Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
File:                     MW2V2INsHxFqce4h3sD_Zx4eBw0.mft (raw, json)
Hash identifier:          stAWGOX5SSurydia3Y0iRnw6mH1lae/DkiIc9HhdlCs=
Subject key identifier:   02:97:DD:C5:2F:5C:5E:60:54:76:30:1E:49:6F:2F:06:C6:4B:D7:50
Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
Certificate issuer:       /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Certificate serial:       01962E2ACFAC88F108106B3A1F19BB48E7C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: MW2V2INsHxFqce4h3sD_Zx4eBw0.crl (hash: 54BtneMt0Izw09Ah+lU0ZE7ZZFTGCxn3iAMSVlzPOO0=)
                          2: NaSNw-5nplSi1oWgCIXAtq-282g.roa (hash: PHVRipc0hRgzJt/VWrGp9MNvQSbNc+wyfThzb/6H1hk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cf:ac:88:f1:08:10:6b:3a:1f:19:bb:48:e7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=0297ddc52f5c5e605476301e496f2f06c64bd750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:14:2c:cf:fd:1d:0e:96:55:7b:f9:5d:d8:0c:
                    ae:d8:0a:fa:ae:6a:ac:aa:df:dc:27:68:c6:3a:c4:
                    eb:00:0c:52:27:74:73:99:20:49:9a:55:8c:45:4b:
                    83:4e:a2:ad:b9:ea:f1:33:16:0b:c1:75:16:53:d1:
                    ed:b5:cd:4d:d6:f4:6d:0f:c7:db:cd:d7:4f:6e:65:
                    75:f3:8a:69:43:8d:18:a7:74:a5:49:ef:59:ad:ac:
                    03:e4:15:e9:1c:eb:fc:c1:d5:ee:e4:38:91:9c:40:
                    d4:47:37:37:41:7b:95:8f:25:28:94:84:e6:ae:74:
                    0e:80:63:91:fb:dd:d2:41:19:59:84:ee:ee:09:af:
                    63:55:79:12:07:90:2e:4b:10:1a:d5:8a:2a:02:bd:
                    7c:95:d6:e0:3a:2b:7c:0b:17:9f:80:c6:c8:e0:bf:
                    df:91:ea:3c:1b:b8:73:0f:0b:93:d6:68:af:25:be:
                    7e:25:58:63:d3:36:3e:1a:1b:08:49:bb:83:a0:ed:
                    48:b8:6d:8e:bd:32:fc:48:1f:d6:89:25:a8:0d:06:
                    db:66:06:49:4a:0f:70:e7:96:e4:83:e7:ad:38:21:
                    47:09:8e:bc:b5:98:5b:bb:97:f3:54:f4:0a:b1:4e:
                    78:25:e2:96:9d:b3:5d:9a:0c:6a:90:09:3a:ef:4e:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:DD:C5:2F:5C:5E:60:54:76:30:1E:49:6F:2F:06:C6:4B:D7:50
            X509v3 Authority Key Identifier:
                keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:03:7c:14:32:e7:86:74:3f:84:67:52:23:2f:18:74:48:e1:
         6c:8e:d5:89:52:6d:7d:63:bf:2b:d9:83:f9:6f:49:9d:3d:0b:
         a7:34:2f:5d:22:2b:21:42:ac:4b:f8:b6:62:8c:4a:a8:db:52:
         48:0f:13:72:ad:ed:a1:d7:c6:e8:a6:f1:4b:25:24:d0:71:f0:
         8f:f5:61:eb:a2:e1:ca:1a:1f:56:23:c7:18:4c:c1:7f:6c:79:
         d2:9e:98:5b:f8:f0:20:af:0a:0a:e6:8c:d7:16:ac:4d:44:fe:
         9a:fa:1c:e2:70:ea:87:48:a6:93:07:62:ad:ba:51:ba:0b:5c:
         61:19:1d:2f:6f:9f:57:b1:8e:e4:65:ee:fe:89:67:c9:6b:51:
         4f:97:1b:8e:6e:ad:b1:0e:97:2c:58:eb:a8:39:60:a0:5f:90:
         ef:a3:ce:24:23:ba:7f:f6:bf:fd:06:d1:ea:84:31:28:57:66:
         f1:c5:fb:eb:81:29:92:2a:4b:0d:ae:f8:47:4b:60:f3:3c:48:
         a2:82:b9:e2:e4:b1:0a:de:75:e1:f5:a9:08:f3:90:0d:79:ba:
         72:88:1c:18:60:d5:b5:c4:02:6e:b0:b7:a0:b7:ab:a0:c1:cb:
         70:4a:96:a7:b2:57:86:1e:3a:d0:ec:54:dc:74:80:db:c3:9a:
         e3:df:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----