Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File:                     Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier:          5Xe1UGGbl9AkLk7T5IWXnG6OUO23qEeQs7DDhvAJqew=
Subject key identifier:   D3:37:E7:DE:1C:5D:EB:C9:8F:56:09:3C:FD:CA:D7:65:31:63:A8:41
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer:       /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial:       01962FAB9418C11E2BD40224F439E0C85647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number:          0761
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
                          2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: 0f0VKgB6ia/e3drNbCPYvMp00Zg5hPSdzNCaxHLslwo=)
                          3: TaMd7DA-6NrsYwAIJaSvClB4fpo.roa (hash: dkRPf4s5CoCdHNuMtPMADul0c0mdFRvVK8/5OUkpYlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:94:18:c1:1e:2b:d4:02:24:f4:39:e0:c8:56:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=d337e7de1c5debc98f56093cfdcad7653163a841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:f7:bc:e5:b4:ff:77:1b:0b:a7:52:7d:06:
                    5e:3f:5c:6c:da:5d:bd:62:b0:72:c3:6e:a6:bb:f6:
                    89:75:29:34:4c:d9:50:19:9b:de:29:37:5c:68:ff:
                    39:5f:6a:38:dc:bd:66:d4:93:4c:7a:78:0f:17:f8:
                    de:d9:16:5c:da:72:ed:09:3b:00:98:15:f5:21:bf:
                    e5:29:d1:e4:e6:3e:3d:88:1b:a1:7d:5e:05:65:91:
                    98:f4:9b:84:67:cf:28:d3:22:43:e3:aa:65:25:f0:
                    c1:3a:32:54:dd:0a:d0:9e:ba:f9:b9:b3:60:a5:48:
                    60:d2:c3:e3:b0:78:63:32:28:42:ea:8f:e0:91:47:
                    98:bf:08:47:9a:52:e5:3d:ed:18:ec:57:9d:da:d1:
                    06:e8:97:34:8e:c3:8e:eb:c3:02:b7:5e:8b:d8:c7:
                    81:d3:a5:72:d2:e5:40:67:85:d9:2f:c3:1e:6a:73:
                    76:a0:f1:c4:0b:b7:e0:b7:a5:8b:6a:40:d9:21:07:
                    6d:83:15:5d:3e:0f:0f:e3:14:f8:d4:2d:30:75:9d:
                    28:1e:2b:8c:c2:0b:83:c5:62:4d:ca:24:51:d9:e3:
                    1f:0a:e0:37:60:d3:6a:dc:c7:2b:b8:45:05:2c:50:
                    e6:d2:8c:3d:a6:bf:8d:62:72:68:46:d3:e2:ec:08:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:37:E7:DE:1C:5D:EB:C9:8F:56:09:3C:FD:CA:D7:65:31:63:A8:41
            X509v3 Authority Key Identifier:
                keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:50:13:7a:73:2b:c2:ac:0b:db:82:e2:a3:27:4c:7a:5f:
         56:19:a5:eb:b1:8b:3a:dc:f7:80:25:3d:f5:b4:2f:1b:13:22:
         f3:f1:3c:b3:64:ea:b1:aa:5b:52:8c:89:f0:52:62:fa:7d:2a:
         49:10:8c:17:ef:86:da:2f:45:47:72:91:2c:c8:03:81:b4:e2:
         16:6b:89:b9:b8:2d:22:18:83:c8:c7:d3:fc:50:f7:13:80:f7:
         3f:07:ef:f2:1e:44:12:e4:9f:72:33:36:d1:5a:57:e7:6c:06:
         75:6e:bd:1e:8e:7a:60:fb:1f:d7:63:c0:ad:55:d8:49:d6:7b:
         9b:e9:28:a4:b0:e0:09:f0:b3:2f:23:b6:9e:e1:22:74:19:56:
         b9:f3:75:e8:c8:0a:af:a7:f0:7d:a1:21:38:26:d6:fc:b4:ed:
         88:58:8d:5b:ab:a6:72:4c:f7:1b:23:b3:95:b3:aa:5a:6e:a9:
         23:5c:8e:06:40:22:78:7f:df:8e:11:69:1d:f2:7d:2d:48:2a:
         fe:69:3b:62:3b:0d:3f:07:a3:e0:80:0c:3d:f3:4d:45:dc:67:
         86:75:0d:7a:47:5f:f5:0b:9f:48:6b:eb:1a:99:d6:56:70:f3:
         9c:67:bb:9f:7e:eb:46:1a:fb:3a:d0:95:bb:74:6d:a8:83:76:
         f9:25:e7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----