Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File:                     wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier:          gQ3XqQZGA7HTO8lDXIla+UQCOETnGx5HZZfhc2a/M7w=
Subject key identifier:   79:27:53:B8:06:D6:7C:F7:D9:17:5F:D6:11:F9:99:AE:E8:F0:25:B8
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer:       /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial:       01962FAB6A4C40037D407FE7475953E7B13D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number:          1183
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
                          2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: vwsHwtWLJY1nAaNuxmHxhBflgPZu38J2a3Nx1q/8R/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6a:4c:40:03:7d:40:7f:e7:47:59:53:e7:b1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=792753b806d67cf7d9175fd611f999aee8f025b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:13:65:4b:f5:c2:ee:9f:21:ce:0b:d4:01:6b:
                    85:25:2e:b3:21:35:9f:0a:5c:db:80:91:18:b8:28:
                    85:30:b7:ac:f4:25:cd:c1:a9:0b:4d:3a:4e:78:c2:
                    93:e8:21:b9:95:cf:71:8b:26:25:41:c0:73:30:be:
                    95:2c:80:a9:3a:ce:e7:bc:da:bb:a4:72:77:02:0e:
                    87:c9:a1:83:ad:24:be:ad:3f:2f:61:e8:65:52:27:
                    0c:21:db:1f:89:32:08:79:05:5b:e2:a2:8a:9b:39:
                    06:e5:a7:06:cf:fa:37:ef:26:ee:24:a6:d0:35:91:
                    2a:0a:73:9a:10:aa:d7:84:1e:f1:15:c5:23:87:29:
                    cb:ef:7c:a2:b8:75:ec:23:2f:a4:62:39:13:27:7a:
                    8b:1a:5d:8a:d3:23:79:3d:06:f3:43:00:30:a9:8d:
                    ec:f8:79:49:bc:1a:0a:41:c4:52:de:5f:1a:f0:9f:
                    99:92:f6:80:c2:3b:57:e5:32:31:b1:05:57:0f:72:
                    71:21:6d:a1:16:8c:99:67:e5:f2:99:60:e2:d5:44:
                    69:a1:1a:19:cc:13:cc:bc:2b:81:e4:18:72:60:8a:
                    bf:6a:5b:b5:26:e9:c6:3d:f3:f6:f9:c1:f7:e1:5d:
                    e7:86:be:3c:a6:dc:65:23:fb:c3:d3:3e:5c:cf:e5:
                    e8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:27:53:B8:06:D6:7C:F7:D9:17:5F:D6:11:F9:99:AE:E8:F0:25:B8
            X509v3 Authority Key Identifier:
                keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c0:6f:48:fa:a3:8d:0e:04:74:7d:6f:c1:6c:37:5a:84:9d:
         60:db:4b:b6:65:31:f1:1d:34:d0:44:92:9e:f3:e8:f0:c7:c8:
         8f:80:bd:50:a3:62:9a:9c:21:15:34:85:d6:c4:d1:ed:69:c3:
         a9:3a:42:3c:97:65:2d:52:53:59:b8:09:5c:25:01:6f:21:b0:
         c8:ac:6b:27:c6:c5:8c:f4:99:80:b0:3e:7e:77:2a:d7:95:c3:
         76:74:38:d5:ee:1a:0e:7a:31:ea:47:a5:0a:25:fc:31:f1:9a:
         db:f8:f0:15:38:e0:6a:ab:6d:b6:f4:61:1e:dc:b8:f0:b3:a7:
         6e:04:d3:94:bd:f2:d7:83:57:25:d5:b6:04:22:11:cf:dd:f3:
         96:47:09:1e:ce:67:f6:7e:1a:32:66:3b:dc:4e:09:1a:a7:3a:
         c7:6f:c7:8d:bf:51:54:4c:a5:4b:6c:8e:5c:ae:42:cb:7d:bf:
         c6:6c:c5:84:7d:2a:35:94:1f:5c:4a:c1:d7:18:40:d7:6f:a5:
         84:65:a1:78:bc:b4:89:72:c6:23:ad:00:f8:bf:05:6f:e4:5f:
         df:e3:56:8b:8d:3e:9e:7c:91:2d:e5:15:ab:ef:39:99:c5:cd:
         d2:fe:4c:9a:d2:99:30:c1:5f:81:82:19:c8:b9:5c:f5:f5:04:
         9d:d0:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----