Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
File:                     w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft (raw, json)
Hash identifier:          LbMpVPpPlMvkqCUjk/eZdMnF8g6N+DmBvWagu94qZGY=
Subject key identifier:   B2:C3:44:89:C4:B7:DC:37:4C:5E:9D:85:78:2B:78:EA:F5:5C:46:FF
Authority key identifier: C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
Certificate issuer:       /CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Certificate serial:       01962DF427ADE7ED5C3312A28B3113DBE23B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
Manifest number:          0A55
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: ZZxnLfkQZZe868Ymmh1h6vi9FK4.roa (hash: FUPgIKTRbD3IVqEoytl9TWolLWbbwFaaKQfjRWOMZxY=)
                          2: w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl (hash: LEkR8bwV6xPe3j1G/2e+2svUYNVuK1Ymyxo0lowNyuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:27:ad:e7:ed:5c:33:12:a2:8b:31:13:db:e2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=b2c34489c4b7dc374c5e9d85782b78eaf55c46ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d2:b3:7c:8a:85:f7:31:7a:73:c7:d7:56:e7:
                    a0:42:ed:36:33:6c:ba:a0:f7:7a:23:53:49:49:01:
                    4c:e2:25:3a:50:cb:87:d2:37:1e:32:01:58:f2:b8:
                    ee:19:f2:48:f5:f9:11:1f:0d:75:0e:11:7f:4a:73:
                    29:be:91:64:82:91:a9:9d:57:5b:b2:16:34:a9:3c:
                    d6:f4:7a:57:45:16:74:c7:ac:49:d8:04:31:37:b1:
                    39:2d:d3:1f:fe:fc:cd:84:cc:e0:6d:5e:d2:0b:7e:
                    46:4a:4b:eb:61:ed:4e:0f:14:a8:28:37:25:99:72:
                    ff:c8:0a:8a:cd:76:bb:9c:c2:70:b4:27:21:c6:5b:
                    a2:82:21:09:b9:35:a8:43:50:cb:31:ef:e3:3a:50:
                    c2:7c:83:ac:74:d1:19:22:cf:20:13:fc:55:70:0d:
                    1a:fb:36:ef:e4:c3:e2:82:f9:0d:97:d1:3d:2d:bb:
                    14:19:97:6b:42:f9:8a:e0:f2:89:6e:de:97:b1:57:
                    65:a5:9b:df:3c:cd:10:b1:91:7e:c6:3d:97:b0:16:
                    31:a4:41:8c:ea:77:00:eb:db:fc:49:51:cc:96:84:
                    69:01:5e:13:79:40:a3:e7:44:a2:1c:34:01:a9:d3:
                    89:1d:71:d5:1a:c3:17:1c:ca:31:1b:33:54:02:cc:
                    ce:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C3:44:89:C4:B7:DC:37:4C:5E:9D:85:78:2B:78:EA:F5:5C:46:FF
            X509v3 Authority Key Identifier:
                keyid:C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:bc:5d:f9:0b:c7:a4:a5:bd:04:e8:97:74:9f:a3:79:6c:ac:
         bc:2e:4f:e4:aa:57:4b:df:d3:67:75:81:5f:04:0e:a3:12:0c:
         29:8e:56:c5:7c:7e:b2:51:98:c7:f5:44:0c:41:1a:9c:b2:82:
         15:10:81:05:28:10:de:1d:d9:28:90:e6:1f:94:5f:8f:4f:cf:
         68:21:b5:6c:76:71:a0:95:0c:ea:af:23:08:4c:cf:49:e0:ba:
         af:b6:11:3d:35:0d:08:3a:0f:76:f7:60:cc:d7:46:50:05:eb:
         17:9f:06:e9:60:42:a8:68:27:16:73:d9:28:92:1e:a6:84:17:
         49:5f:b5:1d:8c:96:38:51:76:58:0f:85:e2:64:0f:97:91:70:
         df:f1:f5:21:88:8e:0c:af:2e:96:fc:71:7b:11:c5:e2:35:cf:
         30:e5:2f:86:6d:f8:4d:6b:d2:f9:10:91:1e:ae:b8:6d:be:92:
         ac:96:e7:16:3e:af:ad:d1:2a:c2:ee:77:50:01:e8:a4:cd:9d:
         3d:32:ae:29:3f:a1:e7:8f:49:de:2e:5f:81:69:3d:d1:f6:eb:
         9b:5b:f7:79:e4:fc:98:94:99:0f:14:f1:31:08:21:20:52:e1:
         b3:9f:95:ae:30:9c:f7:4e:30:d0:97:86:03:2a:d1:c5:07:ce:
         b2:5b:b7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----