Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
File:                     warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json)
Hash identifier:          +B3s0KWTZgFzX6DKHJ1x2qxx9GfOxYIuiGb3jGlOoo4=
Subject key identifier:   1B:F4:5F:6F:32:BD:DF:E6:3E:F9:FD:15:09:A5:E7:42:8F:ED:D9:D0
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Certificate issuer:       /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial:       01962E61CB35D837BD808A7FD095F6705C63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
Manifest number:          0D61
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=)
                          2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: 6TD2gs1ZKSUSpzQ5ER1dPtStpwXZ6BPF22XUJQKVx4g=)
                          3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cb:35:d8:37:bd:80:8a:7f:d0:95:f6:70:5c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=1bf45f6f32bddfe63ef9fd1509a5e7428fedd9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:39:d6:97:26:04:84:c2:f8:81:43:53:1b:27:
                    cb:5c:05:02:78:90:b7:4d:ac:ec:f8:cb:52:41:fe:
                    e9:07:f0:31:1d:60:65:5a:4d:d3:5d:b5:d1:68:d5:
                    0b:97:1b:e2:6d:25:59:68:62:6a:d6:1c:de:13:98:
                    99:c6:92:7e:74:66:67:7a:36:f2:52:86:ad:f5:62:
                    f2:02:4e:9a:bc:73:e8:a3:57:11:18:5e:53:f4:3c:
                    6d:37:c3:d3:2f:a4:c5:0b:3d:9c:51:ab:cc:f9:32:
                    f5:9b:2a:80:76:fa:17:6f:81:8d:0e:cb:9d:0e:67:
                    81:28:da:75:fc:a0:cf:2b:b1:8f:d1:94:e1:76:a9:
                    0e:71:43:5d:3e:97:ad:ed:b9:61:5c:ec:87:d0:df:
                    60:79:a7:fd:40:22:75:4c:41:2c:07:10:00:54:33:
                    20:b4:ad:55:90:53:ca:3c:42:59:b9:25:38:db:dd:
                    46:14:a4:ff:66:a5:eb:de:21:ac:b8:c3:33:d8:c9:
                    d5:1e:d6:9c:55:6e:63:82:d2:b5:ce:e4:59:95:2e:
                    38:5a:ae:81:2f:96:e0:74:83:77:27:e7:cf:a3:6d:
                    5d:7e:1a:0f:ac:9f:dc:93:14:ac:df:fa:1c:90:36:
                    7b:39:58:35:f1:e9:74:a0:d6:cf:f9:9a:c5:02:a8:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F4:5F:6F:32:BD:DF:E6:3E:F9:FD:15:09:A5:E7:42:8F:ED:D9:D0
            X509v3 Authority Key Identifier:
                keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a3:14:47:30:f5:6b:9d:0a:8f:51:00:82:32:46:cf:c6:33:
         af:a0:35:19:a9:dc:65:de:83:33:53:41:11:fb:7c:3d:a2:c5:
         c7:ca:91:ae:95:21:13:39:ae:e8:c6:1d:fc:18:34:a8:78:0b:
         99:03:35:99:51:6e:c2:24:d3:39:60:74:e5:13:f2:d9:50:34:
         81:7f:15:fe:c8:62:47:cd:06:8e:96:2b:57:29:99:04:0c:35:
         b9:83:db:41:eb:05:69:a3:b3:c1:5f:8f:57:fd:97:ac:a5:c3:
         34:ef:58:2d:36:50:65:81:f6:fb:51:eb:7a:fa:03:16:5d:9e:
         d9:42:9e:36:b8:1d:f8:81:38:d1:a2:59:0d:16:e7:83:c6:78:
         44:1a:c5:9d:83:ac:95:57:47:9e:be:f2:1b:96:25:a7:ee:a0:
         d9:8c:7a:41:7c:15:64:2d:7d:d3:27:56:e5:b8:f4:d0:43:c5:
         bc:bf:b2:ac:e7:a8:68:eb:8f:9e:05:b4:de:6b:91:ad:06:51:
         15:13:9a:16:61:84:b4:04:52:80:af:cd:ff:97:45:a3:d1:58:
         a6:1f:84:26:c3:7a:f9:00:9a:75:b8:dd:27:e8:f0:a6:7f:d0:
         55:69:55:2d:ae:eb:8e:27:90:6b:db:03:82:c1:40:90:89:bd:
         50:6a:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----