Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File:                     w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier:          1a27GQo5Y4x0nPh94MzEsQHY9gpn7SEwdmr9CZb20DE=
Subject key identifier:   DF:95:C1:89:D4:FA:E7:79:DD:C6:1F:7F:FC:6A:D6:F8:46:26:C1:1F
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer:       /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial:       01962F06C7575B27FD215D8AEC3D9B550ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: lGKMR71wIiss24ARjCT6dglSzeg.roa (hash: pOKk5O831tF+GU5ZB5nOM1eHOcUVJqNluw5xZGpLXhs=)
                          2: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: NwzAYm0ok5zrAdv/Z2aq6Zbw2QRvkVTwuNS69wEmvL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c7:57:5b:27:fd:21:5d:8a:ec:3d:9b:55:0a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=df95c189d4fae779ddc61f7ffc6ad6f84626c11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4b:9b:8b:fa:6f:1e:e8:09:5c:c1:0d:c2:a7:
                    d4:ae:be:9b:60:27:3a:6b:ff:8a:f0:29:99:60:94:
                    b8:e4:60:f0:4a:7c:69:10:ea:10:ea:2c:e0:80:25:
                    20:63:28:d3:af:49:af:ca:81:0f:29:2f:02:35:d4:
                    5b:1f:2e:66:1e:2b:6f:93:0d:ec:25:4b:6e:74:83:
                    8f:c4:39:1e:a0:9a:a3:a7:26:b9:71:8a:ee:41:51:
                    e0:16:04:d9:6b:2d:96:ac:7b:fd:cf:ee:f4:4d:61:
                    85:82:da:69:18:50:09:a7:b4:1c:d8:e5:50:08:ef:
                    b0:6b:dd:34:31:a7:75:1a:77:43:9c:d4:f4:a0:2d:
                    91:2f:03:cb:da:98:61:6f:67:c2:b6:15:ad:3a:bc:
                    0f:54:65:2d:e7:be:a2:4f:48:d5:09:ff:d0:4f:51:
                    33:03:76:3d:49:a8:cc:22:76:b0:9e:5d:d6:a4:e1:
                    f4:67:03:a9:db:61:e7:8d:93:0b:07:f2:7f:c1:c5:
                    86:69:c3:a1:bb:1c:0f:20:6b:b4:af:59:08:25:9c:
                    8c:a1:09:2d:85:7d:fe:3a:1b:f9:84:06:a2:73:74:
                    a7:8e:37:e5:a0:12:ed:e0:50:a3:d1:79:be:8d:c1:
                    79:23:3d:0b:d9:53:03:6a:22:b5:4d:00:92:8f:c5:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:95:C1:89:D4:FA:E7:79:DD:C6:1F:7F:FC:6A:D6:F8:46:26:C1:1F
            X509v3 Authority Key Identifier:
                keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:82:2f:c0:64:0b:7f:75:16:bb:52:8c:ec:8a:d0:a0:fa:
         6f:fe:cb:16:34:f1:e6:ad:37:67:49:6c:e3:37:5c:d4:e9:18:
         db:1a:8f:f4:1d:6a:d1:16:9b:dc:23:46:0f:d1:d4:a4:1f:aa:
         34:e0:38:fe:3c:45:90:5e:02:f3:a4:20:59:57:06:b1:c2:73:
         6b:d5:b4:08:19:d0:d8:dd:c3:cb:7c:4f:f7:cf:de:8b:5d:8a:
         8b:c9:09:51:51:61:b9:7a:b9:f0:d3:89:6e:2b:e3:b0:ad:0f:
         87:17:ac:19:96:51:0c:0f:e9:c8:b2:ca:83:10:82:9e:7b:d6:
         ef:2e:8b:22:80:40:7b:c6:75:e4:02:79:f9:88:20:e0:5f:34:
         90:f6:3e:f1:19:48:02:47:3f:44:8c:59:8a:a4:2c:b8:dc:04:
         29:02:de:00:26:dd:84:e2:f4:6a:4f:d1:14:32:3a:b4:40:ed:
         38:4f:60:f3:42:06:74:86:3a:2d:dc:3a:78:7f:68:77:45:c3:
         ee:f5:0e:5b:7f:96:54:55:a6:56:04:07:c3:6a:3b:57:79:18:
         f3:45:09:a5:0d:f8:64:f5:e2:4e:b5:02:fa:25:0a:38:d4:ee:
         dc:35:fe:a9:b4:f9:a3:87:ae:3c:99:f1:98:e8:92:6b:a3:34:
         32:de:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----