Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File:                     ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier:          HLPhcxETcW+zljrxp0vvxbXFm4uCDbMlBa4RkpV++vw=
Subject key identifier:   38:D5:3B:88:41:DE:92:80:AA:90:15:61:77:7C:6C:8F:88:1F:01:5F
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer:       /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial:       01962E99BBBB434F9B08A4EA3085F625FD75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=)
                          2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: qMqBoJgkCXWYTs8HHC9a+WDPizWN24DchhrbNrmZDGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bb:bb:43:4f:9b:08:a4:ea:30:85:f6:25:fd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=38d53b8841de9280aa901561777c6c8f881f015f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:ee:ba:a5:8c:4d:f3:ff:ab:f9:8d:58:00:
                    7e:5d:b9:b7:13:e4:0c:f9:18:d1:69:79:1a:18:72:
                    92:c2:f3:36:1d:6c:0e:2d:e2:b9:43:d0:dc:66:de:
                    98:3a:2f:7a:7e:5c:4d:1c:d6:3e:96:98:02:3c:90:
                    5d:53:43:7c:4e:5f:50:66:8b:f3:3f:69:3e:35:07:
                    ab:2f:0c:d1:c0:9d:c3:d8:c5:a1:8f:a2:71:a3:5b:
                    55:60:00:7c:23:0d:38:ea:28:c3:9a:d0:fe:b7:57:
                    62:1b:b9:ea:c9:72:a8:19:e1:c0:84:f5:d4:de:5a:
                    8f:6e:cf:31:04:cd:1d:ca:89:09:8a:23:a2:15:1d:
                    66:20:35:e7:94:59:38:bb:b4:01:47:77:16:69:b9:
                    fa:3f:2c:82:4e:85:7d:cd:24:08:53:3a:83:36:8b:
                    07:84:16:59:21:1c:9c:d1:f7:9c:26:eb:f1:d1:fa:
                    6f:5b:16:99:29:c3:22:db:37:dc:90:ad:a2:20:41:
                    d8:32:87:80:c9:ee:9a:d9:38:6f:85:e9:4a:2d:b0:
                    b0:41:b0:2e:94:c2:e8:6f:72:44:9f:3c:84:8a:ab:
                    82:c4:6e:89:5a:7c:28:80:d9:d6:f4:bb:90:c1:a0:
                    76:e9:bc:30:e1:22:ab:9c:82:2e:64:50:f8:c8:a7:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D5:3B:88:41:DE:92:80:AA:90:15:61:77:7C:6C:8F:88:1F:01:5F
            X509v3 Authority Key Identifier:
                keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:92:17:08:70:ff:56:9d:e2:7a:61:b1:98:76:e8:83:6a:ca:
         ea:b7:2c:64:4d:5f:3e:19:3e:94:e6:c1:39:e2:2c:3c:3f:db:
         14:e4:ac:9c:9d:9c:b7:7b:d6:d8:a7:fb:9f:25:4e:36:b4:36:
         75:31:ad:6a:e6:67:c8:a5:85:40:8b:5e:1c:b4:3e:49:0d:d3:
         2a:3f:5c:ae:e0:57:90:81:7d:4b:5a:9e:6e:05:cc:c4:c9:9e:
         f7:30:72:95:b1:fc:2d:f2:93:14:9a:75:ec:9b:e2:e9:0a:78:
         de:e9:72:66:09:c0:31:f7:a2:cc:2d:4c:cc:51:26:40:ae:e5:
         4a:d2:13:95:2c:04:3b:67:64:3e:83:51:61:7e:13:13:5b:64:
         3f:d6:0c:34:cd:0b:3c:13:80:bb:35:bf:98:32:82:46:32:6f:
         81:82:f7:a3:9a:36:a2:6a:12:5c:f2:29:98:cf:46:9b:6a:41:
         01:e3:93:23:8b:d6:89:2a:01:c8:7c:21:42:89:58:89:1e:01:
         2b:45:f2:25:7e:47:3c:10:76:9a:30:da:a9:0e:92:90:b1:d6:
         46:14:86:a9:98:16:11:49:26:76:29:30:ae:6f:67:47:08:e1:
         57:c1:31:17:30:cf:46:33:b0:53:8b:5c:d5:0f:7e:ed:18:0f:
         5b:c6:9b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----