Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
File:                     zR5W5MTEpRjyOIpay1rwRSzCpZU.mft (raw, json)
Hash identifier:          33aGHneDBDrMwz7kUMadqw0hh3eAcGCk5KtS5vIe6fw=
Subject key identifier:   23:69:AB:3E:D9:81:CE:75:C5:3F:42:4F:7E:D9:43:00:D1:6C:51:6D
Authority key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
Certificate issuer:       /CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Certificate serial:       01962F3DDFB7D841E85FDD37B8DAF9C02105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
Manifest number:          0CB2
Signing time:             Sun 13 Apr 2025 13:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:46 +0000
Files and hashes:         1: ke5imTlr7fT0_-DE8h9O78Ggh4s.roa (hash: 05xyuy/re9IJXLD81+YTPEcHrtJ82VFe2mcpWEaKIAc=)
                          2: zR5W5MTEpRjyOIpay1rwRSzCpZU.crl (hash: 6phdC5SRT3cv37jVw89omf8lMc0srn0zZZrGJq2DUQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:df:b7:d8:41:e8:5f:dd:37:b8:da:f9:c0:21:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
        Validity
            Not Before: Apr 13 13:01:46 2025 GMT
            Not After : Apr 14 13:01:46 2025 GMT
        Subject: CN=2369ab3ed981ce75c53f424f7ed94300d16c516d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:12:7b:7f:2f:63:6c:13:00:af:59:d8:aa:
                    1e:78:87:ab:19:7f:13:92:e9:69:e1:f1:70:14:1c:
                    6f:50:bd:70:45:d8:f0:4e:e9:b1:78:64:72:f7:2b:
                    f3:fd:8c:43:70:3e:64:37:d3:e6:23:e8:65:a7:0e:
                    ec:84:a6:8e:bb:41:11:c9:f4:35:1e:7a:15:ef:76:
                    0a:df:63:76:ed:a4:4e:b2:b2:c0:ce:76:57:af:c6:
                    7d:e0:62:54:64:ae:30:a6:c3:d7:88:7c:92:6b:7a:
                    3f:fa:60:78:43:3f:b2:45:fc:1c:f3:f1:1c:1c:cc:
                    1a:56:84:65:65:48:f2:57:f4:5f:37:99:1d:ff:7b:
                    1d:41:d0:bd:73:a9:c3:bb:8b:13:6c:8c:44:0f:7b:
                    57:1d:a0:7a:e2:66:3d:8e:cf:6b:a2:a8:76:79:bc:
                    66:cf:e4:31:21:01:16:bd:ee:99:0d:3a:c7:e3:9c:
                    04:f2:e5:6f:ae:d7:0a:f9:f0:2d:37:b2:f0:77:97:
                    23:b7:11:c1:5f:5f:40:53:a0:c4:c4:d5:b3:ef:2f:
                    e1:85:39:30:32:cd:7b:83:48:b9:c5:82:37:f3:33:
                    df:ee:68:f9:83:37:b4:ea:6c:46:d6:ae:b1:66:3d:
                    9c:70:6a:5f:31:d8:e9:95:42:ba:27:1a:49:a0:6a:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:69:AB:3E:D9:81:CE:75:C5:3F:42:4F:7E:D9:43:00:D1:6C:51:6D
            X509v3 Authority Key Identifier:
                keyid:CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:82:08:31:4a:54:e2:c7:59:9f:91:a8:2f:44:7b:87:87:a6:
         87:ce:98:e9:bf:84:d6:c1:b8:05:4a:8f:3c:fe:9d:e3:b5:36:
         61:4b:e9:d7:57:07:f1:49:ec:e6:5d:a1:9f:ed:51:e5:2d:67:
         bc:59:28:d9:e2:d4:69:31:e3:60:96:62:33:0b:bf:45:a6:ec:
         0d:41:93:27:3f:ae:e9:9a:47:06:c6:09:ab:2a:e0:f3:21:b8:
         e7:51:49:d8:ad:e5:d4:38:d9:fa:92:f3:9f:d2:10:dc:0b:50:
         bb:e9:fe:73:cb:2b:7d:d3:2c:9d:b1:6a:47:78:58:65:eb:00:
         63:d1:5f:8e:fa:9d:91:7e:77:6b:09:b6:8a:fb:94:9a:4c:10:
         0a:ba:65:1c:23:c3:18:a1:74:c9:ab:a4:10:98:fc:d9:94:f9:
         85:37:8d:6b:32:a5:7a:63:9c:ff:d5:d1:76:cc:bc:88:be:0d:
         56:7f:7a:45:ce:1b:6f:1a:61:e0:fe:64:e2:97:d0:3d:5a:20:
         d0:58:ec:7c:82:2d:1d:8c:44:97:14:37:4f:5f:88:b8:38:e2:
         14:b4:19:c6:7a:79:12:29:b1:29:3a:a9:9a:ac:4b:4a:95:fc:
         5e:5c:b1:f9:f1:ef:c0:f8:53:e5:d8:7f:8b:b2:66:f7:b0:45:
         32:c8:54:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----