Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
File:                     wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json)
Hash identifier:          52ffA0yKcvHyyKqmz8RHrO6PnSjfIEPjgKApSE48s5g=
Subject key identifier:   CF:B5:82:16:48:E1:DA:77:74:60:94:35:DB:D0:59:CA:26:1D:CE:5C
Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
Certificate issuer:       /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Certificate serial:       01962E61D6DB28452EB36B62135E20794DF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
Manifest number:          0949
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 9QfEv6VDYJHwg-_mBcw3nPg902w.roa (hash: bDGQkiI5avL3G45Js05YIuwiQofAZ2dxukXBkwwmDkY=)
                          2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: moOqV6vMB5sOqmsOKjXcam0kJ8tj8MIKwb2ebV1Q+Jc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:db:28:45:2e:b3:6b:62:13:5e:20:79:4d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=cfb5821648e1da7774609435dbd059ca261dce5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:f2:56:58:28:2e:81:ca:c1:f6:9e:8d:95:
                    67:89:dd:67:36:8a:9f:14:53:4e:35:93:09:89:c0:
                    6c:61:6c:5c:c6:ea:a8:ea:2d:84:14:09:cb:b8:be:
                    cd:ed:a0:f7:a2:e3:15:49:dc:a2:77:28:6c:7f:2f:
                    49:05:cf:cf:9d:57:68:fe:d0:0f:31:c1:dd:4f:48:
                    88:65:c9:51:16:4c:ac:c0:29:07:0b:b9:ad:88:5c:
                    bb:e8:09:c5:9c:85:79:3a:57:7b:32:99:74:96:0d:
                    b3:63:85:77:60:a4:db:15:e2:2e:ab:f5:2a:16:d2:
                    c5:d3:90:53:24:30:f1:82:72:50:59:b6:c0:52:15:
                    c2:0e:26:d9:9f:b6:14:70:7e:4e:18:3f:41:0c:69:
                    3a:7b:64:3a:f3:0b:97:5b:fa:24:bd:cc:cc:18:50:
                    73:f7:96:47:37:e8:72:57:1b:ba:3b:e2:70:fa:9a:
                    62:b1:9c:95:e9:97:93:cf:ea:8e:e3:af:b8:5e:e9:
                    80:56:55:94:93:b8:6e:f4:6a:da:5c:6c:c9:6f:ed:
                    84:65:b2:0d:0f:75:a5:19:5e:08:92:82:33:c3:31:
                    a8:ab:7e:07:ec:13:e8:bf:5d:db:81:12:d3:17:72:
                    39:5e:1b:87:3d:25:3e:3c:9d:e9:d8:42:2d:35:3b:
                    4c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B5:82:16:48:E1:DA:77:74:60:94:35:DB:D0:59:CA:26:1D:CE:5C
            X509v3 Authority Key Identifier:
                keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bf:22:f3:76:84:5c:3c:4d:42:6c:9c:e9:59:d4:c1:44:91:
         f7:bf:ef:4f:8c:4d:23:5b:b7:79:ab:49:58:43:5a:1c:d4:30:
         36:61:c3:32:ad:76:f5:93:f9:fa:9b:07:a9:39:06:b0:a9:91:
         ee:fe:d9:22:2b:63:44:c3:e0:98:36:91:ae:5f:1b:94:61:39:
         26:e5:0b:67:cc:fb:db:c2:2f:64:75:20:a4:9c:dc:d2:19:85:
         d2:c6:26:bd:8a:04:f5:7b:9f:73:5b:26:8e:40:15:34:f3:60:
         0d:37:36:9d:be:90:75:5f:98:df:1c:d7:4f:4c:84:9b:6c:37:
         ca:95:b0:7d:27:b5:22:ec:ab:b8:8d:ad:ec:73:09:d7:3e:aa:
         84:19:4d:06:f6:b9:e2:85:80:64:a6:68:c5:12:b4:61:23:b6:
         97:d7:b4:3b:53:d5:02:a0:5d:14:3d:d5:cb:45:44:aa:15:88:
         27:da:5f:27:52:de:77:b8:69:d6:32:04:f7:30:ee:41:f9:92:
         de:06:d8:02:98:43:db:8a:35:15:5b:62:a2:22:11:34:10:68:
         8e:18:a7:bb:0e:0e:29:9b:51:e6:9b:42:9f:e5:da:4b:68:6a:
         78:47:e1:0b:9c:18:eb:a8:14:e1:cc:3b:64:a6:7f:04:dd:2d:
         e5:3f:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----