Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
File:                     wC4yPxvhY8TX-LiKrY2q--AQbW8.mft (raw, json)
Hash identifier:          0tvOo23089LwZkEP8zI7N/2OC7TuVqVkAlXb0RXvijQ=
Subject key identifier:   D2:EE:96:BC:F4:E3:C3:7E:F1:A0:51:9F:A9:9E:B7:B8:D6:35:4F:FA
Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
Certificate issuer:       /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Certificate serial:       01962E98686CABE54C5C35ADAFF28E24E7CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
Manifest number:          08
Signing time:             Sun 13 Apr 2025 10:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:02 +0000
Files and hashes:         1: wC4yPxvhY8TX-LiKrY2q--AQbW8.crl (hash: 8D/TTiI24iNWWTNEkrlzlyTM1bi6DgJ1WlCNSlEyPIs=)
                          2: z4hyHniAgsjhip0WWSLXoanCOdQ.roa (hash: M3AlMbZsNGFOvYnoOV0xvC8E+XBvcvrqkI0jCnJgG2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:68:6c:ab:e5:4c:5c:35:ad:af:f2:8e:24:e7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
        Validity
            Not Before: Apr 13 10:01:02 2025 GMT
            Not After : Apr 14 10:01:02 2025 GMT
        Subject: CN=d2ee96bcf4e3c37ef1a0519fa99eb7b8d6354ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2d:08:96:1a:94:36:80:64:0e:b1:1f:fb:57:
                    74:5e:15:4b:03:0a:07:bc:a1:e7:34:90:74:a9:19:
                    2c:4a:9b:0c:41:55:dd:40:bd:d9:20:40:16:fb:91:
                    e0:30:84:50:16:25:5e:9f:69:7e:a0:4d:3d:0f:d0:
                    ea:4c:bd:b2:64:40:b3:bb:d2:56:22:28:4c:e6:fb:
                    18:19:9e:42:01:88:d2:0e:b3:f9:e0:a8:03:9a:f2:
                    0e:7b:a4:f1:93:39:80:a0:fd:d8:40:d2:2e:0a:52:
                    fa:f6:4b:64:25:cd:5a:79:db:54:71:12:a9:e8:29:
                    17:17:51:d6:23:3a:06:4d:1a:ca:a8:56:6a:63:97:
                    35:8c:6d:0d:72:79:96:92:79:73:ba:37:b1:dd:fd:
                    8d:f8:e2:8d:08:56:c6:08:28:ab:96:20:59:29:21:
                    f1:44:36:03:3d:b1:eb:f2:c4:b6:15:21:1f:1e:7b:
                    9b:8e:31:ae:40:fb:99:57:a3:b5:f4:83:be:ad:f9:
                    db:95:17:f2:fa:5e:8b:0f:fb:d6:51:b8:32:92:ae:
                    5e:fd:95:7c:6b:31:2a:de:18:ac:1f:a6:a0:be:9e:
                    e7:cf:63:20:b4:fa:85:49:2b:5b:8a:59:99:45:91:
                    95:66:36:a4:97:43:58:e4:5d:65:c7:cb:3b:76:31:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EE:96:BC:F4:E3:C3:7E:F1:A0:51:9F:A9:9E:B7:B8:D6:35:4F:FA
            X509v3 Authority Key Identifier:
                keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:50:97:7b:ee:51:71:f8:4c:5c:7a:5d:b9:60:87:6b:3a:8d:
         06:18:c2:58:97:65:ed:d7:43:a2:d2:19:9d:64:62:fd:3f:0b:
         f7:58:e0:4b:3a:7e:f1:5f:ff:e4:27:db:13:80:ee:1d:46:00:
         49:b7:2b:05:0d:d4:10:51:75:5b:61:53:34:3d:85:86:0e:0d:
         05:fb:7a:c6:9a:0a:a2:73:44:ed:14:b9:2e:2a:a2:b7:3b:8d:
         b4:8d:95:f4:b0:e4:44:0e:20:50:e8:2a:54:9b:f6:8b:3d:7b:
         e0:68:67:ca:ef:b3:56:70:52:35:39:a6:58:ea:bc:18:0f:86:
         44:07:42:08:cf:38:b4:26:d5:13:d2:a5:4e:56:36:6b:5c:22:
         ca:4a:4f:1d:8b:44:49:93:20:81:30:b5:22:a3:75:3d:9a:c1:
         f0:97:c2:ef:0d:55:eb:41:c3:d3:6a:1c:4c:04:cd:2b:30:2c:
         2a:b8:a9:db:cc:92:9f:a9:67:01:51:f1:e5:7c:b8:41:82:88:
         a3:d9:97:c0:78:3a:f2:4d:eb:e1:69:bb:cc:5c:2f:7c:e5:cd:
         ee:d7:03:c8:66:de:9e:46:bc:bc:59:d6:3e:82:c6:5b:c1:0e:
         8d:19:93:f9:65:bb:0c:ab:6e:f2:5a:fe:34:5b:8a:8d:3b:b5:
         64:e1:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----