Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File:                     RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier:          ekKbIcVAiaPHZh1HYSuRLAqNLiz5OX+tVfQsJ7RiweU=
Subject key identifier:   71:F4:C9:C7:FA:11:18:C4:A7:0E:C1:CF:6C:6A:D3:69:C1:D4:D3:B5
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer:       /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial:       01962F743AF2584D65E86F773847B97EF693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number:          034F
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: BMhhovXMuBpKJMmG-rBz-nuJzd4.roa (hash: sNEztFGkvH7v3y29OhQmoouHMsRsRH9HNC026mey6ck=)
                          2: MK26JBdAOQHbbLIoXza8gOwP2L0.roa (hash: bfaAHwdU8g3+OMyQR1jrgL3b4O52QKIOBn86eAMWqtg=)
                          3: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: 8+0K3WrM4anIX4NnSkRd57DdDOqiZw1RFjrIn1Z5bXY=)
                          4: XhbfPxl0mTvKXWs6aYEV15Sf1Zw.roa (hash: Y9+T7Mn/gKGvDXGyHmLcv1HeCAXW8+WFBTkhydKojcU=)
                          5: ktaokuPl5jOXxjmENV6Nzr3jvRE.roa (hash: QCRewanHdBrJ4jBO5+8cVb/CCKaBft0aBHc179F+ba4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3a:f2:58:4d:65:e8:6f:77:38:47:b9:7e:f6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=71f4c9c7fa1118c4a70ec1cf6c6ad369c1d4d3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ed:74:05:99:ca:98:ae:89:02:18:97:13:ac:
                    7d:f3:e4:07:bf:3a:38:06:fa:db:53:9a:36:c1:ad:
                    b0:94:2d:68:e1:13:1a:cb:0e:b5:83:7a:d3:6d:35:
                    e1:e9:2a:fd:4d:66:48:05:91:e0:9d:ac:17:ef:01:
                    70:d9:ad:a2:4f:72:06:46:22:4e:6d:fe:12:ed:43:
                    75:ca:9d:4a:be:50:5b:87:32:00:bb:83:c7:00:92:
                    8b:a0:25:20:4d:ad:59:dd:9b:80:ae:ce:d3:f7:67:
                    fd:58:59:fc:8e:39:0f:d4:e2:f9:72:8a:33:f9:e0:
                    74:d1:e4:5c:84:2b:c5:c5:51:b3:9c:fa:68:cd:cf:
                    0e:da:f7:69:5f:e3:57:9b:5b:ff:5d:5e:12:02:bd:
                    e1:b1:0a:e4:55:2d:b8:34:24:7f:e3:62:73:33:3a:
                    47:13:06:d6:1f:a7:44:c1:89:26:f4:0b:cd:3a:41:
                    6a:12:ee:3d:d5:47:27:f6:af:43:69:e8:d8:e7:eb:
                    cb:f6:54:e5:a9:de:be:d0:34:73:7e:db:db:43:f5:
                    0e:92:05:d1:43:96:b8:26:e8:78:da:66:c4:8c:20:
                    87:23:5a:23:0a:5a:5b:18:74:4f:dc:50:c8:2f:2d:
                    b8:d2:ee:6c:84:6a:7f:f4:21:73:df:0b:4b:ff:24:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F4:C9:C7:FA:11:18:C4:A7:0E:C1:CF:6C:6A:D3:69:C1:D4:D3:B5
            X509v3 Authority Key Identifier:
                keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:37:2f:70:9c:e5:7e:06:65:43:6a:46:a2:05:16:7c:25:d4:
         0e:57:16:bd:93:83:4a:2f:24:17:8c:23:67:fa:f9:7d:5f:55:
         f9:a2:44:98:76:ae:93:70:f8:0d:52:df:dd:21:e3:a6:02:d5:
         ff:66:1c:bb:76:e6:84:a5:3a:35:e8:48:86:9c:78:22:b3:5e:
         8e:29:59:52:d6:7b:fe:20:69:51:eb:25:c4:ed:dc:a1:c4:69:
         bf:b9:2c:e4:c1:56:31:d4:0d:41:8d:73:89:73:8b:d5:77:7e:
         ad:27:43:42:bf:40:cc:20:ec:92:66:f4:58:cf:be:7b:63:0d:
         c5:78:f2:d0:a5:e8:67:00:e2:6a:a8:60:c6:d4:cb:84:ea:91:
         67:3e:43:03:5b:f4:c3:bb:ba:b7:5d:fe:0a:52:2c:af:ac:ee:
         83:73:56:f6:ee:74:71:4f:b9:e8:9d:5c:08:6b:27:d3:35:e1:
         b7:41:4a:0e:42:93:82:f6:de:e3:f7:ab:34:0b:82:02:da:76:
         da:2e:35:b4:81:d1:e2:ee:e4:98:7f:6d:d0:48:22:c1:60:57:
         a7:ed:58:b2:cd:89:59:82:a6:a3:4d:eb:5c:2e:0c:97:95:57:
         8e:3a:4d:86:71:97:51:7b:5f:32:8b:ac:6b:d6:94:48:fb:28:
         e6:a3:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----