Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File:                     fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier:          Z3kYadbIb3wgXCMcbH/UVlUYPPuBJ5XwYw9iZeR4LXY=
Subject key identifier:   4F:5C:9F:65:C7:83:08:27:D2:82:0E:9A:14:5E:F7:85:F6:1E:D7:7E
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer:       /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial:       01962F3D6188F79D4073CFD8655A1D101802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number:          04DD
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: tS6klIWqZQHaOuPyz/ya8eGpNKgxRCg4nxbB9fIjkU8=)
                          2: zA58kveqXgli4S_Gmvm71Z6gYvA.roa (hash: U7XAD6S0aMw4lkO5A8lwquVG5gdGFXidXMd3PA0M/Nw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:61:88:f7:9d:40:73:cf:d8:65:5a:1d:10:18:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=4f5c9f65c7830827d2820e9a145ef785f61ed77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:22:7e:c1:d9:de:ef:ab:be:56:dc:cc:ea:
                    cb:38:ab:26:8b:c2:42:52:a6:5a:ce:d7:17:19:0c:
                    bb:90:7a:22:83:cd:8f:3c:d7:37:46:8b:ec:11:65:
                    1d:e2:f9:21:0c:66:3b:3e:ef:a6:55:a4:e7:e6:eb:
                    6c:6a:b8:17:ff:c1:9c:52:0c:2f:c4:82:45:dd:71:
                    70:50:24:7d:d8:e6:76:98:fc:25:91:81:49:75:f4:
                    9f:26:1d:68:02:fd:6e:8a:0e:0d:02:e6:8f:98:05:
                    94:b9:b4:98:8a:5f:a4:c0:4a:fa:08:ee:3b:df:01:
                    43:fe:a4:4b:77:50:6f:95:15:20:84:7a:99:6e:f0:
                    93:b1:df:f4:be:84:d8:61:f5:4a:03:8c:58:ab:82:
                    b6:0e:f2:5f:71:2d:14:8d:9f:81:94:80:6e:04:4b:
                    70:49:26:fd:16:58:6f:ae:ec:9d:43:d5:d6:22:3a:
                    37:1f:a6:fa:5c:bb:14:b1:3b:a9:76:fa:d8:13:5f:
                    c9:c0:9b:cd:59:03:bd:91:93:67:7d:05:8f:7f:18:
                    5d:05:ee:b8:e3:ad:99:1f:d3:d2:56:65:d4:8b:45:
                    9b:50:16:e9:88:5a:d3:ff:76:ea:88:59:f3:0e:44:
                    12:b3:3a:b9:69:0e:eb:76:bd:5c:fe:c9:b9:00:be:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5C:9F:65:C7:83:08:27:D2:82:0E:9A:14:5E:F7:85:F6:1E:D7:7E
            X509v3 Authority Key Identifier:
                keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:03:7b:1f:d2:0a:5b:7b:5a:69:66:8c:ba:ce:13:37:bc:
         a9:ac:d3:b7:83:d9:b1:4e:0d:db:90:d5:1d:72:29:39:60:ec:
         77:67:0f:57:4f:31:32:2e:1b:38:cf:5b:26:5b:2f:ec:bc:82:
         e0:aa:03:db:5e:a4:a8:53:7f:fd:94:f3:0e:a9:8e:b5:2b:03:
         21:d7:6e:49:b0:5f:6d:e6:ec:18:54:b3:8c:72:24:7f:03:5e:
         b3:24:5c:1a:40:ac:d3:03:45:5a:12:56:34:e5:dc:db:62:31:
         a2:25:76:df:fa:ee:83:e2:8f:bb:e0:b6:fb:6f:27:76:f1:a0:
         eb:af:5d:05:cd:11:5b:56:21:76:a3:a6:bf:b5:28:53:4e:50:
         70:02:f3:ba:21:2e:89:b6:5b:a2:a3:ad:24:63:bb:bc:ce:9c:
         97:35:6b:cf:d6:2a:d0:e8:5a:34:5e:66:b2:56:6e:fd:1d:27:
         34:dc:4b:77:6c:52:14:30:66:17:ec:4f:8f:98:41:e4:4f:4b:
         85:6c:f1:1d:ea:6d:62:b2:8e:00:3a:e9:e3:ee:d9:b5:b9:2c:
         4b:b9:01:f2:73:68:dd:db:bc:79:61:26:c2:65:4b:8f:0a:ed:
         c2:d1:3a:98:db:e2:83:d4:3d:5c:17:b3:17:8d:e1:f8:82:f7:
         4a:f0:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----