Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File:                     w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier:          LRhQ9SaCbI4HLvaccxoNTWwGhvlHkXCHKWnDImUPOks=
Subject key identifier:   3A:A4:C8:1C:F9:1A:0E:0D:4A:C5:90:A4:3C:72:8B:7E:4C:7B:29:4B
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer:       /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial:       01962ECFA28160F11E377BAF8F4FDB54347A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number:          0998
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: MSS8bajhBaU5VhOzrfA52HmDj84.roa (hash: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=)
                          2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: wz5+8WAZHImaYjR3uziqfa2hwFxbsDDOSWpm4YIM2Z4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a2:81:60:f1:1e:37:7b:af:8f:4f:db:54:34:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=3aa4c81cf91a0e0d4ac590a43c728b7e4c7b294b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:9a:4e:67:15:b7:ea:c6:bd:e7:a8:e6:15:
                    dd:ed:08:00:e4:8e:a7:be:d4:1e:0a:5f:7a:09:ac:
                    d3:96:1f:51:d0:53:d6:10:5d:5a:29:31:c1:b5:66:
                    2e:8e:ac:ab:e9:0d:21:c2:6d:b6:ba:bb:b5:4d:71:
                    57:14:c0:a5:63:e0:a6:71:61:31:63:a7:2f:f0:8a:
                    d1:3e:3a:0d:10:fe:d6:f4:2b:94:7b:9b:a9:48:d0:
                    43:70:66:4c:82:7e:a7:07:8a:08:57:3c:49:04:d3:
                    a3:99:4f:51:a0:39:d3:55:c9:51:d3:04:0b:e0:e8:
                    f5:8f:1b:aa:60:3d:df:b5:12:66:d3:37:34:b9:cf:
                    b5:84:0b:53:16:4f:93:76:cf:af:a7:bd:a5:5a:e7:
                    e6:9c:89:0d:a9:0a:7f:68:ba:89:36:76:1f:4b:5d:
                    7a:c5:b4:d8:a3:99:8f:b7:70:e7:f2:be:25:67:d4:
                    85:b4:45:fe:38:1f:ac:27:12:94:32:09:5f:4c:89:
                    84:ee:27:6f:3e:02:04:bd:f3:a3:de:7f:92:5f:4f:
                    55:22:d0:0d:3b:0d:15:af:8d:eb:10:0a:7b:18:1a:
                    3c:1e:45:cc:89:dd:dc:34:22:52:c4:f4:a2:2c:95:
                    e9:e7:10:10:dd:37:c3:7a:7b:ed:20:68:11:48:22:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A4:C8:1C:F9:1A:0E:0D:4A:C5:90:A4:3C:72:8B:7E:4C:7B:29:4B
            X509v3 Authority Key Identifier:
                keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:88:fd:72:44:be:08:a6:76:5e:10:ac:f9:21:65:3f:17:ad:
         39:35:ce:f2:63:bf:88:bd:38:b6:60:3d:b4:b7:94:78:97:d4:
         0c:9b:6a:69:37:92:61:a9:8f:2a:b7:c3:70:10:74:f3:19:b3:
         88:05:ed:c2:ca:fe:06:8b:7f:27:b3:a4:31:d3:01:eb:65:bc:
         12:34:34:46:6a:29:eb:30:9a:7a:2c:be:32:d4:57:2e:b5:62:
         5b:52:a5:28:85:98:dd:37:12:a9:33:55:d4:53:23:73:31:01:
         6b:45:fb:2b:de:0f:14:f2:16:47:d6:62:bf:50:a6:ee:3e:1b:
         52:7e:d2:9f:bf:03:33:72:59:65:d9:9c:66:bd:c7:0c:52:b4:
         83:73:74:26:1d:1b:6c:30:e8:18:00:5d:3a:69:a3:ed:b7:e8:
         c6:17:40:e4:ba:25:e5:7e:40:d2:ac:ec:59:0a:59:07:65:43:
         65:5f:e1:28:71:36:6c:1f:59:6c:7d:1f:03:8c:e8:a6:7f:c1:
         b1:9a:7c:d5:18:2b:ca:db:8e:0b:9d:9b:70:9f:70:f6:ad:b1:
         17:22:7a:49:63:0d:3e:15:fb:49:5f:c0:44:85:46:08:3b:3e:
         33:ff:39:93:27:fd:7a:4d:7e:49:40:5d:b8:06:21:db:02:67:
         13:49:80:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----