Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
File:                     iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft (raw, json)
Hash identifier:          Z6t3yj5r+m97gQx3EVj+ttf4gMAhVdwztcgbl1N62ew=
Subject key identifier:   A2:D5:69:04:3B:D3:2D:C2:DF:AA:DE:86:28:1F:FC:8B:20:21:A1:AE
Authority key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
Certificate issuer:       /CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Certificate serial:       01962F06DD32CA5D53EF50C4964B9F3D9499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
Manifest number:          0392
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: XBo1pVVrARNWOJzVGLIS7aXEyvs.roa (hash: LHmi+bbPW6X6RSAyxvQlIttnolx/pGqPJGLDRqAXVIU=)
                          2: iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl (hash: 3j5S2xGVub7UpTUNr1E3jD9nOovzdLP9LMKMD26l07Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dd:32:ca:5d:53:ef:50:c4:96:4b:9f:3d:94:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=a2d569043bd32dc2dfaade86281ffc8b2021a1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5b:a5:ee:ae:15:c2:f5:76:0b:7f:f2:3f:33:
                    5d:8e:3e:96:69:02:f9:83:4e:d3:63:89:83:7b:2a:
                    b4:c9:b4:f9:c6:5e:20:51:30:84:06:e5:db:da:4a:
                    b6:a6:3e:7f:96:c7:2a:52:42:2d:43:1a:e3:7f:64:
                    21:70:0e:4a:85:77:59:ba:41:22:17:3a:85:e0:55:
                    c0:94:88:7c:ba:eb:78:35:36:34:98:6a:df:69:a9:
                    ff:de:31:34:ce:e4:40:a4:0d:59:61:fd:89:04:5f:
                    9d:c5:23:10:30:05:e2:33:97:e0:88:c7:81:ec:91:
                    86:8c:f9:45:ed:88:61:fc:17:49:19:03:31:8a:8e:
                    0e:6e:56:02:54:d3:ae:07:c5:7e:c0:04:01:b8:f6:
                    61:ec:96:79:84:7e:cc:4e:a6:42:4a:d4:82:9b:2c:
                    80:9d:77:21:92:a9:18:dd:fd:0e:66:6a:53:50:11:
                    f5:d5:cc:de:d1:92:fb:01:a1:08:18:6c:2f:cf:a2:
                    0c:08:de:26:c5:28:a5:54:78:9d:74:eb:f5:eb:92:
                    65:3b:ad:3b:db:a2:45:3c:a8:9f:05:cf:18:7b:24:
                    26:3e:b7:89:05:8c:48:17:44:c0:4c:db:e1:c3:db:
                    9b:72:76:ac:62:e5:03:c0:13:25:3a:e4:d8:b2:10:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D5:69:04:3B:D3:2D:C2:DF:AA:DE:86:28:1F:FC:8B:20:21:A1:AE
            X509v3 Authority Key Identifier:
                keyid:88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8e:cf:4a:31:11:30:ba:37:99:e0:62:b0:be:e6:11:f4:fb:
         fd:ee:8c:92:a6:25:b1:ed:c2:ba:5d:d6:5a:4a:66:b8:cd:d0:
         5e:a7:bc:b4:96:ff:52:d1:bb:d4:14:e2:41:30:0b:76:22:b0:
         de:91:86:42:25:df:7c:73:7a:ac:d1:14:00:c5:d1:93:b3:34:
         10:49:2d:d6:06:8d:da:c7:5c:92:c6:45:da:a9:9e:51:f7:3d:
         9c:60:61:f1:84:7f:4c:0e:2b:7b:6f:49:f0:c4:0b:85:95:45:
         72:e3:0e:ed:19:ce:1b:64:5a:09:c4:a0:5d:13:33:53:c1:48:
         cb:d2:19:9f:02:1b:34:b5:f6:04:09:e9:3f:32:99:d7:f6:d2:
         19:d9:0c:84:c9:b7:bd:9e:4c:7d:57:f4:86:e9:33:f5:1a:f5:
         e8:0f:87:82:ef:12:f0:aa:56:75:05:d1:8b:13:bb:44:ad:55:
         44:33:bf:84:83:0f:99:7b:43:b9:de:13:b1:b8:63:99:5e:50:
         06:bb:b3:7b:04:fb:9d:e4:fb:62:e1:cb:79:05:e9:53:2a:62:
         4e:8f:ad:ab:61:f9:fa:4e:8e:67:6a:5a:f6:2d:25:3d:fa:95:
         80:76:9d:ac:64:e9:b2:2e:54:c8:c4:5b:4b:a1:70:17:6d:37:
         1c:27:e3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----