Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
File:                     w7iL5VE_Guckk1Ivpml-_zNpKuA.mft (raw, json)
Hash identifier:          GnPOVZAxFJDj53wUouwkdT/SwqguwwI+ZdjDtYwqYNs=
Subject key identifier:   C6:74:CF:EC:72:E3:77:2B:B7:35:B6:6D:85:B0:6D:45:FB:32:9C:3E
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Certificate issuer:       /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial:       01962F3DC24BB5D59B610B6B06B0B372B3A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
Manifest number:          078C
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: NrQlovA-ENvWm52W_XszKtgFuEM.roa (hash: CEb3/pIl0j5Q+iEy5jGadkT0Uot6DJeWgORkKHAYYJw=)
                          2: w7iL5VE_Guckk1Ivpml-_zNpKuA.crl (hash: bzdpVpzsx8dZqY4ml4Byy8562XZM7qw9BOA4C+OWovM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c2:4b:b5:d5:9b:61:0b:6b:06:b0:b3:72:b3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=c674cfec72e3772bb735b66d85b06d45fb329c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:42:9a:72:13:19:81:ce:2b:7f:f1:d0:3b:
                    78:09:55:80:0c:e0:3e:66:4d:21:29:75:9a:a0:1a:
                    8d:08:dc:2d:bd:ef:5e:3b:b2:ba:ad:b1:3e:70:ac:
                    b0:22:c4:8d:85:be:a6:66:2d:8f:cf:3b:ff:fe:f9:
                    d3:1d:75:3f:7d:73:56:08:30:86:00:ba:5e:ed:79:
                    56:16:7b:45:6d:ed:23:d0:45:fd:4a:e2:0e:f4:61:
                    8b:db:39:83:91:43:ee:74:06:50:d1:15:2a:0d:93:
                    fd:80:07:6a:79:9f:2c:97:17:6c:0d:a2:d6:ac:e8:
                    df:7d:b7:87:12:e4:ff:d1:6c:ba:8e:74:c3:31:d8:
                    6b:03:c2:a9:3c:10:a1:f6:a8:5e:1d:1e:c3:77:e4:
                    da:39:8e:e0:91:04:1a:8d:af:95:50:79:3e:13:b4:
                    9c:2f:16:88:fa:cf:c7:da:9a:92:bc:27:a3:06:ea:
                    e1:39:00:45:79:9b:1a:25:84:bd:61:77:b5:d0:f1:
                    1b:8d:44:75:7c:21:93:64:c0:b1:4f:8a:8f:04:bd:
                    24:70:f8:a3:b3:3f:dd:5e:e0:da:0a:36:cc:3d:05:
                    99:3a:8b:d4:db:41:54:95:37:60:5f:6e:a8:b3:b1:
                    cb:30:dc:78:1e:17:3e:11:49:1a:ae:2f:59:e1:4c:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:CF:EC:72:E3:77:2B:B7:35:B6:6D:85:B0:6D:45:FB:32:9C:3E
            X509v3 Authority Key Identifier:
                keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:64:b0:7e:c6:0b:40:fb:8f:d4:50:1c:fb:74:8c:2b:9e:6a:
         87:bf:e3:c2:e2:02:43:29:8a:0a:09:e6:8e:31:48:ce:fd:0b:
         71:d4:1b:7b:cc:3a:46:76:c5:03:a3:67:8d:f2:09:f1:f2:dd:
         1b:fc:d2:fc:d2:ea:f7:66:d8:ae:f0:ba:33:12:c0:16:d7:87:
         fc:84:0a:c9:38:63:c9:49:34:a4:e5:98:8d:9b:0f:d4:df:fe:
         c0:02:76:f9:ee:d6:9f:e0:8d:a4:0d:cd:cc:bc:7c:ad:72:c6:
         ea:9f:e8:47:47:2f:79:60:46:73:a2:da:92:99:f1:f9:82:ec:
         94:0a:60:a8:89:9e:a6:4b:36:40:bf:44:28:23:1d:b2:a9:ad:
         8c:91:56:81:c5:d1:27:1e:3f:3c:0e:29:1f:94:05:95:9f:6f:
         cd:52:05:fb:80:51:f0:99:50:a1:5d:89:e2:dd:28:17:28:e6:
         eb:bf:62:97:07:74:e5:81:11:36:cf:07:1a:a5:98:af:28:36:
         07:98:68:33:5d:7e:d4:f5:90:e9:83:3f:76:bb:98:6a:16:90:
         3d:f6:35:49:be:21:d5:a8:de:ca:f1:84:5d:1c:eb:2e:0f:c6:
         2d:7f:34:ab:e3:60:cc:67:b3:e3:21:9d:11:ad:7d:86:06:46:
         3b:b9:7b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----