Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File:                     rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier:          L2cN0+DXIz/BKdCspvEGym2R0hL/66z4NthwSV8bsCo=
Subject key identifier:   3D:79:A0:F5:E5:F3:4E:5C:A3:50:6C:D2:04:DF:1C:3B:98:89:67:B7
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer:       /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial:       01962E99526492B3F060602B5336BC10A598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number:          0CE5
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: KVHIamZJVn2A53v0da8_IQ5hmAc.roa (hash: MHiTghXPbp0Yn7XA7tDf2bHlQcgsEoD122bH+wIZHLg=)
                          2: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: nPMwunX/ciNQ3i8JWC6llS9TepeR9Ps0PclDhqxykp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:52:64:92:b3:f0:60:60:2b:53:36:bc:10:a5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=3d79a0f5e5f34e5ca3506cd204df1c3b988967b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:29:20:fe:75:db:ea:d1:2b:3b:79:e7:9b:
                    a9:42:dd:b4:80:a1:97:cf:3f:eb:b8:bb:14:ab:d2:
                    82:b7:39:a6:29:70:ad:60:44:31:f2:d9:39:8e:e2:
                    e4:ab:bb:ae:2f:ed:7b:4b:50:a8:e4:d9:1a:5d:9f:
                    e2:91:75:49:7c:ea:64:84:1b:8f:ec:d4:18:69:02:
                    67:82:b8:7e:25:b3:09:26:ec:3d:7d:41:14:dc:ab:
                    69:f6:53:4e:36:11:dc:10:ac:e2:87:47:69:9d:5e:
                    5b:c4:bc:b1:7b:49:d2:c2:01:27:1c:a0:d7:b8:0b:
                    dc:87:d0:05:48:cc:6f:13:96:e4:e7:d0:87:83:02:
                    4c:c1:5a:e7:bb:2e:8a:72:7a:e0:c3:c5:d4:b4:57:
                    33:0a:ad:1a:df:e8:28:96:36:af:80:df:9f:12:ba:
                    fc:80:2a:70:e9:39:bb:3b:30:d7:50:2d:82:78:b0:
                    53:64:45:1f:a4:08:7d:e3:19:df:aa:54:d8:91:1a:
                    d5:2c:35:5b:77:cd:ba:42:bd:4e:83:29:6e:d6:6b:
                    b9:ac:20:65:e8:0f:b9:f3:a3:a7:9f:a5:b4:63:20:
                    1f:bd:5b:44:9a:6b:a2:ea:7d:1b:b2:5a:8f:c7:0b:
                    a2:78:66:ef:20:f8:b8:17:6f:fe:da:38:1a:ea:e5:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:79:A0:F5:E5:F3:4E:5C:A3:50:6C:D2:04:DF:1C:3B:98:89:67:B7
            X509v3 Authority Key Identifier:
                keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:d9:22:9d:5e:05:7c:fd:3f:fb:b4:38:c6:9c:b4:54:2b:
         10:44:7e:13:00:77:3c:72:66:d6:ff:12:b5:5a:05:30:b4:77:
         e8:f3:9f:29:73:a4:29:b6:7b:33:f6:56:64:aa:70:55:6a:c4:
         e2:5e:78:05:5f:d3:79:03:2b:a7:1f:1b:86:fd:df:bf:1d:93:
         51:ec:e1:43:15:06:c4:63:ee:c0:af:6b:84:fb:bb:f1:67:e6:
         9f:b4:27:31:0e:57:c9:74:a8:74:71:47:2b:eb:56:85:e0:f6:
         55:54:65:27:8f:30:92:b3:72:9e:d2:d3:30:d0:2f:83:f3:c3:
         7c:26:1d:ad:13:ad:8d:35:8f:32:dc:ca:de:8c:a8:38:b3:82:
         04:c2:0d:8a:67:0c:6c:d7:dd:60:a4:68:db:ca:2b:fe:a9:ff:
         89:05:c7:1d:34:47:f0:89:fa:c4:01:7a:b0:9d:67:53:b1:6b:
         a9:37:1c:02:de:c7:1b:be:7d:3d:fd:c1:8c:e5:c8:3d:43:3f:
         bc:24:66:33:ee:13:b7:6e:81:2d:27:ec:25:83:6e:6b:a0:6e:
         30:d4:df:24:31:98:cc:84:a4:46:9b:cc:5c:90:f8:8a:d6:ee:
         05:9a:89:ea:c9:e6:eb:0a:11:7f:1a:ca:4e:33:13:e7:e4:77:
         49:fe:01:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----