Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File:                     BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier:          T7tVyyzPYazsHxUmmvnmDjoynEf0WcYFrPzMb3Szo6o=
Subject key identifier:   1B:24:71:A1:6F:BE:A8:59:A9:91:81:39:80:5D:8A:57:E7:9F:EF:E4
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer:       /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial:       01962F3D6CC726D9BC8E19D78EB6395F3EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number:          02E9
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: o9RvKrQEHjXpaYk2hSApzUW+s6Tmz9DTJJTFvaFVNTQ=)
                          2: J8Ib4FQqHMHCvKM2y1SUnog9X74.roa (hash: f8Ibq/aTG18/pniIFSUAU4E687jQnL2EjkQj6M5lHl4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:c7:26:d9:bc:8e:19:d7:8e:b6:39:5f:3e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=1b2471a16fbea859a9918139805d8a57e79fefe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:78:76:e3:8e:cb:cb:20:4f:8f:ca:81:45:
                    a0:e9:47:f9:68:e3:8a:ee:23:65:36:b3:91:1c:51:
                    d6:ca:3e:7d:5c:fd:38:c2:7e:d4:0f:2f:92:5e:82:
                    60:ab:38:c8:46:c0:6e:fd:43:7a:d4:a5:6b:48:f9:
                    0f:6c:62:c8:2f:19:50:ea:fe:46:74:53:2c:25:e9:
                    f3:c0:2c:87:54:4f:5e:9f:a8:a0:e4:c4:8c:e0:a2:
                    b0:e0:d5:08:b5:82:73:fc:51:a4:bf:2d:25:66:5f:
                    af:80:27:e4:f5:fe:21:60:42:66:94:31:8a:de:8d:
                    69:61:39:89:36:60:7e:e2:88:41:d8:66:a8:f0:c5:
                    b4:84:02:49:4e:f0:f9:d3:dc:b3:ea:c7:f9:1e:37:
                    b7:45:78:ac:7a:70:b4:ad:a8:0b:1c:a1:ad:32:77:
                    c8:b6:e3:85:c6:ba:68:da:cb:59:83:75:73:04:ab:
                    a6:f4:0b:ba:aa:e4:8e:2b:09:ce:f4:3c:06:81:f9:
                    f9:8e:9a:8a:e7:07:0c:a8:45:f0:31:28:f1:15:39:
                    1c:9d:88:96:c8:5d:09:df:5f:eb:02:32:7e:3d:b5:
                    87:a5:38:97:d1:dd:1a:78:82:c0:d4:1a:85:f6:5e:
                    d0:36:06:57:7b:9f:c4:f1:53:b1:c8:1b:09:73:39:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:24:71:A1:6F:BE:A8:59:A9:91:81:39:80:5D:8A:57:E7:9F:EF:E4
            X509v3 Authority Key Identifier:
                keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:da:57:c7:b1:93:57:e3:72:bb:ef:c2:3f:19:9c:e4:dc:35:
         00:8a:17:6d:8f:91:2b:77:2e:07:44:a6:5c:90:e9:11:21:9e:
         7c:5c:5a:b1:12:10:ee:a4:0f:27:7b:5d:49:35:0c:0b:ac:5c:
         95:5b:80:ae:64:b5:bf:63:e5:4b:7d:74:48:83:e8:65:f8:07:
         bc:29:76:19:f5:a1:5c:1e:24:f0:82:15:fd:ee:cc:c7:2f:ae:
         26:e9:98:ed:de:95:57:a1:b8:d8:ee:69:0d:3c:0d:4a:1b:6d:
         f5:f0:50:c3:70:ed:f2:7b:77:11:1b:0f:6d:de:de:01:f8:21:
         25:56:e9:be:82:f6:da:3f:71:4c:b4:ba:1e:41:0f:2f:6d:91:
         20:cc:b0:8f:0d:51:41:35:6e:db:75:82:69:96:27:dc:47:c9:
         86:31:3d:e4:07:ee:9c:aa:23:91:5f:37:81:2d:a5:06:a8:9b:
         83:5e:04:5b:08:59:00:42:18:e8:5d:db:58:fb:e6:f1:72:0b:
         5c:a4:11:a7:eb:31:63:de:2f:2f:16:45:ba:8d:38:9f:1c:9d:
         a6:0a:9b:98:14:42:e3:41:af:20:fc:35:cf:c0:57:5e:6e:9c:
         1d:ba:ae:95:9f:83:17:d7:4f:dc:df:6e:ef:44:5b:4b:20:ac:
         82:7a:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----