Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          CW3Tb4Vfs3QLEEAVnNfImKtNhISPaGdrw2nVF1B2K34=
Subject key identifier:   B0:29:35:6F:31:D3:20:63:B9:F6:03:18:2F:FD:2E:CC:58:2A:49:30
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       01962E996C6D7A1C45BCBCF85CD7EA91E531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          0459
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: qpB1FGOgIBOmKcDOaDONITuir/p1OsjICsEysv61zAc=)
                          2: fZ9isGtIlM4KCLTcv8R-iIf03v8.roa (hash: B9s0fxg99QLzPGHKR09eX4IAtgF+hQonUvqfnXhZlTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6c:6d:7a:1c:45:bc:bc:f8:5c:d7:ea:91:e5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=b029356f31d32063b9f603182ffd2ecc582a4930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:e5:d7:11:af:ed:59:01:11:63:d9:ba:c5:
                    db:b2:ca:98:a4:e0:9f:3a:6f:19:4b:7f:48:a9:8d:
                    50:a6:d3:a8:3e:9b:88:2f:4d:d3:73:39:44:a6:ad:
                    a9:a1:b4:3c:b8:d9:50:21:18:69:7e:79:aa:d5:d4:
                    19:59:b5:38:45:51:94:32:69:97:99:58:64:f4:71:
                    35:73:df:a4:83:a4:0c:42:72:86:99:a4:78:6b:e2:
                    0e:f0:57:3b:fe:78:40:52:95:5a:de:c7:97:b9:34:
                    98:e7:2d:f4:08:59:1b:d1:f4:56:fb:1b:81:91:ff:
                    2d:31:84:46:76:5c:0b:13:87:de:a5:1f:09:df:97:
                    c0:ee:fc:95:c8:32:97:96:4d:10:b9:df:81:78:a5:
                    77:99:47:03:1b:92:ab:e6:1a:7b:43:6c:68:44:ad:
                    81:65:a8:d8:3a:90:89:ff:5a:df:8b:e4:99:99:95:
                    7f:7f:e9:6d:8a:a8:9d:5e:c3:ae:9e:95:ef:dd:f6:
                    77:80:06:b5:ce:20:f6:c8:0f:c5:e2:38:39:7a:9d:
                    b5:68:5a:5a:54:14:87:0b:95:b2:f2:fd:4b:d7:35:
                    2e:ff:46:ce:74:4a:13:53:a2:68:38:ff:14:54:ea:
                    ee:51:69:2a:c7:0a:f1:27:97:af:c7:05:6c:99:93:
                    44:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:29:35:6F:31:D3:20:63:B9:F6:03:18:2F:FD:2E:CC:58:2A:49:30
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:00:d4:9a:31:47:af:06:9e:2c:b6:19:85:36:c2:34:1f:62:
         24:2a:49:39:36:f8:8d:40:dc:6d:04:26:ae:cc:ca:0a:01:58:
         72:d9:ef:ed:cd:e9:08:d2:48:94:7e:a1:c4:19:e0:54:cb:6a:
         a3:f0:70:93:4c:ce:76:1d:71:cd:f5:02:73:b1:3a:dd:94:ad:
         aa:47:e8:b1:a2:89:e8:67:ce:f6:78:26:ab:75:17:27:03:ba:
         68:46:d0:41:15:e6:84:76:9a:5c:79:8b:d4:f5:d7:06:7b:61:
         81:9d:d3:97:e8:0d:b3:d9:b9:fb:b2:b7:7f:ef:ff:a1:47:d6:
         41:ff:b8:19:ff:6b:e6:df:af:d7:27:43:f2:73:b1:89:df:db:
         07:dd:92:86:bb:3e:de:23:18:e8:3d:09:39:ab:e9:47:4b:3d:
         ef:a0:d7:8f:cf:22:a5:a6:d1:f8:d7:9e:11:b8:b0:02:68:9c:
         c4:14:e8:37:91:8f:93:22:8f:15:a8:41:f0:db:05:68:39:a6:
         91:60:12:12:4c:35:bc:ee:ab:d5:37:8f:b4:a2:1d:bf:bb:fb:
         bd:4d:04:4f:64:3b:41:14:4f:66:ec:8f:05:5a:2d:db:10:1b:
         fb:f7:2a:40:b5:fe:07:02:f2:0d:fe:ac:7d:26:33:40:22:ae:
         be:f1:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----