Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
File:                     wIi1a9ngFvm8Uhr03CSebRJWsd8.mft (raw, json)
Hash identifier:          EG9mEnxKtgdmjwHpsNRIKy+MAxzy4eJdk2brim8TSBg=
Subject key identifier:   05:47:04:52:27:7A:3B:AE:F9:49:3A:86:9E:89:EA:21:44:A3:91:9B
Authority key identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
Certificate issuer:       /CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Certificate serial:       01962F3D51423FA764FDE62525CAD08A20C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: fc5qhRUu_bBsdB33TSVsq6f89o8.roa (hash: lZbvlThe0e2vAA/qHSYCgpP/K95jAN4HZKyoWaj+RfI=)
                          2: wIi1a9ngFvm8Uhr03CSebRJWsd8.crl (hash: E4P9bGFM/zmStYb0yXfEGRn0BBZq1oFlc32iu825M+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:51:42:3f:a7:64:fd:e6:25:25:ca:d0:8a:20:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=05470452277a3baef9493a869e89ea2144a3919b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:32:f1:27:4c:56:00:2d:48:95:43:84:c3:
                    39:f2:d5:27:5d:ed:f9:e1:da:a5:31:04:1e:25:3f:
                    1c:13:3b:99:a7:db:d8:55:1d:04:80:21:fa:cd:f7:
                    75:af:a1:44:6e:6e:cf:d1:8b:4a:ff:8b:2e:60:26:
                    05:1c:40:29:fd:5b:68:00:84:cc:f6:bc:a8:e5:fc:
                    80:2a:5d:bd:1a:15:7d:f8:73:a0:93:3b:0a:1d:c2:
                    30:55:31:79:e3:5e:52:3c:4c:a1:d0:8b:2d:4c:47:
                    68:80:7e:8a:b9:96:63:7b:0e:e8:ad:c7:c6:74:f9:
                    0b:c4:1d:2c:4b:68:e3:fb:05:3b:b6:cb:20:e2:67:
                    19:06:87:db:17:39:d6:49:97:f4:55:5f:3c:ad:84:
                    23:df:c5:b3:3e:d8:37:ef:a7:84:4d:41:e6:f2:20:
                    03:9e:7b:77:6e:67:94:f3:4f:4f:e6:4d:a5:bc:94:
                    48:39:c4:f0:fb:0d:a9:67:0b:49:41:5a:ba:fb:9e:
                    eb:bf:80:11:b0:57:dc:fa:74:df:c8:9c:e9:9f:d2:
                    75:ca:d5:5d:de:37:2c:02:0f:fd:32:29:77:c8:7d:
                    c1:fa:08:4b:88:26:45:21:3b:18:c8:4a:7f:12:cf:
                    96:a3:16:f2:ff:ee:ee:39:fe:e6:97:2d:c7:57:d0:
                    0e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:47:04:52:27:7A:3B:AE:F9:49:3A:86:9E:89:EA:21:44:A3:91:9B
            X509v3 Authority Key Identifier:
                keyid:C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:86:65:19:61:18:8d:bd:b3:82:f9:84:cb:e7:ef:af:9d:82:
         3b:31:5f:62:d1:c8:5d:f2:0f:63:37:a9:25:75:cb:21:23:50:
         0d:bf:03:b8:95:0c:7e:61:70:80:d3:08:70:e1:a7:69:60:ef:
         57:51:15:94:e7:83:e3:ee:92:33:40:6e:4f:0a:ab:cd:0b:91:
         b0:49:fe:3a:ce:47:b4:48:45:b0:ce:6c:85:8f:f5:af:9a:32:
         40:29:77:da:a3:79:f0:e5:6e:91:08:a9:b4:20:6e:7b:a1:63:
         e5:d7:f9:4a:d1:6d:bb:31:42:ee:26:7a:0d:c9:ee:71:a5:89:
         95:c6:9d:73:02:3c:c0:4c:68:9e:68:e9:02:63:95:48:b0:71:
         69:d2:69:20:47:99:a3:88:69:bc:48:d7:c0:ce:ed:af:bf:e7:
         60:53:22:6a:14:20:6c:15:4f:93:49:58:1a:b6:1b:4d:91:d6:
         ed:2d:48:04:69:d8:3e:e4:10:b9:b1:a6:c0:2e:a9:7d:b2:49:
         c9:c3:1c:96:be:77:7e:bd:7f:08:95:26:a2:fe:e7:ed:15:06:
         34:d7:a2:f5:a3:bf:06:0b:70:79:01:2d:0d:67:76:ce:79:93:
         8f:f9:48:7a:b7:12:d0:b0:3f:1c:f0:1c:77:66:5a:ea:48:24:
         7f:e7:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----