Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File:                     zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier:          1LvsxzjCySQzNDPo7L+l4+pvug6NI/lx/IsM+s1CCwI=
Subject key identifier:   53:0C:73:24:CD:D7:44:2C:C7:99:F9:9D:27:20:32:4D:4E:E9:03:9A
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer:       /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial:       01962F068F64B427D83E4A9800C267B4A10E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa (hash: HgH2Bf6YxOfhcnv4hc8+KBaYB6o6R1j3iFpA4UR/vJs=)
                          2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: 7Kk1vxPqrL6sO+/EZ0TkbWl8dRxUgeKb9+M9gC8HLBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8f:64:b4:27:d8:3e:4a:98:00:c2:67:b4:a1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=530c7324cdd7442cc799f99d2720324d4ee9039a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bf:f8:22:b1:6c:dc:03:1f:cf:bf:5c:9a:c8:
                    99:ca:c2:a8:fe:1e:20:32:24:69:a5:a7:6a:f8:20:
                    66:ab:11:3c:f2:af:55:20:a9:1b:b1:fb:bc:5c:d1:
                    66:a7:4f:43:de:ed:1c:4b:8f:1c:53:d1:f5:1d:6d:
                    01:89:60:02:e7:1c:34:a2:07:83:c8:7c:87:69:bb:
                    1e:b3:9b:2d:15:4e:0c:0d:07:65:da:fc:44:1c:06:
                    66:02:17:2c:7e:e9:b1:f1:7c:c2:0e:6b:6e:b6:24:
                    09:91:df:7b:7f:a0:98:3a:ad:11:5b:c8:2d:04:51:
                    d8:31:88:c6:1e:a4:ba:97:22:06:29:ae:c4:8e:a6:
                    67:13:94:98:d7:c5:ec:25:f3:15:82:06:19:e8:f5:
                    cb:53:7d:b1:3c:ae:ef:b1:f2:ad:bc:1f:9d:84:6a:
                    15:08:cd:45:4c:76:62:74:d0:5a:6e:69:79:c8:5b:
                    34:84:07:52:66:42:5b:df:d3:2d:1e:f8:7d:43:e6:
                    ae:f6:a3:d6:81:af:8b:f7:ff:5a:24:a0:ac:2a:46:
                    44:32:f8:98:2d:41:86:e3:89:91:b4:96:2d:a9:ea:
                    99:56:1e:5e:83:41:ae:d3:b6:f2:cc:9c:55:f0:68:
                    b5:47:da:3f:d8:d4:4b:98:d1:d5:48:45:44:5d:7d:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0C:73:24:CD:D7:44:2C:C7:99:F9:9D:27:20:32:4D:4E:E9:03:9A
            X509v3 Authority Key Identifier:
                keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:05:fa:21:0c:4f:53:0b:20:a1:59:1d:55:02:81:fe:0d:b8:
         cb:4b:62:f8:33:d9:a8:44:30:31:9b:ad:8d:6c:9d:57:9d:6a:
         02:5a:fe:c0:fd:42:97:62:0a:a9:01:16:37:32:4a:99:83:9a:
         90:6b:fe:92:d1:53:b6:61:8b:77:82:dc:7c:f6:4b:74:63:a4:
         57:6f:83:95:7f:ea:03:63:24:6d:98:49:f2:4c:78:e3:b7:f9:
         0d:f6:48:cb:67:4d:b9:6f:91:7d:9f:93:34:60:4b:39:18:77:
         cb:a6:ad:81:4a:7f:0e:38:76:d5:bd:65:d9:89:1a:94:6e:e8:
         e8:90:6c:7a:fb:7e:bd:c0:6d:52:ff:eb:a0:e8:03:e5:ef:25:
         b6:78:c8:88:fa:e0:be:d8:42:e5:e1:dd:86:04:c4:f6:15:b8:
         af:57:d4:25:bf:5a:84:4e:d9:64:2e:f1:2d:69:ab:ef:f9:7f:
         57:fd:fe:e2:db:45:8c:76:33:d5:c4:78:ca:fd:7b:a8:bc:32:
         86:b6:a9:e5:35:16:98:2c:f9:56:d0:49:71:ff:b7:df:bb:f1:
         b5:99:9a:71:db:83:7e:ef:6e:0f:54:06:07:c8:7f:c3:70:92:
         7d:0c:ba:65:c9:ce:96:4e:6c:a1:0a:cc:41:14:09:aa:c5:db:
         54:12:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----