Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
File:                     r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json)
Hash identifier:          OzE+kEka5lppW6EvwGz/+zTZcgvWDojYDMJ/3s2NtC4=
Subject key identifier:   F3:16:6F:96:E2:2B:27:2A:3F:85:75:4F:45:12:AC:2A:FE:30:27:DF
Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
Certificate issuer:       /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Certificate serial:       01962E61C65FFDF56A77F84079C5B6649AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
Manifest number:          0B6B
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: jtxnMC6eCVYwIh8IyueFT2QEZ64.roa (hash: 9ndfbLnfP9lol8NT3K6+lPqG6lGo+1E6jKyJb1FexVw=)
                          2: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: /LiAIdiguk/QHWu28n2E2TcBdad2qwe3NGO7ArfmODs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c6:5f:fd:f5:6a:77:f8:40:79:c5:b6:64:9a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=f3166f96e22b272a3f85754f4512ac2afe3027df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:a2:76:62:5f:33:22:7b:c8:77:5a:6b:a2:
                    dc:7c:79:6a:c2:8a:75:dc:1e:f9:7e:1f:0b:10:a3:
                    69:02:4f:1e:df:21:45:06:91:4a:a1:8d:79:dc:2f:
                    9c:99:16:af:d2:cc:48:50:c7:a5:d1:e5:da:93:82:
                    02:20:16:23:ec:65:fd:b5:bb:3f:4e:d8:82:0c:26:
                    4d:c5:a2:5f:11:04:f5:fb:db:7d:f1:e5:9a:33:b9:
                    d9:6b:60:bf:ce:65:df:e4:08:37:01:df:3d:2b:12:
                    2e:31:3e:83:0c:18:38:f3:8f:af:7e:5e:73:d4:89:
                    39:c3:7d:8e:da:e7:c9:bc:cd:d0:06:ca:60:19:11:
                    4d:6b:36:d5:36:27:2d:6e:cf:f2:04:3b:ec:f5:e3:
                    be:90:a4:fb:5f:9c:50:f6:77:9e:19:12:90:31:a5:
                    60:ad:5e:48:f5:11:d0:eb:5d:ba:75:76:46:21:82:
                    be:2a:2e:88:cd:2d:4e:eb:56:df:81:f7:18:5c:c5:
                    db:14:8d:39:8f:63:a3:bf:05:b4:1a:24:06:76:20:
                    ce:7a:4c:79:56:f2:94:28:c3:ac:7b:5b:cc:92:1f:
                    21:41:20:d0:ec:9b:a8:9e:bc:2f:af:34:e4:b6:f1:
                    3b:ed:4d:43:1c:76:20:59:44:7c:fe:57:ed:cd:1d:
                    fe:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:16:6F:96:E2:2B:27:2A:3F:85:75:4F:45:12:AC:2A:FE:30:27:DF
            X509v3 Authority Key Identifier:
                keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:32:82:68:af:fc:e5:9a:30:ed:41:b6:c3:9a:ef:fc:4a:
         19:93:3f:7c:13:ea:67:72:62:4c:86:a8:81:ae:37:e7:8e:f0:
         06:3e:59:53:12:cb:44:b2:c5:ca:27:7a:72:21:53:f5:9d:8c:
         34:77:cb:8a:f0:29:49:eb:38:6a:7d:59:6c:35:c5:b6:b5:bf:
         6a:e6:7c:72:d7:c5:54:89:1f:16:dd:76:7d:b4:02:57:b1:6b:
         bb:4e:b8:ec:04:38:91:28:14:bd:61:ae:97:2a:b3:61:ea:67:
         94:96:06:1b:4f:54:91:5d:86:33:22:37:db:5d:c4:02:76:2f:
         89:33:ef:bb:2c:18:70:a4:a6:ff:0c:ef:74:b9:e7:ce:01:0d:
         81:d7:f3:f9:76:e8:7a:38:42:cd:43:82:58:f5:56:c9:7e:e3:
         43:f6:46:e0:f0:e0:c1:93:4c:75:e2:32:05:ec:e5:42:57:5b:
         47:0e:ea:3a:0d:07:ec:01:7e:f2:60:c6:04:1b:f2:a0:b2:29:
         c9:07:05:e0:68:61:a4:8f:82:44:4a:09:a5:ec:6b:01:57:0f:
         e2:e0:cf:f5:04:ed:44:e2:c5:82:26:3c:c0:c7:41:fb:4b:96:
         b9:e6:89:13:3f:3c:88:8d:02:39:94:c2:96:92:3a:cf:6f:3c:
         77:08:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----