Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
File:                     w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json)
Hash identifier:          3nF8Gx/ZFcqAV02/tW7ZBIK10PlD9LDayd0fPeXFn34=
Subject key identifier:   0B:11:12:B4:53:84:8F:2B:7D:4F:63:33:8F:DB:8A:8D:C0:90:D2:3E
Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
Certificate issuer:       /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Certificate serial:       01962FAB8FB02F14A383CB322C018751C92D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
Manifest number:          1430
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: O3ljM5CB_2JtUI0Sdnkha5M5ERQ.roa (hash: NhJbXC81FRmcMSonVcZC+2A3GfW4bVjcRFKj0QoIURY=)
                          2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: 6mLoyh5502JdqzJUeU7ItsimsRAtWejxoLAv0x3fztg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8f:b0:2f:14:a3:83:cb:32:2c:01:87:51:c9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=0b1112b453848f2b7d4f63338fdb8a8dc090d23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:1b:db:e2:b2:d0:92:5c:65:37:50:e2:0f:
                    eb:35:cb:bc:1c:75:88:3c:44:90:f6:dc:be:3c:96:
                    99:0e:b0:47:f3:33:2a:81:ca:4e:8e:88:19:33:9e:
                    a5:71:c6:8b:a6:cf:2f:2e:b3:8a:a7:71:a9:14:f2:
                    51:15:cb:c1:21:18:37:7e:16:9c:bf:2c:1b:b7:92:
                    00:a3:60:6f:54:4b:76:5b:2f:2b:0d:87:3b:52:92:
                    f0:6e:8e:11:88:e3:8d:2f:81:b2:23:a2:66:9c:08:
                    20:4b:71:69:23:64:46:87:93:f2:34:8b:20:e6:2a:
                    08:e5:4c:ca:16:86:65:ac:49:b7:d0:f6:e3:39:a9:
                    f2:27:48:af:5a:ec:66:c3:6a:ef:34:53:92:4d:cf:
                    dd:79:2b:62:0a:47:d1:1e:e6:5b:e2:17:a9:fb:c1:
                    25:52:c6:10:99:3e:12:f8:5f:1a:8b:3f:71:e3:81:
                    a3:ba:72:a1:3c:bb:55:8d:bb:ab:eb:25:05:f8:e9:
                    9f:68:93:0b:6a:44:ac:c9:72:7a:98:4a:fc:29:cd:
                    cf:33:ef:e1:06:e8:88:83:76:d0:7c:c4:29:a0:57:
                    f9:e3:a6:43:9a:92:cf:22:5a:89:50:c8:43:5d:13:
                    da:f1:59:90:2c:18:8c:09:bb:07:d3:91:43:fc:fd:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:11:12:B4:53:84:8F:2B:7D:4F:63:33:8F:DB:8A:8D:C0:90:D2:3E
            X509v3 Authority Key Identifier:
                keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bf:5f:c0:0c:9a:c0:d2:d9:cf:a0:9b:55:57:41:83:5e:7c:
         56:95:89:84:3e:10:fc:c4:7c:f7:00:52:b8:9f:1e:a2:b9:b3:
         16:9d:97:88:1f:be:67:2e:1a:9f:1b:e5:14:4d:02:b3:a4:5b:
         f0:27:2a:a5:0f:df:a6:67:fc:c0:9b:53:e4:3d:fd:fa:fa:12:
         28:3e:dd:57:c4:4f:e4:0e:ab:4b:16:d1:36:b0:b9:b9:ef:c5:
         68:4c:dd:60:d2:a9:62:9a:00:72:39:f2:38:a3:7f:35:31:6d:
         f5:75:b6:50:03:ec:ab:5a:8b:94:f8:5f:6a:0b:06:7f:01:03:
         ce:1a:b2:7a:16:b7:42:14:7d:5f:2c:85:dd:32:e8:7f:78:f4:
         78:8b:f2:9f:d0:64:c6:9a:3f:09:d4:e4:08:51:60:83:dd:d5:
         d1:e4:e2:59:5f:48:63:64:f5:92:be:a0:ba:27:5b:98:14:dd:
         21:ba:09:bc:0c:43:73:7a:70:3f:fe:ca:8f:bd:05:cb:c4:fb:
         e2:d1:ec:7f:b8:5a:92:34:3d:18:24:79:6e:40:51:40:3c:de:
         d7:d4:de:26:c5:7e:23:30:da:8f:31:3d:1a:8b:c5:27:5e:70:
         15:3b:34:80:bb:0d:4f:ad:c2:69:c4:62:d7:03:39:c1:f2:dd:
         a4:29:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----