Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          sMNPMyaA/9gZbg5VKJ94ZzVVG2Iht2zN6eThqFOegy0=
Subject key identifier:   01:F7:6D:AF:64:4C:D4:EC:80:B0:1D:EA:7F:44:A3:F9:80:E8:FC:63
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       01962F3D56E44AE85C595BDC3304D4F45DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          1508
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 3UEtPfriipiMbZa6fhwdY3QYuQU.roa (hash: zafMtM+qwE9a62Lg/QOalLMv3c0V/Ie0I/pDVfmKXPw=)
                          2: AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa (hash: vOpHeopsXYOn149WlJN/AUCpTvQWlIuD3VGR6QfDGQc=)
                          3: acwxUWbdpUsqhVn5F3e7J-KWE_s.roa (hash: k6IT6xJnQ84kL4p0G7+fu3bTiBrlku3nIpx+yEYBw0M=)
                          4: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: Cbp/ywPnCMAtNz+cYnzXy2D1bML3Gyh+3WjtA3nTNrc=)
                          5: gz-qnMUscMazyhnaaxMqBrKn5m4.roa (hash: fpQhmRYSa6NMfhZ0IQvQ/7dM75+CyzF1R1dwJsHdzfM=)
                          6: iu7nkMMloLMO4qPNzRbpLkYcyro.roa (hash: 4ANkfNKLh7Z2wCwDamCSoeryHoHgG5FlZVn0i1JfMb0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:e4:4a:e8:5c:59:5b:dc:33:04:d4:f4:5d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=01f76daf644cd4ec80b01dea7f44a3f980e8fc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:aa:03:d6:27:df:0f:da:22:72:e1:00:db:
                    bc:0a:c6:25:23:78:47:d3:72:ba:37:f2:c0:d0:c5:
                    7c:41:3d:e7:3e:4e:c7:0c:71:97:14:40:f3:3f:6d:
                    4f:7b:f0:4b:7d:2c:19:83:0c:7c:cb:61:fe:45:92:
                    8c:af:95:74:03:cf:eb:e2:bd:ee:b1:69:84:24:13:
                    37:82:27:73:d1:e7:7f:e3:c0:1b:e0:1d:f9:5b:c3:
                    7b:69:18:43:ac:2e:01:03:c6:0e:7e:6b:84:4c:e9:
                    76:00:d0:97:f8:fb:d6:d5:28:aa:a0:18:51:9b:c9:
                    ea:ba:65:e3:33:22:bb:c9:59:b7:4f:7b:81:9f:3a:
                    c8:80:83:f0:e4:2f:f9:5a:1f:85:0a:60:20:37:2a:
                    cb:dd:d9:8f:b8:25:2e:2f:78:e1:1e:1f:37:9d:4d:
                    5e:49:2b:3d:18:99:bc:b4:09:e9:9b:4a:0e:b5:5b:
                    18:72:ea:83:97:25:ee:6d:a9:36:19:f7:9b:7c:f3:
                    5f:d8:a9:77:b5:b2:93:cd:1c:00:d6:89:df:fb:2c:
                    80:cf:c2:f2:76:c7:02:64:a8:8d:8d:9f:ec:9e:36:
                    77:7f:72:ec:83:cd:66:2b:7c:ef:dd:f5:40:43:8d:
                    e0:90:8e:94:f2:e0:cd:65:ad:39:0f:7b:9c:0a:65:
                    22:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F7:6D:AF:64:4C:D4:EC:80:B0:1D:EA:7F:44:A3:F9:80:E8:FC:63
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:d7:7c:29:20:5c:3d:a6:af:78:ae:6b:f5:e1:05:0c:26:
         e4:54:a2:c2:2d:70:41:0d:5e:7a:7d:57:10:10:63:98:c0:68:
         bc:11:3a:c2:9a:01:5a:c3:ea:52:9a:c5:0c:ac:88:3b:7d:53:
         c4:f9:a4:db:8e:7c:51:ec:e4:54:be:1b:37:3e:63:eb:77:f3:
         69:28:9c:10:36:20:8f:3a:49:af:0d:2b:46:38:8f:d8:35:9a:
         3e:8a:fd:4a:7c:e0:c4:fd:6c:6f:85:ad:f5:f6:90:af:d8:8e:
         60:86:2e:f2:64:1e:11:d3:0c:35:c2:fd:61:f3:39:d9:08:da:
         af:11:42:b3:27:cf:9d:de:27:2f:a4:58:0a:80:8a:d6:05:1c:
         86:ee:e4:c6:40:87:5f:d3:19:75:ec:c7:8f:7b:54:fc:c3:51:
         8e:84:42:73:b9:df:27:ed:81:0e:0e:ae:ed:6b:f3:2d:91:c3:
         6c:44:48:26:ff:cf:17:28:42:13:58:99:46:2e:a2:54:6a:df:
         e8:d4:84:1d:14:09:57:db:66:ea:6c:8a:f2:6e:32:1d:49:9b:
         10:af:e6:da:a0:42:8c:d2:ef:d7:ea:0c:2b:94:38:08:81:dc:
         5e:32:d8:16:6d:5e:e3:ac:80:6f:7c:71:a1:51:6c:f8:4d:61:
         36:49:3b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----