Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
File:                     w4w6HAXImev-FdI2GQmmNZfGgHg.mft (raw, json)
Hash identifier:          iQuXC6Eg8pL2e3h26zBbLRPEBhJTf/CeN1+yQLPNowM=
Subject key identifier:   5B:8B:C7:21:A2:44:62:56:5D:C1:A7:FE:23:D9:E6:79:43:13:CC:86
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Certificate issuer:       /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial:       01962F74CC4AB5FFF4309DF5974A67C1A72F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 3fbk5KZ8ThDjTTk1HUs_F8dpBIQ.roa (hash: QSUPjZJR7N2hLAV4a9vMxf89Cyng2AUNsEsGu9jShnE=)
                          2: q75v5EqZWH70d3-zw1Mz9lAhrNA.roa (hash: 42QWIn0E5NYeaE/XqOKgGlGrf3JcLpIWupxVplExU4g=)
                          3: w4w6HAXImev-FdI2GQmmNZfGgHg.crl (hash: BPAeLL6TDORYMb/HJ6vQe0WGYOLNpippi2u5aCMouV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cc:4a:b5:ff:f4:30:9d:f5:97:4a:67:c1:a7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=5b8bc721a24462565dc1a7fe23d9e6794313cc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:6e:29:6f:66:c8:be:6e:7c:43:de:1c:6e:
                    74:8f:19:5a:9b:67:ac:cd:db:6b:9b:2b:17:0a:10:
                    96:bc:04:34:c1:be:a4:51:8a:9b:f8:36:2b:5e:f9:
                    41:7e:4f:13:92:07:1e:e9:33:88:2f:83:08:a2:3f:
                    22:f9:8b:8b:33:90:9a:1b:42:da:62:f3:6d:88:c7:
                    39:50:67:93:a6:1d:0d:88:d8:a2:92:b8:6a:b9:43:
                    fe:96:b6:ee:f1:44:bc:36:a3:e8:33:a4:af:4c:e7:
                    51:2d:11:54:92:f5:2f:b7:d7:ae:70:26:63:a7:95:
                    c9:e7:17:b9:80:7a:9a:c8:a2:d4:0c:22:36:8d:21:
                    f9:76:a8:1b:ac:3a:5c:0c:27:12:9c:84:68:0f:26:
                    ad:b0:7d:aa:90:f4:dc:84:cf:12:f5:e0:50:37:0b:
                    80:9e:5d:f0:e0:9f:0a:39:97:aa:fd:85:c8:eb:92:
                    f7:26:92:a6:91:e9:2b:62:db:71:c6:ce:95:ad:b0:
                    47:f8:e3:db:ac:1e:d2:db:1b:6e:23:81:bf:d3:a1:
                    2d:69:a8:df:aa:3c:66:ee:54:ac:22:69:4d:c7:e0:
                    90:2a:f1:09:c8:c0:09:94:55:12:17:91:6d:e6:0d:
                    fe:33:72:49:74:da:2a:1f:0b:ef:15:27:59:1c:e2:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8B:C7:21:A2:44:62:56:5D:C1:A7:FE:23:D9:E6:79:43:13:CC:86
            X509v3 Authority Key Identifier:
                keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:03:2e:9f:6d:42:6a:9d:bf:60:0c:21:4b:0c:b7:73:25:64:
         c5:1c:c5:e0:09:af:a6:ff:54:49:44:5b:12:6a:a3:70:ce:4b:
         c6:54:04:42:e0:54:58:79:6b:f6:d4:93:a6:ed:fb:67:4c:c8:
         6c:75:75:cb:d7:ad:2d:e2:02:f2:8f:7b:91:19:78:9d:3b:3e:
         a0:09:d2:20:25:6f:17:90:1d:ee:4b:e1:70:bd:fa:f8:7a:e9:
         18:0e:3d:28:fa:98:ff:a0:21:63:2f:90:4b:f7:a2:02:62:47:
         17:66:6c:84:75:05:12:e5:bc:8c:0d:78:a4:2e:4f:0b:d7:06:
         aa:b2:0f:02:73:09:2b:ed:62:57:7e:8d:78:06:41:3f:b7:c9:
         4c:dd:fe:dc:1b:0b:6b:73:66:e1:c3:58:1b:bb:d9:b7:7f:9d:
         38:08:22:aa:c9:0c:df:75:3d:79:97:93:bd:1d:32:2a:c3:1e:
         ec:27:d3:f1:59:61:ec:13:9c:3b:56:af:ae:c7:ee:0a:7f:cd:
         d9:40:e1:a9:5e:a1:23:bd:04:e8:51:c3:ad:68:74:28:9b:10:
         f3:0b:c0:e6:29:5c:1c:3c:0d:83:9e:18:37:6d:d8:21:1a:1c:
         ed:85:22:9d:fb:de:60:b8:4b:a0:60:38:d6:e3:c0:5f:83:24:
         3b:93:d2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----