Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File:                     WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier:          7XXm6Ma0HAhbOcqb/+DIFpfL5clHHhm5YKxhTXsMkno=
Subject key identifier:   D6:01:F0:9B:32:00:5A:0F:82:1D:BB:7B:4A:D4:98:7A:C8:C0:30:77
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer:       /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial:       0195E0EB5A1BD37261A49029EEC180D765C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number:          0425
Signing time:             Sat 29 Mar 2025 08:01:15 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:15 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:15 +0000
Files and hashes:         1: EQErsYEn34VQuEWAGFb3PKqYnG4.roa (hash: V0vxhgyH062g70S7uriTR1kZL9lSGypJMHFC0eqjGm8=)
                          2: F6cqsVfR3nCwcraDWbOKx9UMCf0.roa (hash: VhLYWpxjVaCJbMRdgI+y8qkEuKfM8KwIqDJg1RYVsew=)
                          3: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: u9KNkoeLwcSD5es2OluPUtITqJfhIbVzTqxOPtL0r/I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:5a:1b:d3:72:61:a4:90:29:ee:c1:80:d7:65:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
        Validity
            Not Before: Mar 29 08:01:15 2025 GMT
            Not After : Mar 30 08:01:15 2025 GMT
        Subject: CN=d601f09b32005a0f821dbb7b4ad4987ac8c03077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:a8:42:31:7c:2f:cc:10:a8:0d:95:e5:3b:
                    23:1c:83:c6:2b:45:68:88:8a:ad:a2:4c:f3:3f:4a:
                    a9:ff:0e:4c:82:40:65:08:77:21:35:44:5f:86:6b:
                    61:c1:01:56:7a:b3:2e:07:e6:19:0e:b3:82:3c:3e:
                    18:1b:38:67:1f:95:b1:19:3f:65:9f:74:94:aa:92:
                    41:58:8d:5c:fa:c1:e4:ae:de:43:65:a6:b3:74:86:
                    8a:06:23:4b:26:28:5c:34:8a:dd:1b:52:66:27:34:
                    47:a6:b8:14:99:de:88:32:12:b1:b1:e1:dd:02:3d:
                    a1:e0:b8:48:b9:ac:d7:e1:a7:36:f2:8b:dd:f3:c6:
                    bf:45:46:74:bb:90:20:8e:34:7e:e5:d4:37:69:f4:
                    ac:4c:7a:48:42:4a:50:52:f8:52:b2:10:41:e9:4a:
                    9d:1a:05:f4:a6:62:12:9e:4a:c8:dc:b5:c1:37:e0:
                    02:85:cf:c7:7e:2f:31:97:f7:c9:b3:c8:c4:b4:80:
                    2e:fd:39:c5:4f:58:52:97:8b:9f:37:a8:0a:a0:f8:
                    c1:01:f0:36:75:14:a9:15:6f:9c:ee:c7:2b:21:64:
                    03:10:05:5a:bb:c1:12:d0:30:61:b6:84:fc:14:74:
                    c2:41:d6:90:50:9b:71:f3:e3:a6:4e:0d:83:13:11:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:01:F0:9B:32:00:5A:0F:82:1D:BB:7B:4A:D4:98:7A:C8:C0:30:77
            X509v3 Authority Key Identifier:
                keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:05:dd:91:8b:02:0b:4d:7d:e4:42:aa:f7:cf:84:15:99:9a:
         9f:b5:88:f3:8a:67:83:22:a9:01:c8:23:ec:91:77:a3:fc:a8:
         8a:71:05:dc:33:6e:0c:5e:e7:4a:5b:65:5e:a9:39:97:f9:e4:
         eb:9d:27:35:a1:cf:b4:ed:50:fb:85:4b:e6:e5:a3:ee:b7:f7:
         13:f2:3f:18:9c:fb:39:e4:43:c6:2a:19:fa:fb:dd:0f:54:8e:
         3e:86:95:51:96:ea:ef:bb:b7:5a:bc:49:2e:43:14:3f:95:b1:
         46:6c:46:c3:8d:bd:34:dc:13:ec:f4:76:cf:a2:51:45:1f:42:
         a4:07:27:2d:61:c3:0d:90:d7:fe:c7:b7:50:73:af:76:b1:2e:
         7f:2b:85:ac:7b:e3:ab:70:0c:30:f8:60:e8:36:c3:ec:1e:26:
         fb:a8:41:9d:d6:53:4b:12:03:e8:62:10:a9:2c:5e:9c:9c:57:
         96:9d:14:d4:e6:2b:3f:54:e4:f5:c7:b7:4b:13:79:8f:49:b2:
         ce:98:ca:cb:a8:58:46:f7:db:8c:02:53:7c:88:20:3f:4d:28:
         55:1a:07:93:3e:31:e7:97:f1:b5:95:d7:a3:96:e1:8d:c6:8f:
         89:a5:32:c1:e1:dc:1b:f8:7d:27:5d:3c:58:5a:80:c0:1d:bd:
         35:97:e1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----