Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File:                     NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier:          ANh2cHsQfvnGaipp3vkWGJJMxTzd8eq/klXtWY8ISYk=
Subject key identifier:   5D:A2:CA:84:F1:BE:D5:CD:5C:11:15:1C:BB:19:21:81:0C:EB:0F:FD
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer:       /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial:       01962F07058F7FD23E9DC05DAD332529982C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number:          0D2E
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: 62OqoZCNY9EeqjyKlx4fg2hp/4s/pKmlPnHqpWAQiJk=)
                          2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:05:8f:7f:d2:3e:9d:c0:5d:ad:33:25:29:98:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=5da2ca84f1bed5cd5c11151cbb1921810ceb0ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:88:4c:e9:9c:2f:c0:7b:3c:e3:58:6e:7a:
                    30:bd:48:11:d7:3e:98:24:38:22:4b:64:2d:c4:ae:
                    4c:b6:af:e1:76:ba:bd:1b:8a:6d:1f:8e:bb:b6:f8:
                    6f:e2:97:36:99:0f:c8:00:63:80:61:49:88:69:0a:
                    e8:95:44:0f:ca:d4:a8:28:a2:8d:39:27:f3:e9:96:
                    8b:ff:e0:e8:06:c8:ff:78:aa:bc:fb:f6:e9:c8:74:
                    f6:9d:33:68:e4:f1:4d:34:7c:5d:9b:ec:32:3d:47:
                    6d:5b:fd:73:3c:86:f3:8e:e1:29:d3:cf:3c:00:71:
                    7e:cd:a7:05:4e:3e:e4:03:01:ba:99:4f:be:a4:d0:
                    fa:26:fe:73:19:72:41:11:39:c6:f4:08:ef:4c:10:
                    f5:c0:68:8f:34:82:fe:1b:86:39:1c:e4:4d:a0:4d:
                    87:5f:0e:c8:2b:e3:09:bf:5f:67:61:94:2c:47:90:
                    d1:83:9f:41:df:bd:95:63:c0:59:44:06:74:fd:c1:
                    ed:b7:4b:5c:98:b6:b6:43:b8:a4:62:f3:24:67:8f:
                    46:c5:bb:06:04:f8:48:0a:43:5c:8e:ab:fd:56:7e:
                    3e:df:2d:5c:53:2b:81:0e:dc:71:21:be:25:07:42:
                    c3:2b:b8:97:80:14:01:9f:98:ae:50:c0:ab:4a:dc:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A2:CA:84:F1:BE:D5:CD:5C:11:15:1C:BB:19:21:81:0C:EB:0F:FD
            X509v3 Authority Key Identifier:
                keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:02:62:e1:23:a8:f6:10:28:ca:3a:02:bb:b1:3d:aa:7b:30:
         c0:b2:05:39:c7:c2:b3:19:74:7a:b3:12:50:f4:31:6d:bc:50:
         0d:e3:87:46:89:6e:6c:68:e1:8d:93:92:08:94:42:5c:25:bb:
         86:62:15:fb:e6:0a:34:42:02:bf:53:dd:b2:5e:94:f6:25:76:
         57:82:8c:3c:34:85:f4:d6:d1:ca:b2:c6:61:5a:37:f4:a8:90:
         11:43:42:e0:19:88:4a:88:47:66:48:5f:44:2c:c7:b4:36:0b:
         2d:a0:cd:c4:92:3b:89:32:bb:f9:ca:3c:99:28:4d:14:c8:8f:
         3d:fc:9c:d9:fa:7e:b9:11:93:1e:47:cc:f2:a5:66:e9:da:61:
         aa:81:dc:07:aa:c2:72:b5:15:b3:a0:6e:e8:77:cb:2e:0f:89:
         66:c6:f7:16:3e:5a:ec:a3:af:80:ef:6c:9f:e9:33:72:81:d8:
         d4:42:74:01:3f:b7:7e:5f:60:64:b9:bd:99:b2:f7:63:24:6f:
         65:22:7d:cd:7b:3e:a7:32:bc:74:7b:50:9b:11:9e:35:f6:50:
         38:55:fe:89:15:41:a9:9c:35:e0:f9:e2:3a:f1:a8:d0:84:82:
         2c:d7:80:cc:71:87:fe:03:33:60:1d:24:48:8b:66:53:f6:ec:
         99:1f:ea:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----