Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File:                     Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier:          0IF7hspYpyJWQebKKqE9JtvkB7xYk7ExzKfIyqHPU8g=
Subject key identifier:   69:5C:F4:77:B0:B9:F9:61:E3:C3:25:B3:86:D8:1D:35:94:54:61:3E
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer:       /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial:       01962ECF5391072D4D71179EB5EDB01794B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number:          0B27
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: GVUeOB4dXXqj9XML1jN57j3Df5M.roa (hash: Gudd1ItpySLdTVSh5GugJVCfXdpguWaKVtT1YrB4g6U=)
                          2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: ZgmseYU+rPUFFNOKk/YXOha43MSv4PjsTJ6hUNztcq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:53:91:07:2d:4d:71:17:9e:b5:ed:b0:17:94:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=695cf477b0b9f961e3c325b386d81d359454613e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:61:87:69:ce:30:85:92:06:2b:8c:49:ef:2f:
                    b8:81:f6:59:92:04:98:ea:4d:2a:6d:83:96:c6:b6:
                    77:51:99:49:a5:d9:cb:73:c1:79:16:d8:da:d7:10:
                    cb:64:e8:51:2a:05:5a:e7:25:ec:7b:d9:03:92:a8:
                    b5:c4:a7:37:1f:82:3e:37:cd:6a:05:0d:31:14:69:
                    ea:dc:53:b9:61:0b:9c:e3:68:9f:97:27:d7:e4:09:
                    3c:12:8e:d0:b3:73:54:66:6f:5f:85:1b:7a:91:34:
                    11:d4:7a:64:19:8c:c0:05:0a:ff:20:f6:60:e2:08:
                    9c:94:b3:c1:0f:19:cc:b4:bb:2e:34:b5:6b:51:a4:
                    09:b5:b0:3a:eb:f4:05:2c:eb:4d:db:6b:a5:4e:b5:
                    1c:20:d8:58:3f:99:4c:89:55:5e:e4:56:d2:06:05:
                    ea:5a:b9:a0:a8:91:74:00:15:e4:ad:82:e6:bb:be:
                    37:18:22:a7:d9:18:22:e7:27:80:22:f4:b6:e1:0b:
                    b2:40:be:f8:3d:14:09:27:e7:cb:43:b2:24:d1:9c:
                    dc:c5:c7:b4:33:3f:4f:ce:85:f7:39:01:68:75:66:
                    8e:3d:f0:b5:00:7d:30:65:9f:f6:fc:9e:08:30:e6:
                    8f:59:af:0f:1d:96:ec:86:f3:8d:91:22:be:6d:5c:
                    e0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5C:F4:77:B0:B9:F9:61:E3:C3:25:B3:86:D8:1D:35:94:54:61:3E
            X509v3 Authority Key Identifier:
                keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b2:8d:7a:59:00:47:c8:9d:fd:54:2f:48:67:0e:d3:6d:3e:
         bb:2f:41:55:b9:68:d2:c8:65:fb:fd:bf:84:2a:4d:ff:c4:0e:
         30:90:f0:a6:69:ab:fe:f6:d0:5a:13:9f:cd:63:8b:17:47:59:
         7d:2c:37:cb:b3:c8:0e:25:1d:d9:70:22:f7:3f:7b:16:8a:f1:
         00:b4:f6:a2:d5:d7:c4:67:ad:53:f1:af:cd:16:40:37:5e:95:
         21:a8:7a:52:e3:b8:4f:cd:d7:8f:98:9d:c1:32:3e:75:70:64:
         bb:68:c6:56:ab:ad:d0:2f:6a:53:1a:d0:ef:1c:77:18:c6:b1:
         54:7a:20:f5:de:ca:a2:51:c0:56:0a:bb:a2:49:7f:6b:56:9f:
         f2:d5:4f:71:fc:6a:21:8d:66:ba:8a:70:5d:ec:fe:7a:53:cf:
         82:40:0b:17:d5:73:e5:92:3a:92:a5:03:17:07:ce:ce:81:ac:
         b8:b0:8b:71:13:8d:bc:4a:a7:85:a3:53:b7:dd:8f:ec:6a:2b:
         26:de:28:b5:5e:ad:25:82:58:22:12:9a:23:26:ce:93:97:f3:
         02:d2:10:f5:24:3e:84:9e:2f:b5:19:7a:40:a1:fb:7b:03:aa:
         8e:12:98:cb:bc:00:1f:62:f3:d4:c7:b9:67:f0:ae:97:cd:f3:
         a9:4b:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----