Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File:                     pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier:          3spsF98NRcmwIKO/fK8B+Yb8aUhoynunAE0x9xggB6U=
Subject key identifier:   56:1B:3D:25:FD:13:17:9E:9F:17:D2:DC:11:E0:B1:A4:01:96:9D:DB
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer:       /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial:       01962DF3F3DB0F6B6DFF6C9C9DFD72078D4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number:          0712
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: PbquhIW9zV3GTwFfHVfvcLv6xJw.roa (hash: aemUH4PS/FSjfL3HdRU+EJA2H9Gd9sGg3EwGKTMzK9w=)
                          2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=)
                          3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: zCyIUt/KURDYd3WFOMnO9bse4zbztCy1QtipQmmD3CU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f3:db:0f:6b:6d:ff:6c:9c:9d:fd:72:07:8d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=561b3d25fd13179e9f17d2dc11e0b1a401969ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:a1:66:e3:2a:85:43:02:f6:4d:40:e6:56:
                    27:09:42:a2:1a:00:bc:f0:a5:1a:30:26:94:3b:aa:
                    ba:65:e3:4b:6c:44:2a:5c:40:05:f5:d3:4f:01:f3:
                    cb:ec:f6:e5:ee:e7:77:ca:1b:2f:f5:d9:1d:e5:83:
                    c4:29:66:4a:0e:0d:6b:b0:16:b2:be:06:8b:7f:a0:
                    19:d6:fa:3b:7e:d5:53:f3:f4:66:4b:28:a2:13:71:
                    d1:a0:54:22:17:2b:c3:11:02:11:74:66:da:c6:f7:
                    97:93:82:99:00:2a:92:20:74:2c:40:f9:85:fd:7c:
                    67:82:25:c9:19:3c:70:f6:91:64:71:bc:d6:39:44:
                    a8:ee:5c:49:6d:cd:25:2b:64:42:da:08:35:4b:99:
                    37:39:e6:c1:7e:35:43:df:aa:e5:c0:26:54:13:71:
                    6b:a0:fa:6c:bb:2a:f6:cb:11:8d:ef:21:37:9d:a9:
                    15:41:6b:d8:f0:fb:15:25:62:e7:d1:ac:fc:94:c3:
                    57:55:9c:ed:cd:dd:05:36:f6:e5:27:63:19:8b:41:
                    a5:10:4a:2f:9a:72:46:25:a8:9f:e3:d5:02:6d:a7:
                    47:3b:de:30:1f:bc:a3:43:65:2d:4c:e0:90:cd:c3:
                    30:49:19:16:89:64:1a:33:16:1d:b1:6b:32:55:c7:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1B:3D:25:FD:13:17:9E:9F:17:D2:DC:11:E0:B1:A4:01:96:9D:DB
            X509v3 Authority Key Identifier:
                keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c8:f5:76:61:c2:03:00:83:c6:a5:1b:0a:2d:ab:96:5a:43:
         ea:78:16:61:56:bd:35:c8:07:af:c1:b9:b8:61:94:ed:ac:3d:
         5b:7f:7c:c8:d0:2d:9c:b9:4f:0e:db:ae:a0:60:ec:a3:e6:01:
         ea:cb:7c:b6:c2:95:2d:2c:b9:6c:42:58:b5:7a:f8:0a:4a:dc:
         28:aa:5c:2c:3f:87:af:13:12:e3:10:3e:4b:cb:90:ad:71:05:
         ad:69:e1:cb:83:96:6b:08:81:77:f0:13:2a:33:90:35:2c:05:
         59:5d:73:b9:40:44:ca:c2:84:74:0b:08:8e:a9:a5:89:97:78:
         7a:d7:71:b2:7f:7c:76:e0:6d:0c:2f:ba:a1:7f:71:c2:a3:80:
         3b:33:b2:fc:8e:3d:ef:c1:7a:74:31:d2:19:f2:45:14:69:80:
         31:94:b6:63:a2:69:68:f2:ae:f7:80:c9:45:f6:8e:21:e2:0e:
         fc:92:17:23:5d:11:da:7a:4a:ef:0e:7f:f1:e1:22:47:47:4f:
         0d:79:30:f3:3c:94:75:38:c7:e9:0b:98:9b:bd:e4:d3:e3:7f:
         3e:7d:18:05:90:a0:97:38:ef:6a:a0:c5:7a:8c:07:c9:2c:fe:
         69:52:03:71:98:cd:a7:b3:4f:c4:06:4e:f5:fb:65:16:7f:7e:
         44:50:20:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----