Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
File:                     wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json)
Hash identifier:          CG19hS1XLmlYdngFNMo+3SZ/v+0lTaYUqX0eyNFQhDo=
Subject key identifier:   57:03:11:33:99:0F:83:1D:52:19:5C:70:23:F5:66:C8:24:CC:43:61
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Certificate issuer:       /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial:       01962DF3D16931F35AE65DDDCC5F7A767DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: XEsqeKOf3nUKp6N27Tk-w17zShA.roa (hash: k+ZjcSbWsbCQX+BZ6yWaMdK9CN57/SVKpUlCaIxWc4g=)
                          2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: suPIIFEBEP/LpPrLHIMaghSkRUP1PTO8Jq3cUOca4Mk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d1:69:31:f3:5a:e6:5d:dd:cc:5f:7a:76:7d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=57031133990f831d52195c7023f566c824cc4361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:50:de:2f:e8:0c:27:d5:f5:ca:f4:7c:bd:
                    54:48:01:3b:80:62:63:c7:30:ea:33:02:e3:a8:03:
                    42:d9:cd:2d:58:0e:0c:ae:aa:38:98:69:aa:aa:a0:
                    d6:d4:fb:3b:2f:ff:5b:f7:6e:d7:bb:d4:b4:2c:c0:
                    e8:9f:9c:51:cc:19:0e:02:43:24:f6:8a:11:4d:56:
                    a5:fc:39:76:c3:95:c2:ec:c8:71:e1:3d:43:ba:ea:
                    fd:24:16:29:4a:17:4a:78:4f:56:61:e9:09:2d:a9:
                    bb:df:8f:d5:46:cf:06:4f:96:19:53:35:68:f7:eb:
                    69:3a:3f:03:1a:04:55:62:fc:dc:7e:44:3d:c9:37:
                    31:cb:0e:75:50:a1:7a:e6:d5:0d:ce:66:5f:a2:cb:
                    05:57:ea:10:db:2e:03:4b:6c:1c:39:7f:b9:cd:72:
                    05:53:8d:67:49:07:d0:99:b2:4f:49:2a:9a:db:ce:
                    3e:95:8a:a1:d5:f6:ab:6f:29:68:ae:61:6d:f2:ed:
                    d4:17:ae:15:8c:74:1c:7f:90:46:b2:98:1f:33:14:
                    70:08:71:2c:3e:a6:af:ac:f7:54:d6:34:71:8c:95:
                    05:3f:be:7b:27:85:37:91:92:2a:63:c7:d0:b4:d3:
                    fe:20:30:be:e1:37:2e:63:b4:7a:58:f4:94:43:f4:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:03:11:33:99:0F:83:1D:52:19:5C:70:23:F5:66:C8:24:CC:43:61
            X509v3 Authority Key Identifier:
                keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:04:cf:87:21:4b:9b:d1:56:a4:83:92:ab:e6:d7:a3:c2:38:
         40:fb:22:0d:4f:7e:01:da:d4:ed:4a:5b:98:92:7a:ff:3c:68:
         35:d5:4c:4f:8b:7b:88:f6:92:3a:a4:ef:18:c3:8f:2f:13:e6:
         e0:24:54:d4:54:80:e2:c7:f7:7b:ea:38:81:1e:8a:09:21:ba:
         9e:b0:62:36:4d:d2:71:5e:0a:48:1a:a9:5c:b5:d7:1c:ec:dd:
         ba:ca:8f:46:94:70:c1:04:0a:e0:ea:9d:1e:9b:66:09:a6:3c:
         8b:be:21:68:ff:73:c4:b2:80:f5:e0:b0:fe:6d:85:7a:40:19:
         a4:13:73:6a:94:74:dc:61:7d:3b:13:25:04:ba:b8:cb:ed:d4:
         de:a3:56:67:1f:90:c7:73:cc:f7:04:ec:e9:60:7c:da:be:fc:
         9b:f4:a2:29:7e:ee:d7:f7:cb:d0:a0:a5:87:0a:34:6f:22:dd:
         ee:9e:f8:8c:44:68:27:d5:2e:8b:98:13:98:45:6f:d3:b4:07:
         d0:fd:f2:84:e6:c7:a2:8d:7e:31:39:ff:15:2b:63:bb:96:35:
         a6:cc:bb:43:b8:78:b4:d4:8b:12:64:21:00:c9:13:e0:5b:42:
         e9:af:f2:5e:0e:53:6f:9a:01:7c:38:10:7b:5a:ee:74:ee:7d:
         ec:c7:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----