Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
File:                     NYx3zUAYPEEVsr8NznFuC8XQv9U.mft (raw, json)
Hash identifier:          5Eag7auavbdU0Cx5wnu2U9VXmYTM58k4fM8VEfaT/8k=
Subject key identifier:   5E:B9:B3:53:A5:A2:C1:99:F7:0C:E8:8E:DC:95:F1:6C:57:97:90:F7
Authority key identifier: 35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
Certificate issuer:       /CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Certificate serial:       01962FAB77213DF9BAD3C61B5A6CAD6B6AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
Manifest number:          0255
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: NYx3zUAYPEEVsr8NznFuC8XQv9U.crl (hash: 1VbPhftoiLMVoaKo739Xl6BGBhM1bd9Hyrvl9FVnpWQ=)
                          2: zdd_itkr61DwlSbiF7xORGma-Mg.roa (hash: s7+y8n33Kdf5OFXebrrUAhH6tASSitV8ofo7STn/T1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:77:21:3d:f9:ba:d3:c6:1b:5a:6c:ad:6b:6a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=5eb9b353a5a2c199f70ce88edc95f16c579790f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:7a:27:b5:74:b3:9c:b8:99:4a:c1:08:c0:
                    1d:87:51:cb:f2:21:79:23:e5:58:c8:7d:39:4b:01:
                    90:bc:c7:36:cc:9f:8b:7a:95:8c:e4:72:29:c3:60:
                    56:8f:dc:59:e8:91:6a:cd:ab:0f:ba:12:d8:4b:88:
                    65:69:69:0c:ac:50:46:d0:f0:d6:6a:dd:f1:e5:60:
                    85:da:bc:e3:4a:c4:a0:77:3f:a1:eb:43:49:15:b7:
                    26:0c:0c:63:fb:41:56:b6:5f:6e:45:ac:ce:ef:ae:
                    1c:09:50:64:ea:72:dc:61:d7:cb:5d:4b:5a:fa:1b:
                    c8:2e:5f:8a:48:49:b8:87:4e:f2:69:c2:d6:78:a5:
                    2d:af:32:d6:17:e0:ba:4f:c8:f2:1f:e6:bf:9e:cc:
                    df:e8:94:76:4c:aa:5d:1a:4b:8b:32:2f:5f:23:50:
                    e3:43:5e:5a:11:58:8c:de:b6:7c:b0:60:3b:84:3f:
                    51:61:9a:d6:f7:a3:98:3e:20:39:d4:42:4f:0c:18:
                    db:63:aa:b8:c6:ce:aa:89:f1:b9:1b:bb:67:12:3e:
                    dc:29:dd:75:1a:e0:90:c2:cc:2b:f0:03:0e:13:85:
                    a1:ef:05:8b:d1:61:23:b5:58:58:a4:40:4d:88:3c:
                    c0:d2:15:ef:08:15:6d:9d:63:10:17:2e:56:ea:c5:
                    d8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B9:B3:53:A5:A2:C1:99:F7:0C:E8:8E:DC:95:F1:6C:57:97:90:F7
            X509v3 Authority Key Identifier:
                keyid:35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d8:e8:bc:f5:f7:e5:7d:91:d7:b1:59:0c:89:c9:08:b4:f3:
         fd:de:b4:ef:a6:b1:37:75:41:6a:0b:d9:a7:d4:57:c6:0b:45:
         c3:71:ea:3f:c7:2a:36:69:e9:5b:bb:6f:36:91:60:3b:5f:fc:
         1b:65:be:ea:35:30:37:0d:45:ef:ea:ff:96:2c:d7:42:b5:53:
         21:bf:72:bb:49:63:5e:80:72:66:5a:9e:0b:4e:95:61:59:b6:
         63:bf:16:a9:d5:e7:a9:58:eb:7a:4d:0b:67:17:05:07:17:ba:
         e0:fb:6c:57:1f:b4:2d:9e:2d:ab:f3:89:24:11:c3:02:b8:84:
         b0:d2:12:31:31:ac:07:df:7a:c5:20:5d:23:4d:b5:64:79:c1:
         d6:4c:39:fb:5d:51:2a:67:dc:58:bf:ea:bb:25:08:27:b8:6e:
         75:54:27:c3:ba:13:7e:cb:30:88:4f:90:2b:1b:98:25:7e:df:
         37:71:2a:b4:50:48:a0:25:9e:1c:da:08:da:05:c5:8d:29:ac:
         6f:00:22:29:7c:0b:76:a4:24:b9:fc:67:f6:01:e4:d3:9b:12:
         0e:2e:49:0d:a4:3e:1b:da:17:a1:8b:73:d3:41:c7:ce:00:ae:
         51:67:fa:86:c0:4b:12:7b:77:3d:8d:ae:6b:1c:1d:a4:fe:38:
         0f:5f:bb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----