Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
File:                     dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json)
Hash identifier:          JZLFuLrFmNU5SiQQu8cAf+221EwThLppMavcwutTHZ4=
Subject key identifier:   C1:22:9F:2B:36:B9:13:61:9C:25:D9:34:45:38:45:8F:5F:4D:04:61
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Certificate issuer:       /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial:       01962F3DD2946091E0281DFDBE55D07FE44E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
Manifest number:          1483
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: Lk4d//wKJQnMJzYkA1cC6vt3DLq9S+pKinQS1D//MtU=)
                          2: eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa (hash: tYhPAoHdmBCSAa68GIa0M0wkQIoMsHZdOyQCiBG9waM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d2:94:60:91:e0:28:1d:fd:be:55:d0:7f:e4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=c1229f2b36b913619c25d9344538458f5f4d0461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:03:ee:1a:9f:a7:7e:28:3c:7d:ad:f7:49:
                    5d:2e:9d:e6:a4:c7:9b:cb:45:9e:c4:3a:de:4f:22:
                    89:fc:55:75:f1:2c:6b:ff:a7:8b:ea:b1:7c:c4:dd:
                    80:c1:4a:a8:91:c5:e2:a6:66:cb:15:cf:17:13:0f:
                    ae:6d:14:0a:4a:8a:b6:2c:43:84:ee:51:0e:91:8c:
                    ff:c4:77:de:bd:9b:aa:77:b8:5d:63:49:ca:b9:fc:
                    0d:47:29:d7:51:d0:b0:37:3c:b2:17:1b:c9:6d:14:
                    6b:73:73:96:68:b3:45:ee:cf:6d:da:87:cf:3c:60:
                    af:eb:c7:97:ec:cd:9d:ee:e4:7a:20:26:4e:27:a9:
                    78:76:fb:eb:8d:db:ab:11:7b:36:e7:5c:e8:92:8d:
                    21:91:46:d0:23:ec:00:6a:86:6c:f0:04:aa:be:7f:
                    35:5f:ef:ff:1c:c1:7e:ef:46:ee:f4:61:65:2a:d1:
                    75:7e:2a:2f:7d:04:df:07:56:db:e7:14:0b:ec:22:
                    a1:9f:5c:6c:a8:c5:01:11:6f:10:9a:d7:bf:ad:e7:
                    36:54:8a:47:58:98:bf:1e:e8:dc:32:46:6c:ef:32:
                    d7:d4:95:f2:67:e6:ed:b1:50:f3:53:f0:45:a5:3d:
                    68:49:16:48:b8:87:c1:78:cf:2b:86:bc:0e:a2:a9:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:22:9F:2B:36:B9:13:61:9C:25:D9:34:45:38:45:8F:5F:4D:04:61
            X509v3 Authority Key Identifier:
                keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1b:3b:fa:bd:20:ff:45:3a:af:bb:ab:5e:91:48:8f:18:b7:
         b3:0f:b2:3c:c2:b5:4a:df:f5:92:2c:9a:dc:9d:0b:16:e7:dc:
         1e:fb:1f:25:b9:83:93:39:7c:d8:7b:a9:36:ad:16:ad:ce:fc:
         c4:41:4b:b8:ae:38:c2:a9:a1:21:cd:ef:cf:c8:f4:76:0c:69:
         6a:2a:b4:28:53:63:61:bc:8a:75:6a:79:f9:53:fa:b3:f2:b8:
         8f:69:56:91:8d:8e:66:32:f4:2d:13:15:57:c4:53:b7:f9:f5:
         ae:92:08:ce:ad:a3:be:ea:6f:7a:97:ca:f9:b8:c7:aa:29:bc:
         3b:83:f5:11:19:6d:f0:fe:22:8e:c9:7e:ad:fd:60:1f:a7:0e:
         58:d5:d4:81:2e:e9:e8:91:90:b3:02:a3:96:11:25:a6:2f:46:
         75:9b:95:67:b7:76:ab:83:5e:7f:35:80:90:b2:e6:17:45:1b:
         71:66:8e:f3:c9:f2:c5:72:65:0e:da:94:e0:bf:33:2e:54:8c:
         22:a4:a3:51:d8:68:7d:cb:dc:f0:85:cb:e6:a8:97:ed:4a:3c:
         bc:49:f2:f7:fb:7e:6c:0f:1e:3f:6b:70:c3:7a:7c:fe:32:bf:
         96:5a:e1:05:aa:21:cc:16:36:cc:e0:f7:d3:d2:6a:57:b5:21:
         ee:6d:95:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----