Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File:                     2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier:          h1mStLBxCCLL7iejMFaTko9L57esWuZGB+85b7eebAw=
Subject key identifier:   13:BA:5F:40:53:B4:6A:16:A0:32:11:29:C1:EA:AD:60:AD:76:47:10
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer:       /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial:       01962DF3A3271B5B67023646C5219AE80922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: g13wJUOUJjgubT9YccQdI82DV7gIgMcnhrKdz+Ofoqo=)
                          2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a3:27:1b:5b:67:02:36:46:c5:21:9a:e8:09:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=13ba5f4053b46a16a0321129c1eaad60ad764710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:35:0e:58:68:d6:67:1a:04:ad:eb:8b:03:
                    04:c5:cf:72:6a:01:c1:ff:85:5b:12:09:23:e0:fe:
                    4e:3c:34:05:93:8c:55:25:43:ac:5d:47:eb:5e:cf:
                    48:5d:d7:8f:68:3b:ee:0d:24:57:8c:6e:43:1d:65:
                    bc:1e:bf:50:ca:04:5a:3d:ed:bf:d9:9f:46:ff:8c:
                    ec:aa:76:15:49:ff:f0:74:8c:62:22:6a:b9:bd:ee:
                    01:9e:02:e3:28:f4:51:f3:5e:ad:30:69:5d:4c:57:
                    ac:6a:fe:e0:35:33:1d:59:f2:be:40:7b:fe:fa:d7:
                    15:56:08:73:03:79:b8:c6:12:cb:ea:bd:26:fb:2d:
                    c3:d9:03:1f:78:eb:6e:c3:79:fc:f3:93:ef:c3:ff:
                    1a:4c:01:4f:dd:09:24:3c:51:ab:25:24:fb:54:01:
                    98:49:de:09:94:e6:d8:4a:08:3b:66:2f:42:f8:e7:
                    d4:72:69:c4:19:e3:e5:59:73:c6:8c:ce:ba:3f:60:
                    36:3f:91:11:d8:6f:b6:2f:ab:e7:9b:1b:c8:d9:59:
                    be:f9:cb:23:3c:7b:9c:5b:10:11:03:55:ae:f8:6f:
                    2e:6c:35:3b:0c:f4:15:69:12:62:fe:4e:a3:fb:c4:
                    10:a1:17:a1:0f:f4:ad:6a:8f:fd:a5:fd:b1:e9:ad:
                    67:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BA:5F:40:53:B4:6A:16:A0:32:11:29:C1:EA:AD:60:AD:76:47:10
            X509v3 Authority Key Identifier:
                keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:66:1c:27:2e:39:6e:00:52:96:38:cd:b6:44:e2:96:97:c6:
         88:41:ef:2e:83:14:ff:ad:7a:a0:ad:c1:c8:64:11:fe:a1:9a:
         5f:26:36:88:e8:b8:4e:5f:f4:28:cc:be:7d:58:b7:e4:fa:9e:
         9d:49:97:6f:a7:54:ed:df:98:58:c6:b3:61:07:6d:23:3a:ad:
         c0:58:23:05:3a:bb:84:2c:1c:c1:86:29:86:de:15:64:2b:5a:
         21:4f:e0:ee:7f:0a:17:94:24:64:c7:49:d4:7c:af:2b:fc:8f:
         43:21:c1:d9:2a:5a:bd:ad:43:e7:a8:ff:6f:a4:57:10:f0:d6:
         f7:fa:81:bd:53:bc:a9:97:bc:90:57:58:b6:99:36:c7:d5:f0:
         79:5e:3e:0d:4f:e7:1e:52:57:ca:c2:e3:91:25:04:1e:3e:27:
         bb:0a:7d:a1:23:ef:dd:ba:e6:62:31:09:ab:68:14:7a:4f:8f:
         2a:52:4f:7f:de:5d:70:76:ee:15:45:d0:20:fe:57:9b:d3:b2:
         e5:86:11:fd:de:25:74:4d:d4:56:29:a7:43:f3:d1:2b:5b:5c:
         2f:e0:82:54:1a:f5:27:bb:6d:f7:0b:e6:a1:39:c5:ca:92:e4:
         87:1d:a0:97:60:a0:52:9a:91:15:cc:3e:e4:96:71:3e:32:83:
         52:9c:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----