Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
File:                     _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json)
Hash identifier:          YcwaR0m19loIAibyyfjVkUxnDO29iiLO3lDjQq3yPTM=
Subject key identifier:   9E:9B:C1:11:72:D2:30:72:78:9A:38:8A:64:0F:70:68:D3:EE:3A:17
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Certificate issuer:       /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial:       01962F064AC9455B9A493B0255563EB89983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
Manifest number:          0367
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: 9ia0_iaxbX6JryuxqnLg3hd0L3g.roa (hash: KiNlWxgmk2eySTFhfbvvmaccM60Lf3LwZy/tqN4KWhY=)
                          2: ASer5kiqDiVWOaPZMylwsoahAIw.roa (hash: u7jpBR9dXty+UTW4qdoR89luPMWxLAPFa0EB+Y83dzY=)
                          3: U6zuk58ajYVysKNz6qXWGH9vBbQ.roa (hash: 61zuuE5vE5Y4+HWAkm8iJSGF4xuX2/gytqBlot9g8YQ=)
                          4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: RqC86rQpcGWbX+dCtMAxaru1VYkypHsykQ4+nDbdRic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4a:c9:45:5b:9a:49:3b:02:55:56:3e:b8:99:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=9e9bc11172d23072789a388a640f7068d3ee3a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:8e:62:e2:48:b2:50:f8:52:9d:f8:e4:f1:
                    b1:80:d7:e5:f8:dc:1a:1e:3a:16:ee:0c:b4:3a:74:
                    51:85:43:fa:58:35:47:e6:d1:3d:88:4f:3a:19:e0:
                    ae:3f:96:7a:fc:1d:9b:c2:bf:c9:49:35:bb:5a:05:
                    c6:77:b2:ff:ed:8d:34:7f:b3:67:bb:10:5f:bb:38:
                    a6:c1:f9:05:da:c5:b6:e8:f9:a9:27:0f:0d:79:0d:
                    b7:92:71:f7:5a:ea:3a:43:38:e5:8c:38:13:51:70:
                    e9:39:21:b7:47:ac:2a:17:75:cb:ce:3b:90:e4:3a:
                    fe:f7:8b:55:17:e8:02:76:39:00:5e:5e:75:e6:54:
                    63:3c:0c:da:dc:db:38:3b:38:ac:c3:bd:5e:9a:55:
                    d3:9c:6f:f6:cd:a0:9b:16:91:c9:8f:3c:78:59:07:
                    95:a4:df:96:7a:51:fe:50:d7:40:e5:6f:dc:69:90:
                    ec:aa:b2:b4:3a:4c:9d:14:42:f8:b5:28:9b:51:41:
                    e7:01:d2:9f:38:14:40:7a:1e:28:fb:19:fe:08:f1:
                    e9:2a:72:f9:3c:45:84:a7:1a:27:72:9e:80:84:a8:
                    fe:b1:3b:06:64:86:d9:02:08:4f:f0:19:94:c5:e5:
                    12:c3:fc:fc:bd:b2:af:9e:e0:9c:bc:25:03:f9:e4:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9B:C1:11:72:D2:30:72:78:9A:38:8A:64:0F:70:68:D3:EE:3A:17
            X509v3 Authority Key Identifier:
                keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9a:ef:c2:67:8d:e5:12:01:68:ef:ef:fa:c1:0b:6c:86:6e:
         72:15:bd:f2:d6:b3:77:57:bf:a2:5f:b7:55:0b:3f:73:3a:2b:
         ce:3a:d6:84:d2:15:b7:02:d7:ec:d3:cb:20:1f:2d:30:e0:07:
         6c:5b:18:f0:2b:9b:31:a7:78:23:c8:4d:10:11:76:e8:a1:78:
         e7:b4:e9:f2:0d:c8:70:9f:7f:c5:37:d1:7d:34:44:54:de:94:
         3e:64:24:01:1c:39:84:40:bc:e8:5e:0d:56:dd:0b:db:ff:27:
         62:f9:da:16:2b:21:ed:1c:bb:c9:a3:04:41:f0:f4:7f:e0:a9:
         43:e4:f1:b5:3c:70:d3:d0:d8:01:78:41:b2:1e:a7:22:f9:62:
         12:ae:70:b3:b9:81:86:a3:c3:92:57:37:af:a4:cc:9b:2b:2b:
         66:30:bc:25:0f:00:45:f9:b6:b8:2b:9c:0e:d7:d0:b9:f7:c4:
         19:2e:99:8d:c4:30:8e:99:ef:9f:9f:03:ae:c4:ce:ab:d4:2d:
         f5:df:b6:00:1d:d9:49:dc:59:5b:e9:2c:bd:4f:4b:42:b8:ec:
         96:09:e1:aa:94:87:6f:55:5d:d7:38:1e:81:0e:7e:ec:37:b3:
         cf:ab:fd:79:0c:b6:7b:e9:25:cd:3f:0c:5d:f4:4a:65:c7:32:
         85:8a:37:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----