Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
File:                     w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json)
Hash identifier:          0s7wT35ZYa46Yu+t8QpZQo+MkkeDsZxLbDoMt6WPr00=
Subject key identifier:   08:FD:B6:4D:BC:02:72:18:8E:80:E4:E3:E9:20:37:35:12:A5:8E:4A
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Certificate issuer:       /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial:       01962DF3DE0E14AE67C84156B0B1CC26156C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: GfVJNtBqDjYi0Gf5Q216kr4bXN4.roa (hash: y9FyRvs17LSTei1C0cR4cXi2RJhRkUIb5SAPSm2CSi4=)
                          2: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: VSWuSNRZyWVWagI7BZId8VS2Ut/yarMyrEVDHPgAxbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:de:0e:14:ae:67:c8:41:56:b0:b1:cc:26:15:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=08fdb64dbc0272188e80e4e3e920373512a58e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:3d:11:15:bd:6f:59:b7:8b:d4:1e:34:59:
                    08:29:8e:f7:fd:cc:4a:07:14:cf:a9:99:13:67:1b:
                    86:5f:cb:4c:c3:bb:e8:41:b9:38:54:c0:7c:94:84:
                    38:ca:35:62:6b:f6:00:dd:b7:12:bd:0a:87:bc:12:
                    e6:fb:13:9d:89:02:95:36:75:2b:a5:5d:c2:d8:a3:
                    ca:fe:e1:7d:88:dc:ee:5e:5e:83:e1:06:99:66:a3:
                    20:28:1a:b5:f5:75:0a:5a:97:45:8a:b5:8c:04:c1:
                    be:f0:d0:1c:49:6a:ef:e5:f8:b2:7c:03:e7:02:61:
                    4c:8b:fa:70:84:00:35:cc:f7:93:4a:10:77:f9:90:
                    c9:b3:4a:07:36:a8:18:33:b3:f7:06:3f:f5:15:3e:
                    12:bc:dc:9f:b3:21:e8:f1:38:b4:77:96:11:cf:f5:
                    9b:a7:96:fa:4b:3d:13:78:0c:07:b5:9e:0e:91:82:
                    de:02:c2:e1:de:ac:4a:9b:97:e1:cb:7b:43:b3:b5:
                    bc:87:44:77:d3:f0:01:82:d6:2b:c7:a0:6d:12:85:
                    8a:9b:49:51:e7:f3:a6:99:f4:eb:81:51:da:af:1b:
                    2a:84:c1:87:78:7b:02:1f:93:b8:e7:27:1e:be:10:
                    87:3c:fe:d8:27:ad:b4:aa:0a:c3:b0:56:85:75:3d:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:B6:4D:BC:02:72:18:8E:80:E4:E3:E9:20:37:35:12:A5:8E:4A
            X509v3 Authority Key Identifier:
                keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:13:cc:8b:d8:56:dc:83:49:db:64:32:10:24:df:bc:09:e6:
         37:7d:04:4f:f5:7b:1b:89:38:7c:83:97:62:f0:d8:72:f5:0c:
         ed:1c:25:b2:47:48:4a:2e:23:39:f7:5c:ff:85:d7:72:2b:ff:
         f1:7e:9d:46:3a:59:8e:05:e3:ab:fa:5a:2f:10:da:43:79:15:
         d8:62:65:3e:4d:51:29:d4:30:22:ef:0b:f2:8d:2e:33:4c:ba:
         48:fd:e2:ab:08:bf:87:5f:54:0b:28:fe:3d:fc:c1:00:dc:ca:
         36:06:d3:18:ab:92:b2:86:7e:e9:35:92:31:f3:ed:c0:7a:0f:
         7b:67:95:5c:be:30:d5:d2:38:b9:22:a4:87:c0:d1:81:3f:5d:
         54:c4:ee:af:18:b2:d5:d2:24:cc:14:09:69:38:13:c9:26:33:
         1d:b7:3c:98:e5:2c:81:6e:18:ba:ae:33:47:c4:5d:06:c3:85:
         13:29:d5:95:03:fe:9a:b9:02:dd:fb:25:f8:e8:d7:96:68:47:
         4f:76:94:74:4f:39:51:e7:4e:ea:e7:32:2d:c6:fa:c2:6c:05:
         d2:4e:86:1e:e6:30:15:2d:b6:6d:29:2d:68:12:7a:f6:2f:ac:
         12:96:fa:7a:ea:77:e2:7b:f5:74:c2:eb:30:a9:b8:a0:e4:a7:
         aa:a2:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----