Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
File:                     jworuIE7dNeCg7Fyj9ubvF1XhF0.mft (raw, json)
Hash identifier:          V+cY1+w885EsaEfpBCZ6n39W4BGIxnFu9Vh2lLdsElo=
Subject key identifier:   16:DF:16:E3:E1:ED:00:01:54:53:42:A1:BE:56:66:66:3C:D4:74:A7
Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
Certificate issuer:       /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Certificate serial:       01962F3D5A3DB379A2827924D5D0E9F4EDA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
Manifest number:          035A
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: ZObyvsAzhsjT703W96HfcivH5Zg.roa (hash: WXGaHy6oTKKfybN+lNKV7S10VAPqe8014otEct9fqTo=)
                          2: bADe8xiQTt_A88q5kXJmeUt-iHk.roa (hash: u6CJ9DSqw8LvcUhQI42InBQIP+wN1G/r5EtVs1sq02o=)
                          3: jworuIE7dNeCg7Fyj9ubvF1XhF0.crl (hash: JKUexhQQCeNsmO2q56fZ1JjAy3Q7wYAUCz5cXdhOUw8=)
                          4: pqMuZUmnJkNOPYxu6HyYgqehHLI.roa (hash: j6HeHGze3fA2sILtlslcsGakMweVVXiFHLha+j3ToYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5a:3d:b3:79:a2:82:79:24:d5:d0:e9:f4:ed:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=16df16e3e1ed0001545342a1be5666663cd474a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:f2:2f:ae:af:39:34:7c:b1:cd:35:44:a7:
                    08:54:c3:40:d8:21:c2:3c:2d:30:f9:2d:cf:82:f4:
                    49:5c:d0:c5:4c:47:1b:06:ae:c2:16:4e:15:c0:79:
                    9f:86:ab:06:c4:6f:3a:aa:aa:d5:be:40:3d:7e:b2:
                    7b:52:eb:78:c6:b6:f9:b1:ba:e3:f6:c8:af:c5:b0:
                    62:c0:88:e4:a4:48:4f:a5:be:11:54:c6:6d:47:9e:
                    be:fe:60:a1:aa:af:d3:3c:4c:6f:d8:3e:6d:b7:50:
                    c2:93:52:bb:14:52:0b:e4:6a:bc:6b:1b:67:f1:a2:
                    8b:dd:a1:86:cc:67:ac:69:96:b7:30:ef:9d:11:60:
                    c9:4b:e5:8e:20:9b:74:c8:32:46:fb:06:45:a5:ab:
                    94:2d:59:7a:9b:b4:39:b0:77:98:7f:cf:21:1f:b3:
                    7c:4b:75:66:21:01:8e:07:a5:09:45:07:95:10:d8:
                    d6:70:f8:14:4a:7d:98:46:04:5a:b8:bd:f7:89:f3:
                    a9:aa:fb:f7:85:f9:ee:cd:b7:57:63:04:1f:cb:13:
                    be:45:9a:bb:dc:2c:56:ad:a5:6b:30:96:2c:e2:3b:
                    10:d6:6f:39:00:d6:f6:a9:94:b9:41:3b:d6:b0:16:
                    6f:48:ad:63:b6:4e:43:53:e8:b6:cc:45:e6:f0:d4:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DF:16:E3:E1:ED:00:01:54:53:42:A1:BE:56:66:66:3C:D4:74:A7
            X509v3 Authority Key Identifier:
                keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:a4:f6:a0:d6:7d:13:a2:e8:87:3d:5a:10:47:e9:09:b7:37:
         e3:82:62:5a:21:6d:69:dc:c2:41:22:d6:8f:fd:fd:b8:4f:0f:
         a2:88:59:da:21:06:ce:9c:a0:0f:53:72:0e:e4:df:f3:bc:f1:
         8f:e8:b9:74:ee:5e:49:1d:01:95:50:77:e9:b2:35:b3:f1:24:
         a8:da:08:3e:5e:f7:3a:f1:c0:be:6b:f2:12:04:eb:a8:ca:c7:
         a9:c3:b1:ad:a7:fa:40:21:61:74:58:e9:04:a0:bf:7b:e8:0d:
         45:c6:c0:8e:47:b3:19:df:08:f2:42:50:ac:f8:59:68:81:01:
         83:f4:2a:5f:a4:ab:41:fb:f5:15:9a:46:9b:c2:37:6f:1d:df:
         66:52:6d:60:ce:e5:03:e7:4e:4b:4a:12:22:39:8f:bd:e3:dc:
         1f:dc:43:22:8f:41:43:7c:65:c2:0a:7e:fe:5a:36:49:1a:95:
         e0:a0:8c:0a:7b:37:09:fa:4f:81:4b:c4:b8:e2:2c:ff:a4:df:
         31:f3:25:02:9d:02:ef:6f:62:9a:f8:57:2f:e2:53:42:88:40:
         be:56:29:27:fe:39:d9:a4:37:38:1c:3e:43:e0:06:5a:fb:15:
         07:1b:71:ab:7e:a9:b7:c7:e3:12:b1:5d:73:c9:a6:12:9a:2d:
         32:22:ac:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----