Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File:                     Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier:          h9mMvkZHp1T2CJC4noloBuEPdpL1CPOprCIlJflkndg=
Subject key identifier:   61:2A:4C:FA:04:9C:17:75:57:C5:A3:0B:F9:1D:07:27:A8:B9:C8:9E
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer:       /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial:       01962FAB21D2B6852DC35BFF8A3287CB7BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number:          11FB
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: r980RjcJko8MH9kwKo760HPxLIgvg3BRKts0lv9ZDek=)
                          2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:21:d2:b6:85:2d:c3:5b:ff:8a:32:87:cb:7b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=612a4cfa049c177557c5a30bf91d0727a8b9c89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:25:61:ed:70:44:6d:3b:1e:76:d5:e8:f1:
                    2a:b7:1a:21:b1:1a:63:91:ba:39:a1:66:3e:ef:0e:
                    79:25:0a:f2:9b:29:b6:98:56:bc:0c:7f:f8:21:6d:
                    d0:c8:55:34:90:cf:4a:75:2c:76:96:c6:90:b2:eb:
                    45:ab:99:af:87:36:ad:6c:b8:2c:f3:8a:e1:7d:5f:
                    25:01:67:b1:bc:55:98:98:08:40:bd:0c:00:a6:9a:
                    56:f5:78:4d:64:f5:dc:7f:dc:1e:23:e6:88:3a:64:
                    9e:15:35:c6:eb:ea:3c:d8:a3:0e:ff:21:f5:ea:cd:
                    8c:1d:5e:d2:d5:ae:f6:4f:6a:7e:d1:0c:74:71:68:
                    cb:0d:ac:4b:c2:8f:9a:db:6e:f0:d7:85:8c:fb:00:
                    2f:f0:7b:eb:7f:7e:1a:c6:2f:f1:e6:03:7d:1a:13:
                    53:fd:dd:cc:16:0c:fa:64:69:49:a3:05:15:29:77:
                    c4:55:b4:0a:df:37:7f:56:c1:77:4f:3f:f7:e6:37:
                    4d:7a:9d:36:3c:b3:2b:5c:8d:a3:05:26:38:67:cb:
                    8f:9f:0c:bd:b2:f7:86:bb:39:a0:66:73:e9:84:11:
                    1c:16:c9:40:c1:bd:09:ac:c1:d7:07:24:96:7d:78:
                    4a:88:17:1a:3a:d9:cb:27:03:8f:20:67:4d:1b:b2:
                    48:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2A:4C:FA:04:9C:17:75:57:C5:A3:0B:F9:1D:07:27:A8:B9:C8:9E
            X509v3 Authority Key Identifier:
                keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:2c:02:6e:04:e2:f2:99:dd:e9:a3:91:3d:4a:38:56:c3:
         f1:6d:24:07:47:3f:2f:69:99:ca:56:85:99:67:3d:6a:9d:f4:
         26:0d:f5:af:72:4c:04:f9:83:02:45:77:c8:59:af:e7:f4:c3:
         76:54:a1:60:58:c8:43:72:0e:5f:53:04:c0:63:36:67:b9:84:
         f9:0c:f1:fe:0a:31:89:30:3f:98:3e:bb:2e:f6:aa:34:d9:56:
         3b:d5:14:27:3b:de:ba:0d:9b:9b:1e:5e:92:33:5a:fa:ba:97:
         b9:de:31:0d:3f:a7:4e:e5:26:48:7f:b3:f6:3c:01:5f:21:58:
         08:8e:cc:4c:8e:5a:3b:71:44:3c:5f:e3:9c:83:90:e1:b2:84:
         5b:66:85:c7:c0:bf:93:46:c0:f2:b1:c2:44:9b:1c:f2:37:da:
         6b:00:46:61:ac:18:0f:61:3c:6f:f4:52:dc:8d:b5:97:a4:49:
         ff:36:4d:ae:10:0a:6b:dd:ee:e8:1b:b9:7f:49:c4:df:0e:49:
         00:61:ea:3e:50:3f:b1:02:d9:b6:cd:b0:68:29:58:17:c1:35:
         54:14:5c:10:f7:25:f4:d8:28:06:aa:cb:14:78:d2:1d:56:c1:
         64:65:66:88:9d:8b:9b:42:b2:d3:eb:ed:6c:b1:45:f1:ab:df:
         8f:9b:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----