Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File:                     WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier:          yzffnqdsa7sdnd6TC83GJqRhY0oLvwbQt//OAvcePXw=
Subject key identifier:   7A:7C:E5:DD:48:A4:F1:8F:76:D9:78:BF:76:1A:8C:AF:85:E3:41:23
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer:       /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial:       01962FAB8B3338356008EC687AA6240CE489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: QHN1mo-chw8woBmyHxpHaobOHVY.roa (hash: xauKLlFs3GtWKAmak4uwPaBujz4eKBRABiwipmCaZzM=)
                          2: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: Uw40wCtXQulW9poyv6QkYEmg8qOXtyt1Q5DnHwkU5BA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8b:33:38:35:60:08:ec:68:7a:a6:24:0c:e4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=7a7ce5dd48a4f18f76d978bf761a8caf85e34123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:7a:fe:b2:c4:eb:e6:54:b5:dd:88:34:eb:
                    b3:e8:11:cc:e0:0a:8c:b8:f1:46:a1:59:07:ce:52:
                    7f:76:43:52:76:61:73:45:4d:1b:87:54:be:5c:84:
                    dd:a8:ca:db:d2:69:3f:90:ba:b8:12:49:f8:69:59:
                    9f:6b:c4:08:a4:88:33:f6:69:e7:8c:2e:1c:45:25:
                    63:cb:f2:1e:d1:b9:ad:d4:6b:b8:e9:10:7c:49:c2:
                    f1:67:26:cc:60:f8:86:3a:39:dd:f7:b6:23:e4:4e:
                    b7:79:63:db:b5:94:3a:f2:6b:a6:cb:a1:3a:f2:ef:
                    77:bb:ae:39:1c:8b:b7:3f:58:87:62:30:23:f4:71:
                    f3:b3:d2:ec:77:16:41:07:82:7e:f3:c9:21:db:88:
                    8b:20:07:0e:b2:f5:2b:72:a9:54:08:17:4b:42:6a:
                    a3:75:20:31:ae:b0:41:3b:b5:0b:09:da:85:e4:eb:
                    7f:a7:b5:c4:91:c5:a2:5f:94:ec:f4:4d:c1:38:d2:
                    d1:60:30:de:76:14:db:84:ae:94:a3:5a:c7:c7:7f:
                    c9:fd:61:d2:10:0f:21:9c:61:4f:21:71:43:e0:d8:
                    2e:bd:cc:7f:7b:0b:e8:cc:d0:2b:36:2e:cc:4c:1a:
                    9f:65:eb:dc:11:5a:a0:0a:e2:32:79:f8:af:50:cb:
                    bd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7C:E5:DD:48:A4:F1:8F:76:D9:78:BF:76:1A:8C:AF:85:E3:41:23
            X509v3 Authority Key Identifier:
                keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f3:de:d9:90:88:34:d7:70:ca:39:1b:89:61:60:5d:0c:4a:
         93:37:6e:cd:30:c5:ef:8a:cc:8f:47:f6:91:c3:56:27:3c:ea:
         89:02:93:cd:39:20:d2:a1:de:70:7a:3a:b4:4b:a7:61:5f:fa:
         9a:17:8f:87:fc:01:6b:bb:cd:ad:ba:e5:ee:69:50:33:20:86:
         8b:2f:54:4f:bf:d9:0d:d4:aa:45:13:01:89:28:e7:18:40:36:
         c9:c5:d8:44:8b:30:60:c4:87:55:5e:33:26:41:34:b5:9d:01:
         be:42:86:db:87:11:7e:77:e2:db:ea:c0:fe:73:14:26:1c:4e:
         0f:44:d2:3b:42:7a:db:42:6c:6f:c0:33:82:d3:af:f0:cb:89:
         27:77:89:a8:48:16:c7:80:49:61:58:b7:35:3c:b1:9f:17:1b:
         de:cc:74:c4:84:00:54:de:4c:64:93:4c:93:92:a1:25:f2:af:
         03:d3:ba:76:09:db:c8:49:f8:9d:c5:f0:17:24:97:4b:9e:61:
         ee:7f:67:7a:c9:f6:0b:b6:5c:60:40:46:94:88:0d:51:07:21:
         ad:92:f8:a6:54:46:db:b1:46:eb:c1:b6:81:27:5d:dd:e7:9c:
         76:bd:e4:cd:de:85:90:45:dc:bd:32:c7:63:69:5d:29:d3:c5:
         21:66:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----