Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
File:                     wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json)
Hash identifier:          f/Q800KiUcUoGJtD6IYjR4kUPvUZz9UzSe/Yu8lmsB0=
Subject key identifier:   68:4E:54:78:19:65:82:BB:DD:24:7A:8C:C0:9A:38:EE:49:82:18:5C
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Certificate issuer:       /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial:       01962F0661009C5D1B38EE21FB87CDBB8906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
Manifest number:          08D6
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: RZAsu3ZzPjbXj9YVfQwdh_v0Wwo.roa (hash: WabOb6iYWPViHfgLBS9pTtVU1Jn9wGfO4xF3paFZqEI=)
                          2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: PBMAmAqK1rgV/B/a/cc7YCfoyDJzXuLhCYYsvE98EfM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:61:00:9c:5d:1b:38:ee:21:fb:87:cd:bb:89:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=684e5478196582bbdd247a8cc09a38ee4982185c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:7b:26:43:ec:31:26:7e:c2:4e:4b:bd:17:
                    ba:c4:f4:4a:04:a3:0c:ae:b2:29:26:1b:90:6a:2a:
                    18:4e:58:93:f1:25:af:9a:0a:c9:a4:ad:72:07:8d:
                    56:8b:e6:14:49:9a:dd:bc:87:ac:86:84:39:1f:58:
                    d9:1e:c6:42:a1:89:4d:a6:4e:33:b9:d1:c9:56:ad:
                    e5:2d:7d:82:dd:2b:ae:bb:30:a7:eb:bb:cd:3f:7a:
                    a4:ef:9c:67:34:b7:38:71:27:37:67:01:f4:7d:56:
                    45:0b:39:d7:05:43:aa:ef:cd:6f:a5:15:d9:c6:b9:
                    a8:a9:f9:e8:a9:33:cf:b3:4b:ce:ee:f3:e2:c0:d1:
                    4e:a0:d6:b5:f6:f9:d5:db:08:1f:f8:62:ae:52:b7:
                    7c:3b:cb:fb:ab:e1:e8:72:48:6b:77:70:93:12:e1:
                    bf:ea:d2:a5:40:b1:60:70:33:e1:a4:95:a1:35:5b:
                    4a:44:d3:ce:4f:80:96:db:e4:db:ff:77:74:a3:64:
                    23:fc:13:cb:e9:67:db:d4:ec:f3:a0:8a:15:f4:4d:
                    62:a9:84:94:e1:de:c8:fb:84:98:5b:9d:d4:4c:e7:
                    52:b3:51:e2:28:80:5f:20:31:d4:b8:fc:3e:59:61:
                    72:57:ab:9e:b3:cf:86:f9:46:d0:a8:41:cd:2b:1d:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4E:54:78:19:65:82:BB:DD:24:7A:8C:C0:9A:38:EE:49:82:18:5C
            X509v3 Authority Key Identifier:
                keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:36:d6:8b:aa:e5:e8:1c:b4:1e:1e:3e:35:53:32:ca:bd:9e:
         c5:72:5d:05:87:59:0a:3d:3c:ea:74:45:9e:99:04:21:8a:34:
         ef:c2:ab:72:d2:6a:5f:91:61:ec:c4:9d:9d:aa:2c:ce:f3:e5:
         da:4d:27:49:5f:90:24:06:45:0a:20:95:7d:ce:e9:8a:ec:d4:
         af:22:2b:d1:7d:a4:98:ec:4a:89:99:56:11:58:0e:d5:e5:0f:
         ca:32:49:2e:c5:94:59:95:78:6d:cc:50:9d:5a:be:9d:71:54:
         0f:e1:6d:99:07:3e:46:7f:e1:c7:03:92:89:26:d1:c8:2f:9f:
         a2:53:15:01:49:7a:b0:a4:d3:56:fe:13:13:74:38:22:dc:9f:
         f6:53:1a:90:5e:f2:ff:57:c0:50:4b:b1:b4:27:d7:8d:bc:78:
         74:d0:c3:1a:73:90:03:2b:e5:65:3f:c7:da:2c:4b:6f:c2:a5:
         5c:ad:f3:be:91:ab:c0:30:4d:9b:b3:53:47:ad:56:be:83:b1:
         a6:6e:ee:3b:0d:ae:db:be:7d:dc:21:63:62:58:41:23:fd:a8:
         e9:67:d1:a0:db:86:83:89:ea:47:a1:04:e7:9b:7b:38:77:f0:
         1d:87:de:13:26:fb:44:62:fa:1c:b0:8f:77:a8:2c:4a:af:aa:
         8c:bb:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----