Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File:                     w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier:          MN3TW15HF4CZj6I+n5YPnBGKfli6JLqGAnfo8uGUEMA=
Subject key identifier:   F6:05:66:2C:6F:73:C3:E7:A9:4D:81:92:5C:E3:F1:7D:CD:0B:5A:B2
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer:       /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial:       01962E98F84D6F81DB853D5692CB5F73E5F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
                          2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: ekAo6n0TdAGqrGdEW80peRMZBU/T5W4lQojq1TsVoig=)
                          3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f8:4d:6f:81:db:85:3d:56:92:cb:5f:73:e5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=f605662c6f73c3e7a94d81925ce3f17dcd0b5ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:b3:a0:6c:9b:8b:68:6e:2f:74:87:5c:93:
                    c2:15:86:b7:2f:24:9f:b2:f5:84:bb:13:89:e0:28:
                    62:63:ee:8c:20:33:f0:8d:b6:78:da:cf:3f:be:92:
                    bb:b5:dc:18:68:ad:ad:a4:91:74:13:59:73:22:1b:
                    f3:96:e4:18:79:ea:aa:5b:44:82:9d:7f:42:cf:6c:
                    a6:f9:08:02:71:c3:49:22:b4:70:81:99:9f:39:28:
                    ef:a6:9c:7a:a9:e2:c5:4f:73:e6:c8:2c:c0:48:70:
                    d6:11:2a:3f:2b:c7:5f:1a:d7:79:38:44:9f:43:16:
                    e4:07:83:8c:c2:5a:b1:45:e9:22:f0:d2:c4:52:cf:
                    b7:8b:df:e0:15:d8:fe:81:57:ee:80:01:bf:48:6d:
                    87:dc:26:5a:ba:78:14:64:03:36:9a:d1:e2:9d:04:
                    7e:cc:8f:35:40:00:91:e1:32:d1:14:63:f5:c5:30:
                    38:4c:09:75:e6:c7:1c:7a:25:ab:8e:b3:89:0b:f8:
                    ee:20:05:e9:8c:13:c4:1f:6f:b8:b4:7a:bb:e5:b9:
                    21:62:a5:2f:9c:4a:d3:a9:dc:c1:19:f3:98:30:a6:
                    86:13:29:90:a5:f4:82:97:57:65:6c:5c:24:69:07:
                    04:6f:48:c0:4a:6d:87:a1:fa:90:94:3d:76:aa:1c:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:05:66:2C:6F:73:C3:E7:A9:4D:81:92:5C:E3:F1:7D:CD:0B:5A:B2
            X509v3 Authority Key Identifier:
                keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fd:39:f1:ca:e2:b3:af:f1:33:9d:d6:55:cd:bc:7c:8e:2d:
         c0:14:50:5c:d9:d6:6d:23:c1:9a:8d:46:e3:ed:81:6e:60:69:
         8e:9d:84:cd:7e:52:1e:19:74:9d:18:2c:78:bd:57:03:45:07:
         fb:f6:64:4d:a1:d1:ea:7c:60:1c:0d:0e:26:70:2c:8d:b1:e1:
         29:9d:71:08:e0:39:35:05:98:82:6b:35:db:f5:e7:3f:2f:b5:
         94:77:19:cd:4f:4f:af:b4:d4:ab:f6:93:20:09:a8:da:2e:d7:
         13:88:f1:71:b3:71:e5:94:ea:48:06:aa:e2:f8:ee:16:3f:fe:
         9c:bb:51:6e:86:95:b6:ad:7c:bd:5a:82:10:a8:30:81:50:3c:
         5e:60:ca:52:c7:22:fb:35:c7:6d:2c:e9:7c:6e:94:1d:ea:46:
         06:4d:fa:b1:96:cf:60:1d:88:0d:d9:8e:7a:85:bd:a2:2c:00:
         d3:aa:87:91:4e:1f:8c:b0:a6:48:ed:06:e3:78:1b:de:4a:19:
         27:8d:ea:eb:24:d7:55:9f:c1:2b:88:39:af:6b:3d:97:e0:e7:
         59:8a:7f:8d:3f:88:f4:71:ae:5c:e5:da:cf:ad:9f:f3:f0:0d:
         2d:fa:e6:f3:1e:b0:c4:90:01:4a:95:c7:73:7b:e3:b3:bc:8d:
         df:df:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----