Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
File:                     c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json)
Hash identifier:          V+pCwjcTO8j7pH4aCCBvTNls+GzSFjR39N+pAsPeKg0=
Subject key identifier:   4E:5D:9B:50:65:9E:F2:47:BB:1F:CE:95:0C:31:2A:8E:01:5C:82:2F
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Certificate issuer:       /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial:       01962F3DD146BFB544D2F33713A9C7D5E3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
Manifest number:          1383
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: dmmWph82VbHwa5MdoMc18ZN4mmdsFCCKfUk3Z1QHEZ4=)
                          2: s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa (hash: yGRXRmilLINdMy7QeallAtPWcWMTpoSWpUomtg+4yo4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d1:46:bf:b5:44:d2:f3:37:13:a9:c7:d5:e3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=4e5d9b50659ef247bb1fce950c312a8e015c822f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:e8:a8:e2:36:34:5e:02:27:ee:90:d5:28:
                    34:cf:37:4b:d5:d4:1c:5a:4b:da:1b:af:45:60:1f:
                    00:50:1e:39:ff:41:00:1f:89:34:49:97:97:1c:9c:
                    f6:8a:03:78:38:c7:1e:b0:7a:8c:83:e8:cd:b0:5b:
                    27:10:03:5c:f9:13:02:f5:75:ee:62:73:14:20:dd:
                    60:e4:3b:19:13:42:08:69:01:a8:b0:56:bf:1f:b0:
                    2d:98:ae:81:0a:b9:3b:6e:dc:d9:85:ca:90:b3:c0:
                    38:4a:e1:8d:60:c2:06:6f:99:8a:f1:8f:5e:e7:a9:
                    7a:22:7f:23:f7:2f:14:4e:78:95:c6:22:de:37:ba:
                    15:8d:76:b6:c4:66:cb:a5:dc:b3:ae:4d:ea:fc:36:
                    3e:02:b8:f5:67:82:77:a0:81:40:88:39:f1:ca:a1:
                    da:79:a5:44:1e:0a:09:ea:f6:e4:33:5d:5a:27:6b:
                    ac:80:ae:8a:85:80:4a:67:37:9a:b8:d6:26:cb:81:
                    3f:8e:0a:ad:8e:9b:f3:90:8c:03:8f:63:c3:d8:23:
                    37:5e:cb:85:4c:92:84:38:1e:c3:40:ea:7e:ea:be:
                    3a:9d:8f:08:dc:34:1a:b2:44:b3:bd:1f:f5:20:a4:
                    00:df:ef:97:af:f9:9e:cb:86:4f:25:81:82:21:95:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5D:9B:50:65:9E:F2:47:BB:1F:CE:95:0C:31:2A:8E:01:5C:82:2F
            X509v3 Authority Key Identifier:
                keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:85:ca:f3:4e:16:90:bc:b1:fd:66:47:e1:79:0d:2f:c2:
         8b:d3:a4:4f:da:17:ba:93:ce:60:7e:72:77:11:cb:47:03:97:
         99:06:ca:21:7a:39:55:ac:e0:60:41:64:6f:8d:3b:08:ae:cc:
         5f:63:3d:d6:0c:7b:6d:c1:4f:93:5c:5e:36:2d:94:91:44:42:
         9b:b9:80:ee:57:cc:5b:e0:16:47:56:c7:a3:7c:90:27:ed:ca:
         de:9b:9c:7d:99:c0:94:dc:00:fb:cb:1c:76:6b:f7:53:d7:f0:
         2e:6d:1f:1c:ac:d0:63:e7:6b:7e:36:27:c4:bd:02:f4:91:fb:
         79:cc:f3:a2:3c:60:f6:ee:83:9c:c5:c3:65:ac:6f:3c:38:3f:
         2c:c9:72:d5:41:9c:0b:68:8a:36:44:ea:d0:c0:1f:eb:7e:5d:
         88:7d:aa:41:5c:96:b2:97:24:9a:b3:9a:27:70:07:52:d3:a2:
         a1:b8:bc:b9:c6:2b:70:e2:8b:bb:f1:57:24:ff:22:67:1b:ae:
         df:67:ef:45:11:0a:3a:45:e7:8f:73:e5:4f:69:18:f9:ff:31:
         45:22:63:c8:a9:14:3b:10:34:f0:ce:90:d3:9e:a1:b2:0d:e5:
         c3:c1:af:1d:5a:69:42:53:f5:87:54:3d:f4:dc:11:1c:df:f3:
         9d:4e:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----