Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File:                     wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier:          9a3ABJmiBNi+AYqWrQqN9V6Sow6JgZQH3dkCY9Y1TbE=
Subject key identifier:   3E:29:C3:CA:EE:38:0F:49:DA:BD:7F:B2:D9:7C:23:95:FF:53:EC:D3
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer:       /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial:       01962F3DC0625759714C7F203726C5726FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number:          0456
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: O4itYS8sI_ap1aiE_UeLniEPcvk.roa (hash: yXxFYAIoEwoD51Grvt0xf+Jd5ULkmINTn0EV/SJ5fbw=)
                          2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: 2YPSJrY1PrrnZARcRdMoutUpZ2Hhv9UfIuBTFZLLzCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c0:62:57:59:71:4c:7f:20:37:26:c5:72:6f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=3e29c3caee380f49dabd7fb2d97c2395ff53ecd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:d6:1b:b2:fe:6e:13:80:94:50:96:36:ef:
                    8e:2c:bf:a7:0b:d2:1d:42:86:7d:c0:66:42:2d:62:
                    f2:de:99:09:28:59:1a:cf:b1:95:bb:a6:20:9e:a3:
                    eb:74:0f:81:f9:1f:cc:7a:7a:8c:23:09:05:14:47:
                    36:74:5c:ea:f3:f3:48:d7:0a:ce:79:46:db:5a:cd:
                    06:29:8f:ad:07:70:92:20:23:70:69:03:c4:b0:f5:
                    d5:9d:1e:b8:14:b9:46:a9:f4:60:ac:9c:7e:16:e6:
                    f6:08:cc:42:59:5a:55:1c:29:67:fd:a1:50:7d:81:
                    42:d4:f0:13:04:5e:b9:20:71:ae:6b:4b:e6:8d:9a:
                    0b:73:21:0d:79:21:f3:22:79:1e:fb:cb:bd:32:ba:
                    6e:6d:ce:b0:eb:c1:fa:ac:c8:4f:30:26:4a:dd:aa:
                    6a:de:66:12:bf:52:ca:42:18:05:7e:0a:ca:20:13:
                    bf:8a:b1:8e:36:8d:de:7f:16:68:32:4d:18:c1:a2:
                    f6:de:42:71:5f:87:bb:54:2a:08:aa:b5:b0:4a:e1:
                    51:1e:1d:75:38:de:d8:87:ff:db:78:20:40:26:0c:
                    2b:cd:e8:3d:99:fe:da:d8:c9:d2:30:e1:4c:90:c1:
                    72:ec:e6:b2:cf:68:2c:2b:9a:da:5c:46:6a:17:1f:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:29:C3:CA:EE:38:0F:49:DA:BD:7F:B2:D9:7C:23:95:FF:53:EC:D3
            X509v3 Authority Key Identifier:
                keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:fd:f6:00:1b:9a:e6:4a:b5:c3:c1:5b:f2:a7:0f:8d:76:
         d2:0f:fe:9e:81:11:2c:07:1f:6c:e7:5d:4b:4e:6d:bf:d2:b7:
         7f:9b:9d:91:45:60:aa:3a:8d:eb:e1:78:37:0f:51:20:27:7d:
         fc:f6:5b:6d:90:62:aa:2c:b4:70:0e:75:d0:45:18:68:e4:8b:
         e6:d2:2c:a5:b8:15:2f:92:3e:a2:52:56:91:65:f1:13:7e:37:
         e4:92:42:87:a8:64:e6:c0:fe:a8:6a:ec:aa:40:ca:37:a1:e9:
         7f:5c:a7:ab:4a:a9:88:a3:57:34:2d:d4:6b:21:7b:2b:93:1b:
         bf:df:a8:bc:17:f2:47:a2:26:4b:f5:9b:d0:f3:5a:a3:90:e8:
         04:da:25:9c:4e:4e:ec:91:84:c6:09:54:d1:69:e9:f0:78:bc:
         13:86:f8:9e:3e:c1:27:ba:42:1a:69:7f:d9:46:10:83:41:bb:
         44:f1:95:62:38:28:0b:9b:78:50:eb:ad:46:3d:32:ad:ed:cb:
         45:45:1f:84:a5:85:59:d1:e8:6d:93:02:c8:40:94:09:1b:fc:
         69:e0:b3:db:f9:97:1b:30:c1:d5:64:b2:b9:c5:36:8b:b8:f5:
         fa:c5:7f:da:1e:18:c2:57:03:69:d8:94:53:d1:3c:ee:4f:f9:
         51:71:28:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----