Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File:                     Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier:          MhDp0qBtgO2oop4M4S9aPSUtPjx1PZW/KxuNjzsH4mA=
Subject key identifier:   C8:F8:6F:C8:74:AF:0D:61:DC:2B:43:9B:27:D5:29:C4:B9:45:EC:43
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer:       /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial:       01962F74EDEB2F766B36B1B6FE8D6B937BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number:          14BF
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=)
                          2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: 5NKHtUTrijdY7inWGaM9Zc/gjZBbGvwvQkWtkB7hX/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ed:eb:2f:76:6b:36:b1:b6:fe:8d:6b:93:7b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aae19678aa37525512229a94e7890147183273c
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=c8f86fc874af0d61dc2b439b27d529c4b945ec43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:e4:0e:ac:39:2a:b6:b9:b5:39:a9:7f:09:
                    5f:bc:75:9d:15:1a:ee:40:f6:57:11:f1:a3:12:b2:
                    95:61:23:0b:37:28:92:02:90:52:09:9a:32:46:06:
                    dd:ba:64:6a:f5:98:50:35:89:d1:ba:2a:d0:7d:4b:
                    8a:7c:32:91:2c:88:57:09:f1:66:7a:4f:b7:a4:7a:
                    13:ab:5f:e0:04:a6:95:98:54:16:69:99:83:30:5b:
                    1f:a3:15:b2:1e:e1:e5:77:ff:68:e4:3c:8b:b5:1e:
                    3c:06:df:ba:a9:af:8d:5d:cd:4c:1e:f1:54:bd:d7:
                    cf:7f:cb:b0:ec:04:47:80:6b:1f:9a:5a:15:4f:c8:
                    c0:fe:11:ae:bc:e9:a5:6b:c9:03:ff:06:9b:a8:2a:
                    5a:88:bc:95:47:eb:18:67:a1:f6:e7:8e:a5:df:b8:
                    31:25:3d:2b:91:de:16:40:09:1e:35:b9:b5:9a:5f:
                    be:f1:f7:6c:b3:73:b1:f7:ea:09:33:40:a2:b8:bc:
                    99:3d:7d:91:ed:54:54:be:96:08:e8:70:21:ee:e6:
                    0a:e8:1b:43:49:1c:db:5f:63:19:0a:53:9d:28:53:
                    93:40:dc:fe:6e:5a:01:6c:9e:4c:33:c2:21:18:15:
                    5a:83:9f:51:db:4a:bc:10:37:19:cd:e9:dc:3c:38:
                    80:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F8:6F:C8:74:AF:0D:61:DC:2B:43:9B:27:D5:29:C4:B9:45:EC:43
            X509v3 Authority Key Identifier:
                keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:d5:1c:36:c5:63:1f:83:38:5e:b7:52:bb:b9:88:e0:22:
         97:15:93:33:d1:29:02:49:6f:aa:6e:e1:b2:25:e3:57:a3:eb:
         e5:b3:4d:17:16:6c:49:7f:01:c2:32:4a:e7:79:ac:59:71:a1:
         81:7a:75:79:b3:02:c5:c2:82:ba:7b:7b:ec:fd:b8:f0:0a:75:
         25:7c:b4:d2:00:22:0e:1e:55:a0:f0:29:2a:ba:55:97:e4:f5:
         be:02:f3:48:5f:c3:cf:3b:39:ed:38:3c:c1:15:90:39:14:ac:
         ff:c6:95:7a:06:9a:11:bb:14:55:12:35:1c:f5:57:ff:49:13:
         be:0a:90:fd:8e:a4:8f:43:e8:e4:d0:42:dd:d7:44:46:f3:24:
         f2:fb:5f:f4:36:4a:ed:9a:a1:23:83:b3:3c:21:ff:ba:a7:25:
         01:75:f5:17:a8:54:80:34:d4:87:e7:70:f9:da:77:a1:44:0f:
         f2:a8:3c:fc:c5:4c:34:72:8b:c2:76:33:73:c7:fd:18:d4:20:
         5c:c9:13:76:74:30:1a:5e:5c:81:05:40:8e:3e:b4:57:e4:d2:
         87:87:6f:3b:7e:36:c2:ec:8b:8f:e3:75:9d:42:ad:78:f1:36:
         1f:24:68:e7:84:1d:9c:6f:bb:cc:f6:3a:2b:5e:49:35:39:fd:
         bb:60:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----