Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
File:                     pW_3HkuOwkscYysvoiSHOcxXIgU.mft (raw, json)
Hash identifier:          pJFlXEgw0gjmIe8vyIn5+uF3XwEgbhrhMBf3rtzz1YY=
Subject key identifier:   74:B7:20:D9:95:10:80:0C:B3:F3:18:73:2F:6E:AE:F2:29:1C:9C:97
Authority key identifier: A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
Certificate issuer:       /CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Certificate serial:       01962F06AEDCE207DF1665D89C92E176EE35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: iKx7DVcDIp4-3Ht_VZ0qOWxo2fU.roa (hash: zpfuponymK+r2Tkz+w9BOZiVOOpvDfzySSg7CkzrHaM=)
                          2: pW_3HkuOwkscYysvoiSHOcxXIgU.crl (hash: zfmz3e5TKx464s06Odc/Mr2IE6EXOPrwo3pg9K/+/N0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ae:dc:e2:07:df:16:65:d8:9c:92:e1:76:ee:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=74b720d99510800cb3f318732f6eaef2291c9c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:ce:0e:60:3f:31:f2:97:d4:41:53:7d:96:
                    05:23:5f:0c:18:1f:84:f2:04:95:cf:cf:4b:b1:38:
                    00:d5:0b:4a:6f:cc:41:5a:6d:3e:e9:91:e0:70:62:
                    2a:d1:41:df:f6:c3:cb:b2:e2:b5:6b:17:3e:c6:f2:
                    ad:e7:a6:89:31:86:9d:c2:52:6c:96:4f:76:f1:0b:
                    dd:e7:9d:fc:0e:81:f4:72:33:33:7b:57:90:e6:31:
                    35:40:10:92:20:b9:37:3a:d8:63:bf:eb:65:b7:6d:
                    d9:3e:3f:72:2f:cc:ff:3f:2e:cb:20:38:2e:82:88:
                    93:24:73:a5:59:8c:34:11:09:04:d7:0f:cb:c9:f2:
                    3f:da:e6:0c:99:3d:7f:8e:2b:34:6b:14:ec:12:71:
                    63:05:4f:a0:d8:fc:ed:75:e1:48:14:ff:28:7a:07:
                    a1:0d:aa:64:bb:d1:9a:5f:5a:61:0d:96:58:78:a8:
                    42:08:96:bb:35:2e:5a:87:e6:a7:0c:cc:b2:78:15:
                    35:b1:9f:88:d7:6d:3a:6e:ce:e2:31:bc:34:bd:52:
                    96:9c:c7:7c:8c:27:35:e5:c9:33:2f:62:e2:44:e3:
                    b7:b8:bf:49:23:2a:e0:44:28:7a:13:2c:a2:f8:d8:
                    a8:79:db:b1:72:73:51:ff:88:a2:ff:ea:09:c1:5f:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B7:20:D9:95:10:80:0C:B3:F3:18:73:2F:6E:AE:F2:29:1C:9C:97
            X509v3 Authority Key Identifier:
                keyid:A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b0:7d:13:1d:53:c2:ab:a6:6c:cf:f3:fe:2d:fd:e7:11:0b:
         54:15:b6:c9:03:d3:24:3f:76:2c:9f:07:5c:6a:0c:f5:5b:39:
         c9:60:fc:65:8d:17:ef:98:87:8c:39:57:f7:d8:ba:36:5e:16:
         b0:c3:ef:63:a7:d2:63:50:6e:72:3c:38:8c:65:52:48:52:2e:
         8b:96:e3:4d:20:35:d7:9d:a6:7f:d3:e6:3b:c9:fd:3d:ec:3f:
         29:f9:d9:8f:61:a0:ad:04:39:9c:5c:95:cd:90:87:ce:c5:ef:
         2c:f6:3f:09:da:37:3f:55:27:29:27:17:f5:02:29:15:0b:f9:
         97:9f:38:e4:31:a8:0e:bd:4d:1e:91:8d:1d:30:4c:c8:c6:b7:
         e6:d0:28:92:53:73:6c:4b:b0:0c:02:52:8f:c0:9a:c2:d5:94:
         f6:d3:af:45:0a:6b:bc:d5:3c:0a:e0:27:9b:07:71:75:95:0f:
         89:66:62:61:f1:f4:d8:3e:d4:81:19:75:d5:4d:6d:54:91:82:
         11:c6:37:22:db:32:86:6b:e9:ca:12:2f:ad:ec:b4:25:aa:87:
         5b:ff:22:90:76:c2:6b:47:69:dd:64:a5:3e:a2:68:35:a2:31:
         6b:82:95:db:a5:f1:d8:f4:1f:c2:58:4f:3f:97:7e:bb:4b:b4:
         ab:40:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----