Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File:                     hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier:          Q+dTuvIRUhNnHOaP62kPN10PjPIL5j5zwbSYvRvsBZY=
Subject key identifier:   CF:14:AF:7D:24:49:A1:07:EB:F5:49:B4:28:E5:07:A5:0B:5D:E7:8C
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer:       /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial:       01962F744D9DA681C65204B7BA3D59D0EA1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number:          031E
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: 9BD+t6vNHRNT3eMni1pY2NM9aH1ytKOVSyrY3Cbpvy8=)
                          2: j3mlArIrCrvoTStpcqF9EPTMJII.roa (hash: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4d:9d:a6:81:c6:52:04:b7:ba:3d:59:d0:ea:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=cf14af7d2449a107ebf549b428e507a50b5de78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bf:fc:fc:c8:55:ef:ae:cd:bf:57:b9:a5:22:
                    2e:43:10:a9:a6:41:f1:a5:2b:b5:d1:42:62:36:8b:
                    22:73:e1:ac:6a:74:c7:0d:9d:34:6d:7e:67:34:4a:
                    24:29:67:64:82:89:ba:4a:52:d8:ce:3f:e8:05:d8:
                    ce:9d:4f:b7:03:14:3d:7d:ee:01:45:55:92:ea:14:
                    0e:e9:94:9b:41:cb:58:c1:01:3d:f9:99:85:26:0a:
                    27:58:c7:94:a5:c6:c9:87:08:56:00:3c:30:f0:a8:
                    42:2b:98:4d:38:a4:8e:9e:ef:4e:c9:87:bc:25:6a:
                    4f:b7:78:8b:68:9b:79:16:5c:b1:46:6e:25:d9:79:
                    43:d9:59:b9:97:9d:6d:01:9f:2a:e3:e1:1a:d4:62:
                    cb:90:96:4c:0f:0e:65:e4:aa:00:f5:6e:31:92:af:
                    19:e1:07:8d:cb:24:32:fd:3c:55:d1:5d:71:b1:10:
                    fe:82:56:b4:db:4a:17:1f:47:b8:fb:6c:d3:47:fe:
                    42:3d:3b:63:72:3c:de:4b:ef:da:66:c7:be:f2:91:
                    8d:f7:02:64:31:70:1d:29:fb:15:39:34:07:66:50:
                    20:89:fc:91:3a:38:b1:1c:b6:c3:aa:17:0d:69:c1:
                    33:c9:5f:7b:04:13:0d:fe:c8:69:e4:6e:50:76:5b:
                    1b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:14:AF:7D:24:49:A1:07:EB:F5:49:B4:28:E5:07:A5:0B:5D:E7:8C
            X509v3 Authority Key Identifier:
                keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d5:a8:8c:b6:01:58:e5:c0:e5:3c:67:ea:3b:53:45:b4:da:
         07:7f:64:3f:28:52:81:52:97:b5:24:bc:3c:fa:0e:64:cf:d7:
         63:e4:d8:c4:b3:5f:2c:3b:00:f9:ce:15:da:b2:e6:ac:0a:af:
         e2:76:76:a1:1c:ac:39:7b:a8:9b:93:9f:8a:24:0b:1f:8a:6d:
         8c:57:3c:5e:c0:d5:1a:2e:fe:f5:1a:d5:0d:21:eb:69:e7:6d:
         69:dd:e0:e6:08:2a:c7:5b:bd:c7:81:e2:70:de:9c:32:dc:c6:
         4a:1d:37:be:06:2c:f8:bb:ab:e0:35:22:a0:49:be:65:72:79:
         d6:64:99:90:bd:82:09:4f:fd:fd:8a:04:6d:91:50:f8:26:87:
         e4:24:d8:bd:6e:6c:09:95:d1:53:ec:db:ef:d7:69:e0:20:88:
         46:e9:ef:1c:13:d6:ec:df:2b:57:7c:62:4b:f9:03:52:f4:0b:
         1e:68:2d:8a:42:8e:d6:ba:04:e7:69:e9:a4:ac:d1:ea:57:cc:
         95:81:97:f9:17:72:02:6b:30:1b:17:7c:13:4c:b5:89:d6:f6:
         df:75:c8:4d:68:62:68:46:f9:b7:c2:ba:3e:56:c6:66:cd:17:
         23:38:2c:97:7b:a1:24:d6:91:80:bb:ff:a0:6b:be:8d:9c:60:
         67:11:6f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----