Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
File:                     w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json)
Hash identifier:          /KPAJGTptdb9xHYIQSV6nOXxK63JOiTN0o+u+47hYmk=
Subject key identifier:   40:83:13:2B:9D:5D:36:F4:82:4E:86:8C:69:94:D6:C8:61:B8:9F:25
Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61
Certificate issuer:       /CN=c3cce1655f3f71e4effea4de73a1aec822829d61
Certificate serial:       01962F06413994AB7FB3B89CA7F2F5CA206B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
Manifest number:          92
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: qel6ufOI0K0P6RzF02UdBRZmZOs.roa (hash: 0w6Fd2wQlTNYoLFBh1jxH0G1R4nWQ+6pOgjLnjgYDIc=)
                          2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: CGZtw/bJdESnu/t4Ms4oWcutQTm1SktiWPb/BXleUrM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:41:39:94:ab:7f:b3:b8:9c:a7:f2:f5:ca:20:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=4083132b9d5d36f4824e868c6994d6c861b89f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:a1:f8:8a:d1:07:d2:28:b2:5b:32:b9:49:
                    30:c1:72:4d:e5:3c:c5:08:9d:ac:79:0f:eb:44:69:
                    01:56:d7:21:61:cd:40:64:51:b4:7c:51:a5:c1:ac:
                    a8:f3:4a:11:4b:af:29:b9:87:e7:9c:e1:5e:f6:34:
                    6d:0a:a4:d1:b8:54:33:83:fd:d7:d4:8b:28:a7:e1:
                    10:47:a6:d5:29:36:ef:53:ce:9a:9b:00:3f:12:9b:
                    69:c6:06:2c:14:4b:1d:9b:97:65:a6:b0:f1:a2:dd:
                    a9:a5:2f:ca:2e:34:7e:07:c6:49:4b:70:fc:52:7a:
                    8d:dd:e7:8d:25:9c:68:81:5a:c4:1f:42:91:5c:e7:
                    95:1c:e6:05:2e:4c:cd:5f:71:9a:50:44:b6:02:77:
                    60:a4:d3:82:80:a5:1a:c2:c3:a7:2b:b1:05:42:33:
                    2e:a5:18:1c:fe:03:0f:31:f6:98:67:c9:8e:06:3a:
                    27:77:4b:af:08:1e:5c:65:36:c5:6d:86:1a:78:e5:
                    28:65:61:c8:c4:6b:a0:64:b8:bd:bf:53:56:b5:fb:
                    2b:a5:b4:99:c4:a1:69:37:12:8f:54:3f:a2:f5:29:
                    e8:d8:07:93:43:85:0a:24:4b:d6:4f:33:84:db:f2:
                    62:8b:39:77:9c:f4:9d:de:db:5f:9c:11:78:4a:a8:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:83:13:2B:9D:5D:36:F4:82:4E:86:8C:69:94:D6:C8:61:B8:9F:25
            X509v3 Authority Key Identifier:
                keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f0:86:08:32:2f:4c:39:46:b8:39:f6:92:44:d3:5f:17:8c:
         a0:2c:82:8c:f4:27:3c:fd:5b:12:60:39:15:45:b5:03:e2:2c:
         bc:1a:eb:b7:d2:61:9e:ad:19:ee:79:0c:03:da:19:b8:13:fa:
         a6:56:98:67:6b:48:e6:d2:7a:ad:fc:4d:70:6b:d4:38:f8:94:
         10:f8:55:a4:f3:87:61:9a:25:d0:f8:23:df:7c:21:19:f3:84:
         16:64:be:48:e6:c7:f7:7b:8f:6d:5e:03:cb:c1:6a:b5:e5:ee:
         d0:ab:08:9b:c8:7d:80:bc:49:ee:85:8b:35:de:1f:79:26:b6:
         78:e3:e1:dd:62:cf:10:26:1b:06:6d:ac:29:a8:e4:8a:c9:79:
         86:29:2f:bb:5a:e3:97:17:a8:23:65:46:c9:e4:29:fd:10:48:
         33:55:01:24:cd:22:39:69:5f:06:d6:4e:4d:73:7e:4f:98:6f:
         40:ce:5f:6c:72:c6:6d:f0:18:d9:5d:b0:5b:13:11:29:8e:b0:
         fc:df:cc:64:b0:c4:d5:30:27:db:9a:f5:fd:9a:87:cf:43:de:
         fa:ef:2f:3a:bc:4c:2a:02:66:b3:ef:5f:84:a5:1a:04:b8:57:
         23:dd:4c:7b:b2:85:a4:86:d9:de:fc:06:6a:8f:7b:f4:8d:50:
         7a:e6:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----