Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File:                     w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier:          o7Pk+T6kUctIzkDXqlBWt71QLFLySXgW55fM2o8NMTY=
Subject key identifier:   EF:92:3B:2F:DB:84:A8:D2:3D:AA:13:77:94:73:91:B1:17:FB:6C:B8
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer:       /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial:       01962E61911FFC41BD1D10FA2C6996358CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: TPJl-AnyNAOqe20bKX-5t3SrM4E.roa (hash: X6UgSBrAhCQSnYi9DhkcF/hdYKpsagcSW2GIdlVKxUg=)
                          2: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: 4gRXqjAmX362pbpwXiVQNWTKH5BgHPLnKpsX0px2NS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:91:1f:fc:41:bd:1d:10:fa:2c:69:96:35:8c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=ef923b2fdb84a8d23daa1377947391b117fb6cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:e3:c5:3a:13:23:a4:61:84:5d:f9:83:2d:
                    45:01:8b:d9:51:5a:37:59:94:c9:2c:77:d0:16:86:
                    ce:1a:0d:a7:b3:52:75:ff:2e:41:b8:6e:11:1e:f1:
                    74:a6:08:ba:45:0c:e1:2c:09:6a:c4:4d:03:f3:19:
                    46:87:6a:17:1f:3f:f0:c5:55:73:3d:bd:0f:8f:b4:
                    2a:ae:09:7e:2a:d7:f7:e9:29:66:c0:e4:76:6a:96:
                    66:ba:3c:64:b3:ba:a8:dc:08:2d:d6:10:bc:f3:b9:
                    7d:bb:70:50:22:dd:a8:a3:8c:88:fe:14:80:34:5f:
                    16:c2:3f:7d:9d:bb:8b:11:12:0e:5c:24:8a:16:20:
                    34:c4:ac:62:a9:56:ba:d7:d4:4d:58:b4:30:2e:06:
                    51:c1:19:79:75:30:ea:f7:b6:a8:6d:ca:95:ae:8f:
                    ae:f7:51:3b:e9:98:5d:fd:29:38:6e:c0:3f:96:a0:
                    eb:4d:04:b5:45:3f:9f:ad:5e:e5:a8:5b:ca:c9:41:
                    35:69:82:fa:c1:6a:8e:d8:9e:b4:32:22:f8:79:27:
                    38:f0:1b:3d:28:1f:16:c2:b5:c3:52:df:0c:64:d8:
                    52:2e:bf:fc:8e:f8:d0:47:12:0b:b3:36:eb:c3:ff:
                    12:49:f6:80:7f:83:82:62:f5:8f:88:17:cb:33:67:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:92:3B:2F:DB:84:A8:D2:3D:AA:13:77:94:73:91:B1:17:FB:6C:B8
            X509v3 Authority Key Identifier:
                keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b6:ff:ae:58:82:6a:0f:47:b4:08:12:88:cf:2e:3a:cf:5e:
         d2:b3:06:52:16:3d:e6:14:ce:88:88:41:50:cf:09:3e:8c:e0:
         d2:07:c3:c6:79:b5:45:15:28:5b:dd:77:46:0f:a2:e7:ab:77:
         11:63:e1:fa:73:a0:8d:69:fe:6f:91:ba:b3:5a:df:b9:77:b7:
         33:af:5a:fa:31:80:a0:53:e9:5d:db:81:80:f4:d7:a9:6e:2b:
         ee:de:29:74:85:8a:76:88:50:c7:e9:17:38:e7:9e:a8:be:3f:
         2c:fd:1c:c9:0a:ae:d1:6e:e6:41:8f:cc:47:19:c9:16:6e:b1:
         fe:5a:a0:a6:a2:24:70:a3:b7:3c:29:e1:07:27:da:2c:69:8c:
         59:2c:ba:04:62:2f:92:9e:a6:65:64:1c:08:70:ab:9e:39:81:
         29:aa:b5:36:c1:c0:9b:8a:c6:f9:35:22:fb:83:1e:bc:f2:8e:
         0e:2e:38:4d:fe:e6:04:6d:02:4e:03:2f:26:68:4f:5a:71:26:
         e4:d9:82:0b:43:e3:d9:cd:a6:aa:0b:fb:72:6b:03:ae:bb:d8:
         a5:87:76:e1:57:5b:4a:60:3b:0e:0b:e5:81:fb:5d:9d:49:aa:
         70:5d:b3:ec:e4:c7:99:91:43:fc:9b:8d:b0:b0:a7:4a:4d:96:
         9b:a7:1f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----