Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File:                     A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier:          W+cs9XJmsm3z1qRyXrGh3a2QElyAuldeMy7GfryuI9I=
Subject key identifier:   35:D9:F3:04:C4:6F:C3:16:B6:20:30:32:90:89:39:10:94:5E:7E:33
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer:       /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial:       01962DF3D57582073723DB6C12CFD0AAA67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number:          01CF
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: Ys81p0HfM1zvrFvWZZqL21M/J2ujQ9MjDPy9slDPYMQ=)
                          2: muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (hash: RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d5:75:82:07:37:23:db:6c:12:cf:d0:aa:a6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=35d9f304c46fc316b620303290893910945e7e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:c1:36:86:c2:03:1b:2a:78:98:4d:38:65:
                    e5:38:6f:63:af:16:aa:21:8f:77:83:5c:fd:a4:9f:
                    c9:38:61:77:42:91:ec:ab:19:22:1f:04:3b:7a:e2:
                    f4:3b:4b:8e:92:ff:8b:1d:dc:63:89:46:e6:c0:ca:
                    c2:3f:fe:ea:0e:0f:a9:d9:78:a1:af:e5:07:26:4e:
                    b9:e1:9c:02:d2:00:a5:11:9c:41:3f:7e:cb:09:55:
                    1b:7e:a7:21:0f:67:9b:c6:6b:98:a4:4f:43:3e:70:
                    5f:b9:96:4d:e8:71:8b:e5:47:70:69:10:f3:69:ae:
                    2e:42:02:22:18:4b:3f:00:fa:eb:b8:38:72:57:42:
                    28:12:ab:8f:17:6a:3e:63:7b:0d:3b:ef:b8:60:92:
                    c6:ca:1c:e6:ea:03:89:e3:a6:cb:9e:00:13:70:cf:
                    cb:99:b3:c5:73:5f:7e:8b:b7:0c:44:4b:e7:bc:2e:
                    e6:55:89:69:84:5b:44:3f:04:f2:fd:e6:f0:1e:eb:
                    50:a5:bd:5c:77:b5:57:0b:51:b3:83:15:f4:20:42:
                    07:da:6e:d2:c2:89:b0:38:bb:24:1d:59:4b:16:c0:
                    1b:9f:d9:55:f0:8d:75:10:96:98:ff:43:ff:0c:10:
                    78:c1:ef:c0:3c:ea:26:24:e3:ce:cc:a4:30:c0:e0:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D9:F3:04:C4:6F:C3:16:B6:20:30:32:90:89:39:10:94:5E:7E:33
            X509v3 Authority Key Identifier:
                keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:32:5a:fb:a2:27:ff:e0:39:76:5c:7f:55:79:6b:ce:77:
         56:60:84:1f:50:12:c5:74:0f:fe:56:4c:18:0a:f9:ec:a6:87:
         7b:0e:28:89:46:38:a3:e5:63:8f:c5:2b:ea:15:16:1d:96:d7:
         79:57:dd:aa:cd:99:d7:0c:5c:8c:0b:53:69:33:8a:5d:ae:a8:
         2a:dc:0e:c2:86:1a:dd:69:64:5e:a4:08:f4:61:a4:cd:90:3f:
         12:f8:89:ba:1a:e5:30:5a:31:a8:6f:dd:94:76:49:64:3d:7f:
         ca:eb:6e:47:9d:d6:bb:37:58:99:a3:97:eb:03:1b:b1:1c:b5:
         7a:2e:41:22:5f:5a:8c:4e:88:69:12:79:0c:4a:fb:9c:3f:f9:
         9c:dd:d7:33:86:26:95:f1:07:06:01:fc:a1:b8:9d:1c:40:29:
         41:0a:20:76:ef:e5:09:cf:ba:c1:48:aa:7d:45:82:cb:31:3a:
         c8:93:e4:b8:45:48:cf:0a:8b:a7:39:1d:26:f2:ec:b5:fd:0b:
         7d:bd:67:57:4a:9e:5e:bc:81:af:d7:08:99:7b:ec:c3:e2:62:
         68:c0:14:69:9c:39:7f:a8:35:73:a8:84:c7:79:37:fd:74:1f:
         21:6e:90:a5:ca:88:94:c0:dc:01:1c:9c:64:18:62:9b:ba:4f:
         de:90:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----