Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
File:                     wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json)
Hash identifier:          CRY+vVGYAboNPWAnrzbJSHrc608X1omgf4ufn/ggHsk=
Subject key identifier:   D1:F2:E2:A0:C7:B1:91:77:3B:84:5C:7F:88:B1:16:32:F8:74:82:DA
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Certificate issuer:       /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial:       01962F0736BCFE6AF66191B27B0D4EF0E60F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: 1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa (hash: le2bdDjj8eJvjQqLPVAV9ifpc64QyRhmisD9ayP5j2w=)
                          2: WfTKVc2urWFHINs-H7ByO8d8wxU.roa (hash: vrGq1fPxckNV2umjKEkVDvs5jt8ww7idFEdo+nD8HaU=)
                          3: tq6G4XKwLkPscmGDzl0ViLLGYc0.roa (hash: gCrgWGNDXJJp5RhoxWhID/tfHWwjzd875gYTpw7zJGg=)
                          4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: UfX4UF8WQfFJI+PYn2LmXX40gcPy4lgC2pJ5yLlx1SY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:36:bc:fe:6a:f6:61:91:b2:7b:0d:4e:f0:e6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=d1f2e2a0c7b191773b845c7f88b11632f87482da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:56:2e:3f:30:6a:c3:83:fc:09:6f:18:67:
                    e3:4d:3d:49:39:b4:2b:c8:52:e9:15:bb:f6:99:c6:
                    f5:5a:7b:5c:42:e5:06:ea:9a:18:87:89:51:5a:45:
                    cb:53:c2:39:5d:2b:02:10:3b:b8:3e:b9:82:c8:97:
                    f3:e3:ae:1a:6d:74:8d:a6:c6:d3:f7:b7:d0:23:47:
                    88:3e:5f:1c:cc:ef:d6:68:af:64:8a:a8:1f:8e:38:
                    37:3e:54:42:0a:07:9c:7a:7c:c7:f4:87:8a:62:04:
                    88:ad:21:7f:50:07:ee:36:99:12:9b:ec:16:73:12:
                    d0:8c:d9:df:93:45:a9:5d:bb:05:be:ac:66:3e:a2:
                    96:dd:57:e7:b8:73:e2:9b:fd:a4:9c:a8:6b:90:23:
                    14:1b:c3:11:c8:fb:65:0f:f1:e8:5e:83:92:5b:e5:
                    8e:02:e6:e4:04:a8:50:eb:e6:0b:ad:7e:76:ba:aa:
                    9a:46:ea:ad:63:18:fa:95:61:05:82:6e:00:46:4a:
                    64:cd:12:19:75:2b:a3:d8:a2:72:f9:27:62:83:6b:
                    d5:5e:c8:c4:84:90:1c:49:29:10:bc:f0:89:4a:e7:
                    bb:2b:f2:ca:ab:b5:89:de:4b:a3:d1:82:06:9f:3d:
                    93:b4:03:2c:49:42:58:8d:0b:e6:a6:8c:d8:de:c3:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F2:E2:A0:C7:B1:91:77:3B:84:5C:7F:88:B1:16:32:F8:74:82:DA
            X509v3 Authority Key Identifier:
                keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0f:ae:62:62:dc:c2:87:87:e4:44:13:e3:01:76:ec:6a:ae:
         bd:ce:b9:76:59:30:d2:cf:87:9f:c5:dc:bf:c6:f1:d4:47:f9:
         3e:dc:74:db:54:06:fc:65:4d:a5:7d:f1:d1:80:e1:4d:9e:07:
         e1:23:d4:22:6a:a9:d1:1b:73:c2:33:35:c9:a3:e1:de:04:00:
         d4:98:11:95:f7:1c:6f:af:41:9b:05:b8:29:ee:eb:9a:5a:c4:
         67:8b:77:dc:ad:e2:5d:3b:8c:86:d6:a7:0e:1f:9b:80:2c:dc:
         57:58:3b:fc:dc:69:b3:4c:ff:d1:6c:46:00:43:e5:23:35:b2:
         d3:24:1f:d8:8c:ac:f8:00:bf:28:dd:82:e9:26:9d:37:4f:66:
         5d:d5:21:c9:f6:d4:30:9c:fc:ef:20:ab:9f:55:9e:31:f9:e3:
         13:ae:3e:48:34:ee:8b:80:f1:d1:8c:19:61:4d:57:a5:f5:2f:
         14:2b:73:84:65:f6:73:84:f6:c3:0d:06:8e:9b:ee:fc:df:0c:
         c3:de:a8:71:0f:6b:ab:6f:2e:6e:d9:b1:26:22:9b:27:21:0c:
         22:a5:b2:a2:25:71:3d:f2:0c:02:60:9d:88:bd:bb:b6:bc:15:
         d5:fc:b7:c3:3a:56:51:10:ce:6d:4d:7d:e2:ec:fc:0f:86:d2:
         a0:80:03:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----