:68:be:dd:d1:f3:6e:9b:6b:7d:34:cf:
         83:6f:cc:a2:88:fe:82:3d:e3:b5:af:4a:29:cb:1c:07:65:88:
         24:d6:e3:93:d8:0e:c6:4e:b3:45:66:6c:3c:75:d9:a0:c0:78:
         15:15:d6:8c:90:55:9e:9a:80:48:75:03:a3:5b:6c:23:da:a7:
         44:51:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----