Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File:                     z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier:          /FZPnRcifWJUVQiyA1lsgy+0ay0umQK6Jo/W2Gvtjxg=
Subject key identifier:   E8:61:10:42:BE:DF:FB:80:A7:42:D8:E6:AF:49:16:B7:8F:37:49:B9
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer:       /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial:       01962F3D908EDBA7A87DAF0C94B21DE72CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number:          BC
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: Mdz7gFP_KbOqqYubu7U76xBnbk0.roa (hash: jA9ulv112lR/bkdkG+34ufilO6znCYlwpUBfU78DlcQ=)
                          2: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: fFMOPz1IRJIB/Hm6eQvXCltpQ5Vm18UHvc6lelEbg9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:90:8e:db:a7:a8:7d:af:0c:94:b2:1d:e7:2c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=e8611042bedffb80a742d8e6af4916b78f3749b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:af:87:2c:0c:4b:e8:9d:ee:2c:3a:3b:4f:
                    88:15:73:db:0b:5e:2b:15:c8:ef:49:99:0c:1e:a5:
                    0d:45:98:fc:f6:33:8c:b4:59:1e:86:b0:9b:8a:b0:
                    f8:d2:32:d3:f1:0f:4d:1b:f3:8a:a5:63:c8:7a:84:
                    11:15:ab:59:da:e4:d2:e9:2c:c8:ef:c4:d3:e2:15:
                    70:df:d0:0b:a2:db:c3:29:55:fa:dd:dc:f4:14:84:
                    9b:1c:7e:6c:65:5a:91:46:81:b5:7a:55:86:06:84:
                    ba:4b:f7:9f:b3:04:83:7d:3e:2e:ab:c8:85:e1:09:
                    c2:b7:e9:17:80:18:13:e8:7f:7a:ea:e0:c8:9d:7d:
                    31:9b:cb:b9:e1:4b:2a:3c:21:d8:41:48:fb:82:a4:
                    94:4b:0f:ee:d1:8b:1b:2f:4d:29:e7:00:3b:ef:e9:
                    12:0e:00:af:0d:a3:56:a6:c2:39:bc:ef:1c:c0:92:
                    a3:41:a9:ca:c9:b4:9c:a4:f3:75:b5:c0:17:8e:ea:
                    4b:2d:e0:48:80:4f:ac:dc:ec:69:bb:58:cf:93:9e:
                    26:6c:5a:40:3f:2d:a4:54:52:42:c5:4f:58:98:a1:
                    80:e8:85:db:c2:4b:7f:8f:0d:5a:44:53:3d:45:ac:
                    db:ac:25:6b:11:bd:9d:93:5e:8d:25:32:ab:30:3a:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:61:10:42:BE:DF:FB:80:A7:42:D8:E6:AF:49:16:B7:8F:37:49:B9
            X509v3 Authority Key Identifier:
                keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bf:77:ee:96:29:ad:da:14:8b:bf:3a:74:c8:6b:8b:ec:25:
         ec:84:77:28:43:fe:db:cd:e2:f4:1c:a4:b3:d8:ad:c9:26:8e:
         83:f6:64:31:4e:30:92:4e:4a:3d:29:6e:f5:dd:57:a9:cb:f2:
         e4:2c:70:31:dc:ef:5f:c5:8e:19:8a:24:4d:f4:b7:61:cc:e9:
         ec:86:47:94:b5:fb:62:7d:9b:5b:c1:7e:ef:26:69:62:5a:24:
         9b:92:43:d3:5a:40:8b:fc:59:34:e7:44:d8:a4:0b:22:af:40:
         14:4f:93:79:08:ee:1c:54:58:cb:b2:40:36:b2:f9:89:e9:b0:
         39:e7:c3:8b:0d:f0:b6:29:9d:e8:12:53:da:c2:43:c1:dd:3e:
         9c:0e:eb:39:f7:7a:8a:01:b1:8c:f5:b8:4e:bc:98:b1:58:57:
         a4:df:0c:d1:d5:be:f3:87:15:fd:82:15:14:f8:a5:38:cf:db:
         42:9b:21:c9:1e:4d:20:10:dc:8d:f1:62:03:34:a6:52:d4:57:
         b5:c9:d5:42:39:ed:76:99:c3:fd:4f:e0:64:8b:18:38:71:57:
         36:0d:4a:9f:63:2e:93:e7:ba:c3:14:68:80:06:8b:f5:a1:cb:
         e6:89:98:bf:73:05:dc:24:3e:9b:52:88:91:8d:f1:c6:52:00:
         87:c9:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----