Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File:                     cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier:          e1czHyk6sIwdzJvxvLivXsDD7aP8pa12fsiKGc/5lRA=
Subject key identifier:   D7:49:21:9A:A0:1A:2B:E2:06:D2:A9:DB:EF:9F:8A:E0:6F:35:DC:34
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer:       /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial:       01962DF3CC758E29C713C1C87B85CEE8EDEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number:          04CE
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=)
                          2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: ydQTE2jGcN8pL49cX9Prh0F6UApgwEThyRUIQK51wXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cc:75:8e:29:c7:13:c1:c8:7b:85:ce:e8:ed:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=d749219aa01a2be206d2a9dbef9f8ae06f35dc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:8b:26:bd:22:25:06:0e:c1:03:f1:ff:40:
                    a4:29:20:a6:82:02:cc:a1:a2:51:f0:8f:98:d1:07:
                    f1:03:52:a4:c2:39:fc:f5:04:aa:e4:33:c9:34:76:
                    8f:3a:7f:df:65:c8:c5:83:a3:8c:d9:5c:3a:fd:6a:
                    b0:6d:4e:26:b2:73:7f:09:1b:57:cf:7b:80:24:42:
                    0d:1d:8e:68:53:0d:d3:9c:b7:db:3b:8e:68:c5:ac:
                    68:82:a9:f5:b5:20:a6:03:11:f3:9b:31:fe:ab:2a:
                    99:70:5e:af:f1:08:38:80:ea:33:52:89:d3:ee:6e:
                    4c:53:3a:3c:fa:63:f2:84:22:11:bd:9f:4f:c3:cb:
                    db:67:09:c1:6c:db:84:82:c3:82:75:53:10:97:a4:
                    08:4d:63:c5:71:0d:08:d6:4e:73:bc:d4:12:33:b1:
                    f2:8e:40:2b:bd:35:2b:d8:b1:5c:69:ae:7d:a6:28:
                    2e:2b:a7:34:c4:12:21:da:8e:32:d4:b8:be:85:d4:
                    57:e3:87:38:f2:fa:7c:b8:a2:71:25:32:30:f9:1b:
                    48:a5:14:0e:3a:71:3d:b2:2f:d3:6e:fd:e0:f2:25:
                    8f:f8:37:57:ff:04:28:3c:29:76:db:85:ec:ae:2d:
                    f1:ab:38:e0:b9:16:81:b1:1f:c1:14:3d:18:9e:63:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:49:21:9A:A0:1A:2B:E2:06:D2:A9:DB:EF:9F:8A:E0:6F:35:DC:34
            X509v3 Authority Key Identifier:
                keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:43:ed:fc:6a:e5:e9:a7:1f:90:92:57:a8:67:d5:c9:c1:b7:
         06:c1:ce:39:9e:6d:d8:69:20:9e:ab:1f:f9:4a:d4:38:83:0d:
         12:b4:68:c7:44:36:49:b4:8d:5e:ea:63:eb:2b:2e:5d:c7:5a:
         80:7c:3c:9a:7b:96:96:e2:67:3b:08:c5:e1:22:23:03:f0:d7:
         1b:50:36:32:6a:c4:80:aa:b7:c2:e9:56:9d:cd:e2:e4:f4:b0:
         20:0d:24:1a:f6:dc:9d:82:a6:e0:13:2e:64:6c:9e:30:3e:90:
         57:77:98:42:24:b5:01:c8:e4:49:09:47:bb:ce:ec:9d:d3:84:
         cb:60:fb:a1:52:a1:e5:73:2c:68:19:ea:91:82:46:50:bc:1d:
         c8:0e:7d:19:5b:15:3e:8d:58:a6:e3:70:9d:78:cc:3c:e4:89:
         e1:d7:44:4a:56:4c:4d:e7:b7:f2:4e:d3:2d:7d:69:ca:fa:b6:
         83:d1:a7:a6:4c:94:63:aa:4d:9b:9c:2b:66:35:63:eb:0c:04:
         36:c7:33:44:02:2a:13:b1:14:3b:f2:52:39:96:7f:a0:d1:89:
         9b:60:78:ce:ab:a5:f8:a6:40:08:9d:a5:56:1e:98:f3:a9:79:
         e0:16:2d:00:7b:27:27:9f:38:06:94:0c:17:59:6a:5e:fa:b0:
         e0:3a:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----