Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File:                     P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier:          c5f9GsBoEJMKqGml66AgvJIpE2DqrruyKtdbPNMnAL4=
Subject key identifier:   8E:2E:56:C2:7C:80:06:54:E2:23:A8:5E:F1:4A:ED:3E:74:CE:F8:43
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer:       /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial:       01962E61D930611C8F88F7D65F35D6CEFA06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number:          127B
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: ayncKlPcYZWRLng3rcxQBaE0DR/y78h/0cigMf7BioU=)
                          2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d9:30:61:1c:8f:88:f7:d6:5f:35:d6:ce:fa:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=8e2e56c27c800654e223a85ef14aed3e74cef843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:a8:d3:00:61:78:22:1b:03:89:e1:e8:0a:
                    c8:5d:9f:37:9a:05:07:71:54:c7:d1:83:66:75:3c:
                    72:76:ad:95:2e:2c:5a:3b:40:8a:6c:4f:ad:70:9b:
                    ad:e7:fb:fc:d2:ac:e6:cc:bf:ca:b9:4b:52:be:04:
                    f8:1c:bf:04:6c:94:dd:11:e7:42:20:88:f5:d4:c4:
                    2e:36:e6:0e:89:0b:26:e0:fe:97:57:37:27:3e:96:
                    a9:92:ff:32:02:70:b8:e2:2b:18:76:ce:4e:49:d2:
                    71:3a:09:68:c3:c2:18:ae:c2:80:87:4a:8f:de:8b:
                    36:5f:4d:21:cf:75:78:3b:d6:6f:ae:c0:6d:dd:2a:
                    cb:68:4c:86:8e:2b:56:07:97:93:23:5d:f2:5a:61:
                    53:23:94:a6:31:fa:5c:c0:bb:78:31:69:db:eb:0d:
                    13:6e:c5:92:c5:c1:fb:1a:d4:7a:9b:a9:40:ac:df:
                    47:23:39:b1:a2:51:84:e4:e0:75:20:fb:de:be:fe:
                    cc:64:a6:49:a9:36:92:7e:05:fe:69:d9:c9:72:5c:
                    d7:1e:fe:d3:c7:da:be:89:ab:0d:63:0a:79:77:26:
                    5f:ce:e9:01:a5:54:a8:11:9b:dc:e0:08:0d:6b:e3:
                    af:2e:e1:67:72:24:bd:36:10:ee:9f:9b:fa:33:5f:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2E:56:C2:7C:80:06:54:E2:23:A8:5E:F1:4A:ED:3E:74:CE:F8:43
            X509v3 Authority Key Identifier:
                keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:98:f5:46:a7:c3:6a:c2:82:76:be:ef:92:ba:33:76:8d:
         32:fe:46:c6:b3:bb:c8:89:ba:1a:c0:a4:cd:80:d6:93:37:4d:
         ab:a6:90:52:e1:d4:54:8a:4c:9e:ef:08:64:19:11:21:8c:8d:
         ea:c3:76:bd:f3:7a:78:22:53:6a:8d:93:28:01:89:ec:80:08:
         ca:db:71:6d:87:eb:c3:76:ba:38:f2:c2:0e:9d:72:aa:36:85:
         75:ae:60:5e:64:42:e5:ee:5c:a5:ee:06:30:d2:0d:b5:fc:cd:
         ef:89:86:70:92:19:e3:3f:ee:14:28:16:a4:1f:fe:90:8f:da:
         b9:fd:55:e1:84:95:90:82:9f:16:87:b0:c5:b6:f9:c4:b1:2a:
         91:67:ed:52:72:60:0d:ac:6e:14:d2:a0:5a:97:25:2b:40:15:
         1c:de:ee:5b:2e:a3:c7:04:5d:da:0a:59:32:86:c1:49:4a:8c:
         73:8f:8c:85:29:dc:1a:f8:07:f2:31:f0:6c:76:e5:d2:e0:ac:
         d1:85:f7:b1:83:88:29:3b:39:e2:45:68:f3:18:1b:c3:80:ec:
         34:42:53:89:47:39:ce:a7:c3:e5:4f:76:f9:5f:f4:dd:61:22:
         9e:21:f5:6a:89:f1:4b:ce:05:3d:73:b3:d3:d5:1f:25:c1:87:
         6e:f7:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----