Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File:                     CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier:          qYLc0dgziPgf0N2z0Cwx3L18cpQH0n+EnGm0g4quu7c=
Subject key identifier:   61:7E:B0:54:70:6C:EF:BA:43:F1:D4:98:34:59:0A:52:0E:48:87:DD
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer:       /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial:       01962F3DAF5F52C6BE0FB2237DA1BA74FA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=)
                          2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: plbRCCDX6q2TV92Y/LxRF4rk9FKzgyMfOaD5F2HAp9Y=)
                          3: xLPeUXX4RJLZxnIKieLVdJS8YbU.roa (hash: mvKw4bOKAr0IQga6Tr8TKhcYkp3wZjkszS2x0xRvaBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:af:5f:52:c6:be:0f:b2:23:7d:a1:ba:74:fa:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08759158de234b754b7150f21933096c1094aac4
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=617eb054706cefba43f1d49834590a520e4887dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:4b:9f:b2:d0:45:85:ba:25:2a:0f:a9:70:
                    10:63:5e:c9:65:db:89:48:97:1e:d2:0f:fc:1e:8b:
                    c8:2d:09:a5:85:17:94:e7:fb:37:59:0d:db:a4:40:
                    41:d8:ff:ab:a1:a4:d9:65:5e:11:5b:61:05:5a:3b:
                    0d:4b:89:ce:31:13:a6:e5:47:78:e6:d0:b1:cd:43:
                    c9:f4:85:49:fe:cc:4e:e2:f0:00:eb:f1:de:be:71:
                    a7:4b:b7:21:2c:c0:54:49:25:5f:ad:0b:66:25:89:
                    af:d8:a5:ab:9f:41:af:51:70:b2:b1:5a:87:07:3d:
                    a6:5b:11:c5:40:20:fb:58:75:d7:f0:16:27:4a:dd:
                    30:fb:7c:c8:85:4d:07:2e:da:c1:73:e7:dc:6f:a9:
                    46:a5:1d:ef:d7:63:b2:ec:89:04:21:69:c5:11:f0:
                    d5:9d:03:e9:ea:1b:6e:81:27:c0:19:9b:5d:07:c5:
                    ca:8e:6f:3b:7e:a4:54:8b:15:40:ab:10:13:8c:16:
                    6b:6b:8f:39:41:6e:e3:8a:f2:13:92:56:12:91:1d:
                    25:e6:43:dc:9b:92:f2:7e:a7:57:ff:ff:a1:a5:0a:
                    6e:b0:7a:28:c8:05:ac:91:e6:e7:e2:b9:80:6b:11:
                    b0:13:59:8c:6f:95:53:1d:6f:f3:ef:06:ad:bd:2b:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7E:B0:54:70:6C:EF:BA:43:F1:D4:98:34:59:0A:52:0E:48:87:DD
            X509v3 Authority Key Identifier:
                keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9b:7d:2e:2e:cf:1d:0d:9c:dd:67:fa:aa:9a:e5:d3:87:98:
         ab:1c:e8:35:7b:13:75:a0:aa:ec:8f:55:38:d0:b0:d1:aa:fd:
         7c:70:cb:28:38:39:bb:e4:66:50:17:64:a9:a7:65:ce:24:3b:
         2b:e8:57:5f:12:01:51:97:d6:49:00:eb:d8:d6:86:ca:31:4b:
         fc:6a:91:5d:1d:fc:a3:f2:66:29:af:90:9e:db:6c:0c:33:e9:
         e0:7d:45:5b:b7:9d:e2:b5:52:f4:e4:79:11:45:f9:a6:f7:e5:
         e4:d8:4c:a7:66:1f:27:70:3e:2d:a0:77:f6:d8:0f:bf:b0:76:
         47:f8:13:1b:21:bc:83:ad:80:f1:55:3e:b1:7b:57:73:2f:6d:
         80:2c:be:c3:2b:5c:21:32:49:a0:8c:e8:f5:86:30:f4:42:69:
         e4:ce:9a:c1:e0:76:dd:3b:af:4d:e0:9b:1e:95:66:1d:69:ba:
         15:f4:6a:d5:ca:87:e5:87:18:44:81:3d:27:65:e4:0e:ac:31:
         be:e8:a0:74:48:f3:b3:9c:06:7d:41:70:d5:69:ca:46:bc:0d:
         7c:5f:b4:12:37:74:87:3e:f2:8b:63:15:4e:4d:ff:5c:5a:2f:
         88:3d:77:7f:23:e6:ea:08:35:bd:7a:73:6c:fc:26:36:9d:ca:
         92:25:07:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----