Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
File:                     IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft (raw, json)
Hash identifier:          OWn5a/ceWvKeELxisXLJode67/s2wJQhVoxtWwalv0A=
Subject key identifier:   08:3B:77:CC:8E:4C:DC:BE:F3:AA:01:84:E6:BF:DD:79:27:D2:78:FC
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Certificate issuer:       /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial:       01962DF3F45863EB432A8CD012E6407A2287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
Manifest number:          0C9E
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl (hash: ameda6PutghzG1jPcenMpl1Timv0CE3cmdzEN+PdJow=)
                          2: XEwYa6CNvkLJC5LAUGlV5sU-Q7E.roa (hash: lSmShr06n6oTDTvfvIY+6+zA1Q+CWsMk4yBsQNB5LQo=)
                          3: d2wksXhCd5wl5AD5yX7cxgOMqWE.roa (hash: d845mWomVKLCLy4AeHi3nVtLKMNrF2F8tv4m480Itc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f4:58:63:eb:43:2a:8c:d0:12:e6:40:7a:22:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=083b77cc8e4cdcbef3aa0184e6bfdd7927d278fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:55:f6:24:90:d5:77:62:b9:79:fc:97:53:
                    63:e0:c7:1e:6d:6e:b6:a0:cf:4d:41:8f:51:93:3d:
                    b3:58:18:fa:7c:71:cb:ed:75:b4:36:59:df:15:6d:
                    0a:11:45:05:86:ed:f7:16:d2:ad:26:5b:5e:1b:80:
                    ff:81:a9:e1:9b:05:58:51:31:d8:40:43:8a:9c:3b:
                    a8:aa:7c:a2:3c:cb:35:50:eb:d4:da:b5:47:91:73:
                    12:12:a6:ee:0c:8e:58:bc:35:fe:7c:3c:c3:35:65:
                    b7:c4:68:a1:e7:de:b8:9d:0a:0d:cf:82:ef:ab:14:
                    77:10:08:e8:10:27:5d:f5:9c:1a:9f:d9:db:af:f0:
                    d2:9b:c7:d1:4c:b2:89:95:7d:c6:a6:2c:a7:6c:c9:
                    98:a1:31:0f:c1:63:94:30:91:12:e5:50:d9:04:43:
                    09:e0:2d:60:24:46:55:36:dd:e6:7c:aa:b8:11:c2:
                    5a:66:b9:91:bb:d8:3d:1d:25:e5:2a:ea:27:c8:90:
                    19:6a:89:b1:73:a1:33:c9:85:f2:0a:89:46:89:48:
                    b7:14:bc:43:c9:9f:a0:b2:ab:87:f3:49:ea:10:2b:
                    3d:82:d1:ee:93:57:0b:e0:2f:2e:7f:43:c5:96:5f:
                    57:3d:2d:b1:40:23:b1:0c:98:61:c4:21:8c:ab:2e:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3B:77:CC:8E:4C:DC:BE:F3:AA:01:84:E6:BF:DD:79:27:D2:78:FC
            X509v3 Authority Key Identifier:
                keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:43:2d:76:35:36:5c:38:6a:cc:cb:c4:21:66:fd:04:b4:0c:
         f7:99:4e:bf:51:7c:48:5b:b1:43:39:6c:d6:d0:e6:47:26:08:
         ab:43:74:bb:03:73:9f:ff:94:58:c5:7a:1a:0b:25:07:29:df:
         d3:a5:bb:2c:bd:48:96:85:04:f4:c9:b7:6d:6b:2c:37:23:cd:
         ed:e8:c7:0f:e7:85:2b:e0:45:90:c3:c9:9f:15:c2:15:48:10:
         6c:fe:06:4a:d8:97:a9:4d:f7:e8:87:ea:93:9d:a6:c2:64:fd:
         83:27:fa:7c:6c:d3:e4:78:a7:30:f2:8a:62:01:ce:7e:0d:da:
         a0:82:0d:c7:ab:cc:a7:72:6d:05:99:24:95:cd:8e:77:fe:db:
         28:9b:04:72:f5:67:c5:73:48:55:84:a0:d0:84:95:0b:f1:a6:
         9a:e7:a9:96:0f:89:0d:6d:56:e8:1d:96:d7:ae:bf:a2:63:b1:
         db:0d:4b:42:87:3f:e8:6e:b0:a0:9b:92:d1:f0:95:e6:a6:3a:
         94:c1:3e:d1:ee:a1:5a:ed:e0:c5:25:c5:1e:37:61:e1:52:58:
         a5:58:0f:73:13:f5:40:ff:31:c9:af:75:12:03:37:57:51:8e:
         06:86:b5:ee:b7:cd:be:47:33:ea:23:e2:de:3f:23:4e:0a:d6:
         e4:28:0d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----