Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File:                     w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier:          lre3Z2Hnnql17kltCSgFc/Z9awHQIOqsrWteIYzlAqs=
Subject key identifier:   7F:4B:9C:B1:28:0C:A6:2C:FF:83:00:81:47:2B:FF:4C:E5:C9:AC:0B
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer:       /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial:       01962E6175972E35AE2C019E3AC684DB5B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=)
                          2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: QxE+HPn+rwLBws2BqGp//OsP0xN3bCZ1MGG9fNGcMj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:75:97:2e:35:ae:2c:01:9e:3a:c6:84:db:5b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=7f4b9cb1280ca62cff830081472bff4ce5c9ac0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:b0:b5:6c:82:eb:65:8c:49:93:19:17:bf:
                    6f:39:9f:3b:34:d5:9c:07:09:2c:12:d2:18:fd:a4:
                    55:e3:48:8a:89:d9:7a:d1:05:93:56:d0:63:4b:38:
                    d0:23:54:d6:19:12:9b:24:9c:b8:40:53:04:86:b2:
                    25:3c:16:70:cc:c7:0c:08:4a:53:ec:18:d3:17:72:
                    5e:85:cd:25:5a:d0:dd:f9:46:b8:2d:a7:da:8b:3d:
                    85:6d:51:c0:57:48:a9:a4:11:6e:71:7d:9a:84:ec:
                    47:c3:a0:b1:3d:7c:e3:64:26:6f:29:4c:21:0b:e7:
                    75:86:49:f8:82:c1:cf:8a:00:22:3f:35:6f:9a:c8:
                    d2:2a:01:7d:62:2a:78:dd:fc:04:03:2c:1e:6e:80:
                    2a:a6:46:4a:b2:cd:62:40:04:90:23:fa:80:19:21:
                    af:36:f2:01:24:dd:68:91:af:35:b0:01:05:61:20:
                    10:25:63:ed:e8:48:23:6d:13:b4:b7:43:be:26:34:
                    b7:7d:c5:1c:d3:4e:7e:34:aa:cc:9a:e3:f3:10:ec:
                    0b:54:9c:4c:05:5d:0d:f8:bb:5a:4f:ef:11:ac:5f:
                    43:2a:2f:c3:31:cf:cd:26:e6:de:8a:81:ed:68:ad:
                    29:06:12:1e:d0:78:a7:7f:63:bc:7d:f4:6b:74:d2:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4B:9C:B1:28:0C:A6:2C:FF:83:00:81:47:2B:FF:4C:E5:C9:AC:0B
            X509v3 Authority Key Identifier:
                keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:1e:e7:f7:70:bb:60:e1:cb:1c:fd:62:44:68:17:39:c3:6a:
         43:60:43:8b:1d:d7:79:e7:9d:9a:67:b3:c5:bd:95:33:a8:7c:
         ae:80:75:62:ff:b3:19:78:c3:c4:a0:4c:29:52:5c:b4:d2:fa:
         02:6b:c2:00:61:b3:e6:cd:b5:b3:88:93:69:13:67:1c:dc:82:
         44:c6:cc:70:e4:0d:56:b4:9d:13:e7:b6:bc:7a:a4:be:a7:63:
         e2:48:ab:6e:6f:3f:e0:88:c6:19:b7:51:3d:2c:c8:04:62:be:
         c2:81:4b:c8:19:18:72:b6:53:a0:03:40:5b:f8:b1:51:7b:0d:
         8f:d4:54:2b:84:ff:4a:6c:84:4c:db:0e:ef:a9:57:bc:ff:67:
         71:2c:6d:c6:e6:c3:1d:dd:7a:c9:71:30:51:79:db:16:68:9f:
         13:cb:e2:64:e3:e1:e7:c8:b7:ce:8e:93:65:05:2a:59:35:88:
         52:b1:9e:eb:59:76:55:2e:24:3b:8c:6d:6c:f1:8b:1f:0a:f4:
         78:14:a7:8d:e2:14:40:cf:e4:5b:f1:dc:e3:6a:fa:44:a0:56:
         f2:50:d8:00:9f:fd:fe:d5:02:7c:43:f1:63:04:da:a4:8b:16:
         70:a0:51:f5:33:4a:05:92:45:05:9e:20:c5:b7:f2:f6:af:90:
         3e:d6:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----