Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File:                     WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier:          XDh20EvjzqCWYqKGycEjvPnH049pRp3YDWtNTqP/mQQ=
Subject key identifier:   08:05:A7:F5:56:02:EB:E7:9F:F0:BA:96:6A:60:2F:5C:E0:29:47:15
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer:       /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial:       01962E2B14CB3D958022379F79AAA50501CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number:          02CD
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=)
                          2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: 4G5/0rmx3LPDMKGf0Gj8TGHTvDfscJm9YbYtarf7pCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:cb:3d:95:80:22:37:9f:79:aa:a5:05:01:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=0805a7f55602ebe79ff0ba966a602f5ce0294715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:18:b1:2a:26:ab:f6:02:6b:7a:34:b5:71:
                    d9:94:bf:d1:5c:08:d9:1a:98:3f:0d:59:e1:01:51:
                    ce:68:37:ae:cf:04:6b:20:f6:60:04:8f:41:16:92:
                    c8:5a:ed:0e:99:d2:96:1e:c7:90:66:7f:32:68:e1:
                    f0:0e:38:ff:04:76:d5:9b:78:63:c4:19:83:ca:59:
                    0d:90:28:71:37:95:74:79:2e:27:05:14:68:5f:b5:
                    09:71:91:e4:6c:d4:fd:11:ca:fa:f7:70:ca:bb:69:
                    bc:82:3d:f3:20:1f:38:b8:f1:7f:7e:4a:49:43:50:
                    53:5f:bf:15:66:00:46:ff:54:54:09:8d:d0:0d:b3:
                    71:f4:d7:93:7e:a9:d1:a7:5a:d9:81:e9:3e:c5:f1:
                    57:f1:be:72:20:13:d0:4c:f2:14:2c:40:1f:35:c6:
                    78:a9:ae:12:fd:4b:9e:0c:86:4a:c8:a8:ca:7a:34:
                    23:64:94:06:e2:dd:f0:12:fd:84:4c:48:44:3a:25:
                    66:5b:ea:79:35:fe:be:03:3b:ca:2e:09:4b:ce:d2:
                    4a:3e:68:4c:fb:13:e8:e0:ba:cb:76:5a:06:c4:d0:
                    5d:dd:a5:74:0b:b0:ca:e8:c3:9f:42:4a:b0:1b:0c:
                    88:ad:1b:cf:ef:16:24:e8:c9:c0:23:1e:ec:fd:b2:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:05:A7:F5:56:02:EB:E7:9F:F0:BA:96:6A:60:2F:5C:E0:29:47:15
            X509v3 Authority Key Identifier:
                keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ab:c2:50:88:93:57:ec:bf:f1:53:54:9f:37:46:a9:79:3a:
         5d:cd:5b:97:b3:2c:06:17:0a:8f:59:4f:fc:5c:9d:79:f8:83:
         9c:33:96:27:f6:b1:eb:16:5b:3d:77:1b:a2:18:cd:8e:01:e7:
         0b:cb:04:d9:a7:c3:cf:16:4a:c9:4c:c5:ac:c4:b7:be:53:e7:
         07:41:52:ef:a6:9e:f4:86:2d:6f:87:ad:e0:1a:d2:f4:ee:be:
         58:c9:2e:61:ab:a1:3b:dc:c6:4e:6a:98:0e:bf:c9:64:2f:3d:
         b1:4e:cd:f4:73:11:d9:f1:42:62:22:4b:36:b2:a4:ae:c4:ac:
         fe:8b:90:a1:4e:63:55:9f:d7:46:8a:58:06:d1:7b:60:a2:6e:
         16:70:41:04:b8:0d:71:ba:13:f1:b3:8b:2e:91:c7:18:63:45:
         38:d6:97:c7:82:40:eb:fc:25:e3:91:e3:52:c1:a7:67:e7:ac:
         b8:71:1e:60:97:9b:22:cb:d0:eb:78:ef:bb:a9:d5:53:85:a1:
         ea:d8:50:2c:51:2a:36:32:1e:9f:58:fa:c0:7b:6f:cb:d9:71:
         c2:90:24:6a:e6:99:94:41:81:62:83:2a:cd:51:29:2f:1a:0b:
         48:3d:e0:24:40:c0:83:86:1c:99:88:64:20:e3:76:d0:98:4c:
         13:30:e4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----