Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File:                     rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier:          DZuXkm0sH19ZO7wHbH45ZemaNcglpwPeZk6BPDZMU9o=
Subject key identifier:   FC:2D:26:84:CE:C3:E7:93:F8:B4:F5:1D:D5:E9:A0:56:A0:E6:05:62
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer:       /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial:       01962F068D16D460756C279A156809ECAC9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number:          1295
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
                          2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
                          3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: tFLyNK6HF1TqGguEMfuKBkhlqK6jaxqzdyQZvfQ8hf0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8d:16:d4:60:75:6c:27:9a:15:68:09:ec:ac:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=fc2d2684cec3e793f8b4f51dd5e9a056a0e60562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:fc:c7:91:cd:8c:48:8a:a5:aa:3d:d3:17:
                    92:cd:c0:bd:60:cf:32:04:ad:69:69:bf:7b:f4:8e:
                    2b:69:6a:41:92:29:d5:3d:55:de:84:bb:c2:b6:16:
                    64:88:b9:4c:fc:16:5b:cf:02:48:ec:0f:b9:67:e0:
                    5e:70:cc:d1:ba:67:35:12:e2:99:6b:3e:cf:05:a7:
                    c2:63:e8:8f:ad:e2:9d:4f:51:84:5c:53:b2:a0:1e:
                    13:94:70:30:8b:c6:5c:2e:d1:97:1e:95:2b:54:f5:
                    f2:21:35:69:cc:24:8a:91:3c:45:75:ad:14:4d:25:
                    79:f2:ef:ed:a7:82:af:b2:5d:4c:7e:65:c8:a1:f9:
                    f5:9c:4b:1f:2e:79:73:83:33:c0:11:33:ab:f2:ea:
                    41:1f:c8:57:ee:0f:86:f1:54:0c:23:4d:85:46:9e:
                    6c:93:2b:14:6f:c4:51:ec:0e:be:3c:94:c3:5f:3a:
                    ac:d3:71:ac:27:d7:39:5f:8c:f4:23:2c:be:30:53:
                    06:ca:ea:69:8a:30:53:c0:81:d5:59:60:a4:53:26:
                    15:30:56:b7:35:b7:63:f9:75:46:59:cf:7d:0a:a7:
                    d0:29:d7:33:21:4b:f5:c1:eb:1c:5c:f0:81:e9:8d:
                    b8:5f:41:0e:62:82:20:59:42:02:8c:ed:ca:82:ae:
                    d1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2D:26:84:CE:C3:E7:93:F8:B4:F5:1D:D5:E9:A0:56:A0:E6:05:62
            X509v3 Authority Key Identifier:
                keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:f6:a9:e4:77:75:8f:6e:ab:19:be:af:49:03:bd:3f:42:
         c6:87:54:93:6c:73:63:ae:10:80:61:fa:c3:16:18:80:4b:b6:
         13:36:92:b5:99:4e:12:20:06:d0:5a:1d:75:76:d0:75:d2:5f:
         9d:07:a6:43:43:7c:48:3c:59:07:6e:bf:72:3c:b9:97:1f:7e:
         51:ae:fb:66:b7:85:2a:83:65:95:b4:8e:8d:27:69:5b:ba:2b:
         a9:20:0b:99:4c:25:29:12:3d:be:fe:06:96:45:b9:c3:3a:1c:
         46:a3:51:32:a8:2a:c7:12:e8:dd:cc:33:47:45:0a:18:3a:79:
         83:b8:f3:2e:54:a0:df:b1:0a:1b:4c:ca:18:5e:f4:7b:ae:6d:
         71:ee:d3:b9:99:7a:f0:c2:76:ef:cc:8d:e7:c4:dc:16:8f:bf:
         75:89:04:d2:97:74:99:6a:ac:f0:72:d1:ed:51:b9:1c:d9:de:
         c7:a1:ce:b3:a4:6d:a5:5c:9e:dd:bb:36:ae:f3:33:49:c9:bf:
         65:de:05:9a:e4:ff:38:c8:db:36:cb:aa:70:0c:11:83:eb:3e:
         41:0c:a3:d1:18:58:db:bd:7e:20:e3:65:7f:3c:4f:5f:30:66:
         2e:21:58:ba:94:4d:79:52:2b:e2:78:d4:db:7a:df:2e:60:ba:
         2f:5c:e0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----