Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File:                     wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier:          yg5zvWk4qVmx4mgPW/EQ2L3q7l0vr1j5LyFMXi4imHM=
Subject key identifier:   B2:2A:DF:DB:95:BA:21:47:F3:08:A1:CE:61:FB:70:D5:2E:FB:AE:EC
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer:       /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial:       01962F06A8C14D918B0C04F4E04CE8F3AD41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number:          01DF
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: UsAeeJKz5x5UM9R7HFO2Dgzi0jA.roa (hash: FFiDVfqG1v30MyW/O7JaJbrLiihT2L0idYJ853z7lV4=)
                          2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: WSEBun447wtzjLVdtvweRYJJOP1Cj5OE4YthTjtdnt0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a8:c1:4d:91:8b:0c:04:f4:e0:4c:e8:f3:ad:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=b22adfdb95ba2147f308a1ce61fb70d52efbaeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:64:66:66:b4:59:f9:c3:56:9c:04:4f:8a:
                    d3:17:ee:47:99:81:66:c6:56:7a:5b:d0:7c:48:c2:
                    b0:35:d2:46:bd:5c:ac:63:6e:de:69:b0:98:06:2a:
                    3e:fa:ef:82:dc:5a:7d:66:c4:07:b2:01:2a:dc:e9:
                    a4:64:86:d7:f5:0d:66:60:56:85:4b:68:ba:92:fb:
                    53:73:72:13:0a:85:35:21:08:77:cd:2e:bb:66:4c:
                    8c:dd:dd:95:20:6e:f4:8d:57:f6:02:0e:02:01:eb:
                    bc:53:21:37:12:31:a4:80:60:11:ef:9d:df:25:42:
                    f3:4a:41:dd:55:ef:cb:a6:4e:fd:c3:57:ec:5f:62:
                    9b:66:c1:5e:06:27:92:fa:81:72:72:03:7f:31:de:
                    4a:a6:5b:69:3b:43:04:d1:88:67:24:7e:0a:a0:54:
                    14:ae:a7:38:e6:72:9c:bc:15:26:25:85:2e:c3:d8:
                    69:ec:2b:28:86:f7:7b:63:77:a6:bc:ec:23:95:59:
                    37:dc:f3:e8:8f:c8:d3:9e:24:61:fd:ac:08:d4:a4:
                    71:1b:63:6c:08:17:b4:9f:b0:3d:3f:f3:a4:aa:a6:
                    0e:3a:8a:9d:c1:55:73:bb:1d:4c:05:2e:71:ae:5e:
                    1f:63:79:27:25:98:9e:1b:02:f7:1c:2d:b9:a7:26:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2A:DF:DB:95:BA:21:47:F3:08:A1:CE:61:FB:70:D5:2E:FB:AE:EC
            X509v3 Authority Key Identifier:
                keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6a:28:28:ac:f1:1a:4d:23:e2:1f:f9:78:94:d9:11:76:73:
         17:62:39:91:37:7f:9d:62:61:06:a4:73:d3:c3:99:59:c3:79:
         c8:d5:f7:2b:ad:fc:55:f5:06:78:c1:b6:54:68:00:2d:5c:c2:
         69:a7:44:e1:55:83:5c:99:88:41:a4:40:c4:99:45:bb:ea:80:
         2e:67:ff:83:46:ba:57:e4:46:e4:46:d1:97:f2:45:59:54:e5:
         a6:c3:3f:c6:d1:ac:22:c3:89:68:7d:01:92:a5:43:5a:a9:da:
         25:76:05:18:10:bb:68:37:d2:6d:fe:55:d0:5e:ce:2f:2e:4b:
         d4:2f:9b:d5:5f:52:29:f4:d9:16:4d:9a:30:39:50:1e:33:98:
         c3:ae:e9:64:76:6c:2b:a5:85:0e:4b:da:be:55:b7:97:50:84:
         ba:bf:1a:d2:f5:0a:ef:0e:6b:8a:2a:d5:0f:14:31:46:f6:bc:
         74:3c:00:b4:8c:c5:ca:19:63:ac:ed:e2:51:53:64:90:c2:2b:
         54:7c:44:b2:ca:db:39:8e:e2:31:da:f3:df:71:2b:ae:e2:8a:
         25:7e:e7:6c:58:e6:d6:f9:d1:89:52:8e:d8:be:88:96:4b:47:
         cc:f0:a5:62:40:93:fe:6c:4e:4f:43:83:83:77:13:e4:7a:0c:
         45:90:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----