Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File:                     _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier:          PJNbZWqeH2IbJvNhOQbTB1eKvVMa90FbD2guXWe0ZbA=
Subject key identifier:   4E:DB:AA:18:9D:09:A0:1F:81:73:F2:D2:1A:C6:E4:60:2B:10:35:FE
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer:       /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial:       01962E2ACD7E2243C306FDEFE016B3BEE471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number:          1330
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: D477qKV-aPF2n8oBjSmgcuod2kE.roa (hash: pyW25bQPJKBFO/7F+t0bHE29cloxJ5T2+KSGVCTHaws=)
                          2: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: yUN/1jSMKyl7pbXlQHDqw+EbjRW1G7jALhrLCzrenhk=)
                          3: f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa (hash: Gw3xzXZPKuGmrAR2PrIl2quzqApN9VDz3sjokAQjW1Y=)
                          4: xKY8IzQ2skdO2j6b-9Nje_P42ZM.roa (hash: FO50+0Bv0UTkxnFBKac0wF3ON0aLSEXsEeZdHRUd87w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cd:7e:22:43:c3:06:fd:ef:e0:16:b3:be:e4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=4edbaa189d09a01f8173f2d21ac6e4602b1035fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:41:cc:59:9a:2d:e8:ad:bb:63:14:d7:1d:
                    f8:1b:be:0e:1a:19:88:ce:48:f9:f5:d2:67:81:6e:
                    80:20:4e:ad:7d:4e:78:b0:72:94:06:ff:e5:7d:c5:
                    f7:48:25:cf:8c:b5:0b:cf:2b:c8:71:05:23:4d:b9:
                    46:00:0c:24:a8:85:9f:1f:47:48:87:ad:d9:92:13:
                    7a:9f:e7:c9:b4:3e:26:72:6a:e0:ac:35:ff:c7:2e:
                    cb:c9:7a:28:53:fd:ae:66:29:a2:bc:5a:e4:5e:80:
                    7d:77:08:7a:62:6d:eb:9e:d0:51:9f:5b:4e:e9:6b:
                    fb:59:e0:97:89:ce:9d:42:15:41:ad:bb:d0:b2:d5:
                    ab:28:86:7a:f1:25:81:5b:0a:48:ce:5b:88:eb:87:
                    4d:9c:14:92:c2:f6:27:da:14:15:49:86:56:02:0e:
                    0a:fe:58:db:83:71:9f:ff:ee:e1:93:2e:88:3d:f2:
                    85:25:75:45:2b:1e:db:7b:8a:8b:e1:15:1c:bb:31:
                    32:82:ee:aa:d8:4c:5a:67:3b:52:d3:a7:6b:a3:94:
                    93:52:c8:d9:f8:0c:df:e4:31:a7:cd:44:a5:88:68:
                    bf:cd:c1:f6:76:fd:e0:f0:79:be:a7:9f:0c:ed:5f:
                    4f:e2:60:5e:8f:b4:7e:bb:31:95:e0:25:45:7c:fb:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DB:AA:18:9D:09:A0:1F:81:73:F2:D2:1A:C6:E4:60:2B:10:35:FE
            X509v3 Authority Key Identifier:
                keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:81:78:2a:c4:e2:fa:93:bc:e2:c5:32:7e:98:1c:34:ef:49:
         25:2b:15:fd:07:54:d8:4f:a8:1a:96:59:13:ac:ec:c9:b2:76:
         2f:cb:05:e5:b5:b9:c8:be:f0:6e:59:2f:7d:24:33:25:c6:0c:
         bb:67:43:2b:78:3b:d5:27:89:04:56:7b:f0:6d:d7:35:2d:c5:
         b7:77:94:9b:11:3f:fe:85:ea:39:35:fd:71:ab:85:5f:2e:bc:
         ce:ab:46:f7:88:4c:73:ff:47:a7:1f:5d:83:72:0e:3c:02:d6:
         92:3d:e6:ac:3e:fb:60:be:3c:51:c7:f8:da:ca:d5:82:86:1d:
         64:73:4c:2c:4b:aa:1a:9c:8e:97:c4:63:e9:96:23:69:89:a4:
         b4:e9:fd:1c:7e:e5:d5:4d:c8:9e:fc:0e:e3:1e:f3:70:c4:d4:
         09:87:59:11:1c:ba:b9:65:8f:ac:ff:49:1f:ad:77:f8:6d:2e:
         04:36:47:fa:3d:31:16:9e:2c:97:68:46:94:5d:f6:63:86:2b:
         2d:19:d6:ec:b4:8d:13:d9:5c:aa:24:f8:cd:d4:10:59:e4:83:
         2c:f8:80:5a:6f:d4:65:c7:ff:de:e0:04:a7:89:ad:cf:e2:23:
         6e:b0:a5:e4:e8:58:6b:f1:b4:34:99:d8:42:9d:87:60:5d:d1:
         9e:54:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----