Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File:                     Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier:          M5rn2+YYWG3giNT2vEqHHSwqtR65YZqRgpauMU/JfZ8=
Subject key identifier:   29:A1:04:CD:36:B3:38:C3:AE:89:87:A8:1D:63:70:25:B1:95:B4:80
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer:       /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial:       01962ECF8BA4379C94D9C4DECA72160EA1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number:          0633
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 0v4Q3A_w9M1p1YcV4-7Pe389fdU.roa (hash: WhKTFW0tZdeh1NFz5izqlimm3sG/vP+EpF9M2Z10RmY=)
                          2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: ng7m1TuKjFfKiZMG66eEUhjX7b7Qc4i0h5WV51VRAhw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8b:a4:37:9c:94:d9:c4:de:ca:72:16:0e:a1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=29a104cd36b338c3ae8987a81d637025b195b480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:cb:c0:0a:74:75:56:cb:85:96:44:79:6d:
                    08:1f:a4:48:09:ea:90:d8:5f:5c:62:c2:3c:cd:f4:
                    7f:88:19:34:7e:ce:61:15:df:81:34:35:da:c0:86:
                    7e:ae:a5:b5:07:1b:6e:15:5f:3d:c7:58:7a:4e:e1:
                    49:cd:48:3a:ca:2c:d0:86:9d:c4:14:31:f7:85:31:
                    73:d4:60:61:e8:5d:1c:85:29:85:0e:05:ff:77:74:
                    3e:00:2a:60:1a:12:15:17:43:06:fc:a5:ba:f5:b4:
                    17:72:d8:91:c7:84:7c:fe:e3:da:b5:73:78:5d:e8:
                    5c:80:49:c5:f8:5c:d7:63:8c:9b:a8:91:cd:3d:9b:
                    75:21:b4:63:9b:71:2a:55:79:fd:75:45:4a:81:3f:
                    e5:9c:97:d9:b0:06:85:f8:87:ad:09:44:90:10:a8:
                    d0:38:53:95:01:50:a1:24:8b:d2:af:93:77:f6:d3:
                    15:77:d1:1b:9d:04:81:16:ae:6c:a6:3f:94:90:de:
                    37:ce:f6:81:9c:88:4c:59:d2:13:0f:8c:32:69:10:
                    c5:f5:97:41:16:0d:b9:ef:68:76:2a:2f:d2:d7:53:
                    8e:ea:6e:c9:14:b3:73:cf:b9:ca:0e:0a:52:a3:92:
                    99:7b:82:41:fe:29:73:0a:db:e6:55:10:c9:f4:11:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A1:04:CD:36:B3:38:C3:AE:89:87:A8:1D:63:70:25:B1:95:B4:80
            X509v3 Authority Key Identifier:
                keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4a:1f:5d:66:b6:a3:93:d0:34:44:93:c2:0c:79:e7:ff:c9:
         d4:e9:0b:f9:f6:2c:64:8d:f3:b8:bd:ec:18:53:e4:33:19:b2:
         f8:ed:03:b8:3c:3e:04:ef:23:fd:64:7a:24:0a:1a:49:2e:12:
         dd:57:1e:a0:57:08:cf:1c:df:d2:88:ca:c1:48:c4:a5:be:c3:
         91:1c:67:2d:92:4c:81:b5:36:b4:da:b5:9d:dd:55:5b:cf:3c:
         e8:0d:a0:07:4d:a0:24:66:13:58:fa:1f:dd:81:d2:0f:a3:e3:
         ea:fa:ff:42:28:17:fe:c2:71:6e:37:43:19:55:bf:b0:d2:e1:
         ac:d1:ff:17:e3:d2:0d:f0:71:ff:37:6d:03:d1:d0:b1:b3:10:
         5d:22:7d:40:f0:c3:98:15:6b:88:01:4a:78:1a:26:16:67:57:
         f9:f1:63:27:df:99:87:76:38:2c:5b:9f:26:68:74:97:f8:d6:
         ff:5a:a4:93:e7:68:ae:25:05:40:35:23:d0:53:9a:a6:f2:d9:
         72:11:16:49:b3:72:5d:b6:2a:e4:4d:ee:e7:16:02:4e:ff:8a:
         59:22:4a:e8:66:81:0f:ce:19:8d:73:b3:0d:82:9f:9a:79:e6:
         71:fa:e0:b8:7a:a2:19:77:04:05:0c:ab:36:a5:cc:91:f7:18:
         ae:b2:e6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----