Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File:                     mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier:          VaAQ2sJFj2vpd7VROy4nI5jzMoSGTUkN4Q7bKuPTXM4=
Subject key identifier:   52:D4:49:87:66:C1:08:14:C4:E8:EE:01:6A:25:20:64:65:91:6F:33
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer:       /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial:       01962F3D617FE78135C440133DB981C69320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number:          0350
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: YKl2f2IPF1HilabBLdWdBFhWqWU.roa (hash: Ji5xPVt5I1nXvu8659S7ksrNu2RDx/GRkGsd+dxvHXE=)
                          2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: CDY4ZSWKQ2AkNgD/VRQIgn4sjes2osVogAxDtv+Wyq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:61:7f:e7:81:35:c4:40:13:3d:b9:81:c6:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=52d4498766c10814c4e8ee016a25206465916f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:10:66:92:c8:16:6e:f6:55:a6:18:98:f9:
                    ea:44:3f:7c:d7:b1:7f:03:d1:2f:a0:6a:22:1c:ab:
                    be:79:1c:0c:84:fa:bb:9c:04:f7:88:74:2d:22:60:
                    f6:df:a1:c5:0f:d8:d5:ec:b0:01:57:da:58:90:c2:
                    f6:f2:0c:c9:a5:77:68:43:c9:ac:32:cb:d4:78:3a:
                    2d:0c:e9:44:22:2f:57:ef:04:96:78:29:19:c6:38:
                    9b:fa:09:73:14:1e:76:c9:91:b6:b0:2d:45:40:3f:
                    99:b5:32:0a:29:25:ce:33:90:0a:8e:d3:9f:da:e7:
                    fe:78:d5:71:5b:87:9d:8f:34:6a:44:35:a9:1c:74:
                    f4:54:aa:78:9a:f5:a0:5e:4f:e4:c6:df:91:12:f1:
                    e4:22:9b:c6:a0:ae:e8:99:4d:13:21:35:70:8e:de:
                    97:02:49:c5:0d:b7:c8:6b:bf:21:7a:6c:c3:53:f4:
                    91:60:52:74:32:ca:e0:58:a8:30:0f:d7:3d:4c:ad:
                    2d:9a:53:6b:21:2c:ea:2e:ab:8f:92:92:74:10:f6:
                    39:7a:9b:9a:5b:fe:ca:5b:41:7a:ae:63:88:23:74:
                    93:db:96:58:c4:7e:fc:a0:8d:4b:03:e7:bd:6a:ea:
                    65:95:9a:dd:dc:7d:a8:ad:61:89:5e:47:a3:22:da:
                    10:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:49:87:66:C1:08:14:C4:E8:EE:01:6A:25:20:64:65:91:6F:33
            X509v3 Authority Key Identifier:
                keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:03:aa:f2:92:2b:f1:fa:30:44:86:21:fd:88:00:b4:6b:
         af:f6:72:e6:c9:4f:a2:27:b8:6d:ad:dc:7d:98:8d:a4:7c:05:
         b5:c9:bb:74:3a:18:68:75:1d:91:70:a2:cb:74:74:c1:a8:68:
         23:6b:68:07:93:b7:42:21:9b:ab:45:bb:9f:16:81:06:2e:4f:
         c2:84:6f:43:40:cd:d1:1d:3d:24:1b:3f:14:6d:68:7d:07:e1:
         6f:3b:cf:61:3f:ce:f5:68:51:2a:ea:e9:89:5e:50:a8:d7:19:
         68:43:55:cc:ed:9d:59:08:f1:7a:a7:3d:10:d3:e5:21:31:08:
         70:74:07:73:de:39:14:19:1d:d0:da:44:c4:2c:48:b5:35:8f:
         6a:a0:e2:9b:44:b8:88:31:33:e4:bd:25:88:d2:66:7c:a9:5e:
         0a:f2:7b:d9:28:43:87:7b:e4:a6:45:be:b1:87:b5:8d:be:2c:
         d5:1e:87:5e:c6:a0:5c:97:39:6e:7c:93:02:ad:ef:4f:1f:4e:
         7d:12:57:a0:c8:e9:b3:d0:36:69:69:23:1f:da:40:5c:49:50:
         b3:4e:fb:a8:de:fa:46:b4:69:1e:d4:6e:ed:49:77:67:c8:68:
         d9:22:59:b9:37:e6:27:68:d3:8e:17:38:a1:e7:51:2a:d3:4a:
         b7:6e:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----