Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
File:                     wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json)
Hash identifier:          K54d1t7mM/ZO76B35j0v5Kect1eYZRoakzHSfQVi0jM=
Subject key identifier:   ED:36:D0:74:A6:21:AC:3C:99:23:B9:CE:3A:F8:18:9C:7B:F8:50:2A
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Certificate issuer:       /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial:       01962F749C3F777266410F6FEF487136ABF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
Manifest number:          09AC
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: 6qgSMfZ3_YfeL-wTXFWx5LVQFts.roa (hash: avRjJs3tQZCWYxxzrvKfKWMx6I1KbzcTNaTHuCyd7uA=)
                          2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: 1XyFmw0AdJ1Z58pfSm0Ni8hgcVgkF6QLBsj2df9gEkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9c:3f:77:72:66:41:0f:6f:ef:48:71:36:ab:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=ed36d074a621ac3c9923b9ce3af8189c7bf8502a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:b5:25:e4:03:48:a9:60:08:c8:7c:82:97:
                    93:42:08:11:6e:cc:d7:8a:2c:77:09:f1:15:d0:b7:
                    c6:79:54:48:4b:8c:1c:3f:58:1e:d5:ac:d4:ce:33:
                    b0:85:e4:74:4c:8a:ed:58:b8:10:1c:b8:c5:5b:74:
                    0d:54:61:a7:3a:3e:db:5c:5a:c6:31:b5:ec:18:68:
                    b9:23:cc:fa:a2:5b:db:b4:b0:d6:74:43:5c:02:b1:
                    56:7f:54:58:2a:30:81:f6:64:c4:3f:51:43:0f:58:
                    4b:73:4d:5f:f3:eb:32:05:df:30:3c:bc:7e:0f:ad:
                    62:33:6d:30:79:c7:33:57:08:3b:e6:d1:b2:37:97:
                    26:7a:93:f6:3c:ad:11:8c:20:99:96:7f:b4:14:fd:
                    a1:f3:2b:b1:b5:2d:9c:d1:0c:2b:f4:a7:4a:fb:25:
                    e5:2f:67:f9:f7:35:15:94:bc:2f:fe:9d:8e:ae:41:
                    22:3d:c3:de:53:7b:b8:2e:8c:51:2c:ea:f4:30:09:
                    8b:d6:f1:0b:d8:03:4e:86:89:87:3d:a2:4d:8d:ea:
                    d0:d9:06:a1:f9:83:21:17:05:e5:dc:f5:fc:63:30:
                    60:94:2f:ac:99:03:ac:8e:da:ca:d2:32:65:7e:12:
                    05:83:8d:44:6d:15:44:61:d9:4b:5e:01:a3:3d:4c:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:36:D0:74:A6:21:AC:3C:99:23:B9:CE:3A:F8:18:9C:7B:F8:50:2A
            X509v3 Authority Key Identifier:
                keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:12:7d:94:35:8a:37:d7:f1:61:a8:bd:11:b6:c1:59:ad:8c:
         ca:57:c6:0c:64:9f:d7:d6:68:56:b6:9d:58:a0:3d:91:0d:43:
         e4:2b:8d:7f:6b:be:82:69:a2:37:d4:76:54:aa:17:a0:b5:79:
         62:fc:4c:56:d0:b3:8b:29:99:73:23:90:0a:94:fb:f2:61:f6:
         ef:14:f4:36:c2:ae:32:8f:e2:c0:a2:e0:9f:8b:bb:20:1f:a8:
         64:87:92:39:ed:12:08:17:d8:04:8e:8a:38:4d:e0:7a:80:23:
         a7:f5:d6:1f:5b:9a:6f:21:c8:a5:2e:1a:aa:68:61:b2:b9:de:
         80:e0:ce:01:3f:52:c0:0f:a3:d5:37:c1:6f:59:a8:f6:16:7d:
         9a:01:a0:b3:74:76:0c:3b:c9:a4:a7:c8:b8:07:da:17:ba:21:
         37:e9:d5:3d:3d:ce:cc:ab:93:35:bf:48:6e:dc:6d:e4:65:d6:
         97:a4:5c:69:35:64:f2:08:be:0f:04:b0:b1:1b:73:bf:31:6d:
         be:fc:d3:f1:87:d1:a0:94:94:15:cd:e4:a0:e9:a8:06:be:71:
         3f:d6:1f:64:7f:ec:14:29:a9:72:78:91:44:48:45:b7:e8:9e:
         f9:14:20:35:83:23:85:ab:33:a9:a3:0c:e0:b5:ee:e3:b4:e0:
         b1:66:54:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----