Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
File:                     iW1QqxLax1eoUX-YnnMXJVoUfFA.mft (raw, json)
Hash identifier:          GlX0lWg9wBqBu/VNt7EIQK/culVQ+5MRT5pXlXy1abM=
Subject key identifier:   70:71:07:3E:41:1A:E6:E2:6E:5D:95:B7:0F:00:B1:9E:41:A5:CD:F3
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Certificate issuer:       /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial:       01962F063D22359DA6BAC475E5D8E0BB1D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
Manifest number:          0763
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (hash: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=)
                          2: SW-4hL0mVSkVe3oiFDw6-IYGB80.roa (hash: aedwmf02se0U+ifzhQZmrqdfm8+Faq7npwCgMp24KCg=)
                          3: iW1QqxLax1eoUX-YnnMXJVoUfFA.crl (hash: Vy0dgxuDaBua1rJaZjCxLos3WLdZWlNpqrKt31y2AcY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3d:22:35:9d:a6:ba:c4:75:e5:d8:e0:bb:1d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=7071073e411ae6e26e5d95b70f00b19e41a5cdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:ca:1a:02:2c:6a:6e:b2:33:85:35:63:9d:
                    d4:cf:22:d0:62:e1:3f:e5:4a:c0:4d:b1:f7:0e:33:
                    bb:40:53:ba:50:e1:6e:72:74:81:04:83:d7:fb:a6:
                    a8:36:47:9f:04:23:bd:30:4e:1a:66:02:22:c7:21:
                    1c:a1:22:c2:e0:8a:79:3c:89:71:ed:03:78:e6:ac:
                    b0:77:60:98:d8:71:6a:bf:7d:f8:6c:b7:de:41:63:
                    83:9d:a6:8d:e5:40:dd:22:f8:81:bb:13:f9:c8:d8:
                    bc:15:bf:a6:c6:4f:9b:8e:7a:cd:98:2d:79:a3:de:
                    97:5f:8e:6b:4f:53:96:55:0d:91:55:b2:66:93:cc:
                    32:90:0d:19:97:0c:c3:3e:35:e4:58:6a:4d:2b:f4:
                    6a:d7:af:b8:ee:c9:d6:91:5d:43:f9:fa:40:ef:f0:
                    5a:6e:05:f7:3a:fb:66:0e:e9:f5:b6:b5:07:01:d9:
                    d1:ee:0c:39:d8:3d:0e:29:4e:80:15:e3:9c:f6:26:
                    c7:77:fd:d5:a1:85:d6:8d:e3:a5:f9:8a:44:d6:be:
                    56:68:c9:eb:18:85:d1:37:99:1c:24:a5:31:98:50:
                    07:1f:33:17:1d:3d:a6:c6:88:3f:7c:ca:88:ec:7c:
                    45:3f:e2:e5:ea:2a:5c:93:ef:7c:a9:99:e5:25:72:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:71:07:3E:41:1A:E6:E2:6E:5D:95:B7:0F:00:B1:9E:41:A5:CD:F3
            X509v3 Authority Key Identifier:
                keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5d:d8:69:fe:e8:50:76:fa:ca:24:04:7b:12:ad:88:d4:0b:
         09:45:e7:18:d5:ee:49:50:d8:ee:c1:95:a7:ad:13:cd:20:91:
         66:37:15:92:e4:48:e7:8b:f2:45:0b:02:46:d5:6e:47:c8:82:
         e9:e3:e6:ef:26:a3:ec:19:bf:1b:b6:45:e2:6c:1b:34:d4:ef:
         b8:55:97:fa:6f:5b:34:2c:00:a0:b3:d1:6e:78:76:5f:9e:0f:
         36:ea:6d:d5:45:13:b4:8b:51:b3:3d:fb:19:39:46:7f:89:c4:
         d0:12:f0:36:47:da:0d:7f:d9:68:5d:de:1a:67:37:68:d8:6b:
         8c:ff:2c:78:0e:89:06:59:34:67:11:8e:52:de:3f:de:ac:c8:
         76:9d:e1:cf:33:f9:75:df:3c:99:24:ac:a1:97:07:f0:56:0e:
         cd:04:64:11:b6:a1:1e:0a:6f:10:53:77:ca:20:21:d2:ca:ec:
         d4:43:1f:ae:b9:29:51:56:6c:33:2b:f8:e1:23:cd:12:61:3e:
         3e:36:54:24:11:ee:8d:a1:0c:04:66:a8:58:3c:75:11:d1:40:
         9e:59:e9:3a:a7:0e:be:3d:a1:9f:91:23:ff:3b:9c:96:7a:eb:
         56:09:f5:ae:c3:e2:1f:dc:fe:8e:60:87:57:3f:fa:41:39:c9:
         64:23:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----