Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File:                     Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier:          EgckOwFwjantRakTVmk4oBHeJZFfjV+JOtJBrG0HyKA=
Subject key identifier:   A6:4D:35:F9:6D:EF:22:69:61:FC:20:10:16:01:66:E3:75:40:66:76
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer:       /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial:       01962F74680A8ED60B16D6E037BF70499271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number:          119F
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: h0bZ6eKB1XKDBlR2iiIEE8lAP4lxpxhDNgneO1xpqNs=)
                          2: gbEdvQz4q0AdyM98MXiZjERkDX4.roa (hash: QnkSlwi1hREwXQkmvd9zqXoHe57V+gXhpktYubECCFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:68:0a:8e:d6:0b:16:d6:e0:37:bf:70:49:92:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=a64d35f96def226961fc2010160166e375406676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:6a:3b:0d:8a:29:b8:1a:50:20:6e:1a:f1:
                    c2:9b:1d:20:db:36:ab:26:cc:f7:0c:c3:ae:de:b5:
                    5f:1d:a4:d4:c7:c9:2b:24:4f:b1:6c:19:f4:e2:09:
                    01:f7:6c:e3:17:79:e0:31:07:76:3c:e8:e7:89:2b:
                    85:01:3e:7b:6f:a4:9d:9b:55:d8:54:2f:f8:e4:1f:
                    be:be:5f:a8:e0:5e:79:00:81:83:09:26:fa:32:d5:
                    4d:06:69:c0:ce:e4:c5:35:02:c9:5d:cc:fb:87:92:
                    59:f4:b8:bc:2e:de:7d:75:ae:69:5c:46:40:66:aa:
                    0f:98:32:a5:fa:65:ae:c6:82:4a:1a:9d:e6:99:04:
                    55:71:45:41:06:04:3b:36:57:72:4d:ee:78:09:67:
                    20:76:b9:3e:c1:c8:89:ab:b6:71:c7:89:4c:45:72:
                    44:70:8d:db:dc:bf:64:7b:d0:44:f0:61:ab:61:91:
                    18:e4:7a:ab:5f:cd:e2:0a:a9:16:1f:60:a6:ed:4c:
                    98:cf:2d:dd:23:99:82:c1:20:28:8b:20:a6:5f:98:
                    85:32:f9:1b:57:41:29:17:0f:db:5d:e9:f0:c6:21:
                    87:83:25:e5:39:d3:bd:ba:5f:ee:b3:3b:ae:df:30:
                    c0:bb:cc:4f:e3:7a:7f:34:da:df:15:8a:58:33:c5:
                    e3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4D:35:F9:6D:EF:22:69:61:FC:20:10:16:01:66:E3:75:40:66:76
            X509v3 Authority Key Identifier:
                keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:ff:bf:67:84:e0:50:25:b4:f1:5b:d0:13:69:eb:8b:3b:
         0a:a2:49:0c:a1:ec:53:89:b3:63:73:6c:d3:4a:b8:98:c5:45:
         d4:4a:0b:cd:bf:de:d7:29:c4:41:34:3e:e6:d9:22:f2:84:1f:
         aa:bc:9d:ea:23:11:06:f7:38:8f:e1:03:4d:4b:7d:7a:eb:2e:
         63:18:d0:c3:f2:83:19:4a:da:94:44:e2:cc:9c:ad:7c:80:6c:
         be:73:01:15:41:be:34:80:f2:ef:9f:72:19:d1:eb:29:f8:8a:
         a8:4e:70:1f:4c:e2:4b:5e:d9:9a:07:be:13:5a:2b:d4:ad:4b:
         af:44:c3:01:0d:2e:47:38:a9:cc:df:9c:a5:42:b0:c2:ba:80:
         ff:65:86:a6:02:10:f8:83:1e:24:a3:7e:ca:6d:92:7c:80:e9:
         60:9c:1f:07:14:2e:21:f0:a8:96:ed:ce:ae:df:82:92:e5:b9:
         f9:e1:50:e4:6f:f3:22:e7:c2:01:79:36:a0:47:7e:87:a1:89:
         f8:c7:26:c3:07:86:5f:ee:dc:ec:ab:13:15:83:82:65:92:55:
         b5:b3:75:c2:7e:eb:c0:db:77:98:bd:da:58:8a:4f:f2:b4:c7:
         2b:3d:9c:9f:bf:6b:b1:0a:68:01:58:c9:f2:3b:3d:5e:80:e1:
         43:21:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----