Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
File:                     cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json)
Hash identifier:          ZwmEF9DyuJdT9GNybNVHpK0J9c4XMPpzAUOgV1WAK5g=
Subject key identifier:   22:B3:28:EA:0E:B0:FC:FE:1E:1F:AC:B2:F2:1A:A4:5B:3A:13:54:30
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Certificate issuer:       /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial:       01962FAB0BC3949F880F24A820DA5FD7D6A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
Manifest number:          0A9D
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: NznO4CxJJ6L0xLB6PTLKpB7weFM.roa (hash: cSE4XxBXPFFORCEl811D1OzY3o/1e0FebNC7EW5YkMk=)
                          2: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: mcE64S82kgRC4vE1qG4r0x9AMSRKP+1bYia2Q/7XntA=)
                          3: hVV7bHBD-mLe_PCozGrmTHxovsM.roa (hash: YI06CwugD4QjZYDajA4+sFtJ0/JL/QvZ5A+ius2+OkM=)
                          4: i_ZSP4msxm1SkHkJA_HtKWJPNjY.roa (hash: XTx/K5oWGL66kYYSkjQ0rxGrZ4iJ40KRc43mQ3O3oXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0b:c3:94:9f:88:0f:24:a8:20:da:5f:d7:d6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=22b328ea0eb0fcfe1e1facb2f21aa45b3a135430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:66:77:d6:6a:b1:91:d2:f0:78:95:d0:7e:
                    65:0d:fa:98:3b:82:f1:10:bc:b2:0e:da:1e:69:47:
                    67:94:d0:19:42:61:d7:6d:43:79:51:61:88:a8:c2:
                    19:41:67:0f:19:e6:06:bc:db:a6:89:ab:6f:cf:fc:
                    23:af:f9:a6:11:67:2b:e0:8b:ab:05:ba:c4:33:88:
                    89:d8:05:7d:e4:2f:ff:b9:77:82:f6:c8:ac:4d:e3:
                    7a:0e:b0:74:6d:ef:be:cb:7f:11:d3:bb:88:15:c3:
                    47:26:fd:fa:6c:f8:f8:e7:c2:ae:fd:89:ed:c7:7e:
                    c1:99:86:b1:e2:3b:2d:1d:7e:74:77:80:18:d4:c6:
                    e9:fc:ac:3a:b1:10:92:96:02:5f:e7:48:d2:bd:a4:
                    ab:b1:c2:43:1c:27:d1:2b:e1:34:4d:3c:42:e5:68:
                    93:d6:b5:92:a1:9f:1b:59:57:16:c0:68:97:fc:f9:
                    0e:07:9c:14:43:5c:88:65:b7:d4:09:fb:71:a9:1d:
                    27:ac:ea:ae:42:aa:31:71:59:d9:03:da:a6:c9:29:
                    0f:ab:30:23:88:a3:53:d8:d9:f5:59:9d:1e:8a:90:
                    1a:01:a5:38:00:da:6e:31:b9:2d:7a:99:c8:5f:f6:
                    b8:a5:93:cc:d6:b9:f6:fb:a2:01:33:90:3d:32:c9:
                    0d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B3:28:EA:0E:B0:FC:FE:1E:1F:AC:B2:F2:1A:A4:5B:3A:13:54:30
            X509v3 Authority Key Identifier:
                keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:93:b0:fa:2e:ed:d7:4e:04:4f:de:cc:25:6a:15:42:19:11:
         ee:48:47:c3:20:1d:f0:5e:02:e0:6c:00:00:10:86:39:d1:1a:
         c4:6d:23:91:98:b9:49:c9:e3:89:07:a1:df:a4:23:66:3b:5e:
         7d:ea:f9:a6:5c:22:cc:78:7c:5d:58:89:4d:d0:95:e2:23:e5:
         b1:ae:af:55:92:50:d9:3e:f5:06:1e:9c:4b:ca:3d:75:d7:63:
         32:cc:a0:73:b3:f7:81:e3:59:c9:1c:85:3d:15:4f:02:58:b1:
         6b:9c:50:f0:0d:26:06:c4:37:5c:a2:08:bb:f7:4e:42:84:2b:
         66:bf:d2:53:90:7c:db:ca:13:1f:47:39:6b:a6:97:4f:51:f5:
         51:4c:8d:64:19:7e:e7:4f:20:c8:fb:50:4e:25:25:ab:8c:b2:
         c2:cc:c8:23:ce:d6:93:d2:09:7c:4c:9f:eb:40:67:b6:90:10:
         9a:b1:c8:c1:a5:5e:58:59:0f:1e:0e:b9:59:0d:71:47:fb:c0:
         fb:44:0d:51:8a:cc:d9:3a:7b:ad:e0:ab:44:d1:b2:de:3c:61:
         ff:3c:27:da:c8:62:fd:d3:c4:61:bc:20:5e:5a:d3:0f:e2:a8:
         73:40:73:65:2d:37:5b:b5:fe:4f:78:a9:40:84:f3:79:13:a0:
         c9:e5:97:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----