Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
File:                     Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json)
Hash identifier:          N7W7vNNI9xRAvjLKoEFc9eJUWneQ5FbBtsSIq0FGGoA=
Subject key identifier:   16:3B:C4:06:81:09:8B:33:95:0B:B6:0A:14:01:BA:5F:F4:51:28:42
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Certificate issuer:       /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial:       01962E61F2D4BF165C15EE9C3AFD4E381EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
Manifest number:          0BCE
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: DT1onb-4ObKDzalYYHYuQuaaeIo.roa (hash: vu1nm9V8jbxKLGzlJsgL+mHK04vH81jI0saGvnr/HOw=)
                          2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: s+df3FJYnazaeblJkMKI+xKKeGIseg/AXmaczsyF5t4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f2:d4:bf:16:5c:15:ee:9c:3a:fd:4e:38:1e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=163bc40681098b33950bb60a1401ba5ff4512842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:ef:50:e8:7b:81:ec:7c:bd:1d:98:12:ac:
                    85:79:65:3a:04:d4:c5:b0:c9:93:38:d4:e4:eb:40:
                    6d:69:61:17:18:5a:e7:27:c2:93:07:eb:dd:7f:54:
                    01:e4:94:db:ad:af:14:91:1c:cb:f1:08:39:2e:4a:
                    9a:98:fe:d9:c8:b3:30:af:99:8a:3a:95:a5:28:2a:
                    ff:5f:18:54:5c:30:ac:69:ed:14:11:56:0a:7e:71:
                    f9:48:0c:5a:3e:9c:4d:23:cf:75:ee:a4:2d:0a:47:
                    1b:51:0c:e5:ec:0a:f5:ec:ac:57:82:c1:ee:b9:fa:
                    14:3d:fa:05:57:4f:b1:e3:f0:33:e2:0a:ab:d2:29:
                    2a:0c:0f:63:9b:5d:47:53:d2:88:e9:c3:f5:61:f5:
                    27:b3:6b:ce:2b:0c:f8:f9:a4:84:3b:76:26:8c:2a:
                    ee:e1:86:39:b1:0e:4a:68:3d:57:e6:6e:36:b1:27:
                    96:58:af:b0:47:f7:09:43:ec:38:68:99:01:db:59:
                    ad:34:97:a6:5c:21:ef:4a:34:f8:ba:cc:d9:54:15:
                    3e:b8:c3:9e:f9:27:92:3a:8a:80:87:6d:76:9c:45:
                    b7:78:45:7b:a4:d6:fa:02:91:5e:77:74:c3:c3:91:
                    15:cd:16:b1:5c:df:ff:b6:b0:c9:e4:46:a6:64:27:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3B:C4:06:81:09:8B:33:95:0B:B6:0A:14:01:BA:5F:F4:51:28:42
            X509v3 Authority Key Identifier:
                keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:52:43:3a:f4:1b:ba:b3:32:05:55:05:34:ec:2d:4f:7a:
         eb:39:a4:39:3d:09:b6:d7:6f:08:fa:cd:db:70:8b:70:8a:8a:
         84:36:db:81:aa:de:07:ea:9b:84:4a:37:fb:8e:01:86:53:97:
         78:a7:46:b8:e8:24:9c:2b:0d:10:12:d7:20:7c:2d:96:2a:17:
         0b:66:20:a9:3b:46:2b:70:a2:e7:74:22:60:1a:51:1c:3f:21:
         b5:42:a1:7b:d2:91:f2:7e:0a:32:bd:62:af:57:9e:c0:ed:9c:
         2d:f3:ee:a9:60:a0:68:21:86:72:ec:c5:c0:70:a4:aa:1e:fe:
         22:50:ea:67:29:d7:fe:fa:e3:df:bf:d1:39:db:9d:08:8e:21:
         ae:c3:4b:be:b4:48:ad:35:64:92:5d:56:07:25:3f:22:84:fb:
         6f:f4:fa:62:03:10:80:ec:db:5a:e6:2b:60:f4:6f:e4:df:6c:
         ba:bc:92:76:2e:e5:98:7c:b7:3b:ae:bc:46:3e:f4:12:3d:a7:
         b9:79:f2:b5:83:f9:d7:ae:8b:6f:85:c6:bd:dd:8d:26:f8:a7:
         c1:9c:08:a5:64:75:57:71:e3:f4:18:5d:7e:72:ea:da:4d:a9:
         84:53:ee:cb:32:68:6e:09:65:9c:8f:cf:0c:53:d1:4f:cc:82:
         93:55:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----