Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
File:                     mwj052FQMJu9IksB-J7CA8H8Vts.mft (raw, json)
Hash identifier:          Ca+9g5Xifo4HKQthC7YeKUPm2/RSvbNx8cZ+QaKsz/Q=
Subject key identifier:   73:7F:1F:D7:D6:52:F7:E4:FB:B0:47:30:5D:BB:F3:2E:D2:A1:1B:C4
Authority key identifier: 9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
Certificate issuer:       /CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Certificate serial:       01962E9929F3250EE76251B0A6B1AE146EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: mwj052FQMJu9IksB-J7CA8H8Vts.crl (hash: 9vAxGtHCqvJf8lwDqzcEeIKd0q2pyzmVC5LdbsB4BOE=)
                          2: yMCWx_vwP00jLW3_uRevvXcRMmk.roa (hash: xnNpTecLSpiwvjQT9lRJw8IJFmY7Zwk40Z4AZXbx8O4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:29:f3:25:0e:e7:62:51:b0:a6:b1:ae:14:6e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=737f1fd7d652f7e4fbb047305dbbf32ed2a11bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:49:68:03:45:bc:04:cf:4b:9c:4c:81:99:ba:
                    1e:6f:cf:d5:c0:14:00:1f:70:be:d0:ed:83:3d:0f:
                    e9:fc:a8:e8:32:e1:63:88:cc:6b:c8:25:d5:20:4b:
                    40:db:88:15:62:2e:fb:7f:b1:7d:67:9f:87:1f:b6:
                    3b:ad:7c:fe:c5:ab:78:d1:e9:a5:ca:af:1f:d8:d2:
                    4a:44:79:26:18:57:43:9c:da:30:46:da:e6:b7:ce:
                    fe:8f:61:a4:e5:ee:60:17:67:8f:7b:17:d4:79:c7:
                    63:1c:5b:e2:7b:52:76:dc:0e:ad:e4:54:0f:90:f3:
                    1b:11:c1:1d:47:93:d6:77:ad:04:2a:03:18:08:83:
                    21:fc:c3:51:5d:ae:8d:4a:5c:76:a0:df:71:f8:cc:
                    8b:d0:15:b3:fb:85:fe:84:c4:14:d4:7f:cb:c7:bb:
                    6b:e1:1c:f2:87:16:45:42:0a:7c:84:7e:35:05:ed:
                    55:08:95:ce:16:bb:e1:1d:1d:d6:07:48:28:f5:6a:
                    f6:8f:32:93:ce:9b:d9:2c:29:64:f6:02:52:46:34:
                    de:72:53:46:93:05:b7:09:4b:0e:fd:57:ac:f1:12:
                    29:39:82:5a:31:8a:aa:4b:35:33:44:64:71:6c:dd:
                    9c:15:7a:0c:4d:a4:31:28:90:91:c7:08:96:82:d3:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7F:1F:D7:D6:52:F7:E4:FB:B0:47:30:5D:BB:F3:2E:D2:A1:1B:C4
            X509v3 Authority Key Identifier:
                keyid:9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:1c:c8:83:cd:35:4f:71:e9:06:d1:f9:01:3f:4e:8d:53:
         f3:a1:79:2e:1a:3e:50:a3:5c:ed:3a:25:12:a2:7d:4c:e7:14:
         45:3c:be:c5:bd:66:16:c4:92:99:7e:96:a9:1c:36:44:54:ad:
         5f:51:5f:91:9c:38:36:d9:ed:bc:eb:57:9f:bd:09:d5:70:6f:
         fe:92:ca:41:24:de:d3:90:01:1c:96:57:d9:e4:ca:ef:ff:00:
         78:b4:09:26:9b:e4:c0:a7:d0:03:c2:6b:80:0d:46:50:d6:d0:
         42:48:c7:d5:9c:1f:03:c8:11:1c:d5:d7:5a:a3:d5:6e:4c:a0:
         bf:90:79:29:59:64:05:b8:a0:aa:a5:f6:08:52:fe:10:05:d6:
         fd:b0:f3:c0:f9:b9:50:1f:73:af:8a:04:dd:c7:fd:93:93:73:
         8a:07:ed:db:c5:62:4d:32:a7:7d:76:40:30:a7:9b:15:bd:79:
         dc:2c:2c:f9:55:d9:24:7f:d1:27:4c:3c:18:f8:0d:86:cf:0f:
         79:ff:65:20:76:71:d7:c4:94:8b:a4:ae:67:a5:f8:9c:2e:27:
         06:57:ad:34:25:49:e8:48:08:d3:f8:a2:3d:83:85:6c:4d:7e:
         c3:96:94:b1:fc:03:d3:8c:74:20:ce:61:05:9f:ed:f6:b6:a9:
         9a:a8:fd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----