Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File:                     wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier:          Gw0NwS5Iki4EUwSrqaImw2Q/BwC0Sxy5DRyD2MjTW/8=
Subject key identifier:   EE:0F:43:D1:88:AC:2A:E2:AB:68:90:3F:62:C1:E7:CF:26:A1:2D:9A
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer:       /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial:       01962DF395AB43C0063EF45C4E727011F657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number:          0954
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: _vDgQuqvDJFp6MMZOZL5IEmORHs.roa (hash: 7Xz5OI/32CttzkIydxRg2GdNWdK569D5srRiLf2kPkg=)
                          2: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: 0ybqs/qg+UQWlXzfdRLJKBzBzVjCYHYOln+0APu98h0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:95:ab:43:c0:06:3e:f4:5c:4e:72:70:11:f6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=ee0f43d188ac2ae2ab68903f62c1e7cf26a12d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:a5:12:88:eb:10:57:a4:3a:e6:89:41:3e:
                    53:25:e9:bb:b5:06:b8:aa:51:e9:da:f1:03:c5:45:
                    46:c0:2c:77:f5:f5:94:e0:54:8d:bd:aa:53:4f:b1:
                    59:8e:b2:21:8c:7c:50:1e:ba:3f:ef:1b:a6:a6:bd:
                    ab:80:f4:49:5a:37:30:f4:e6:63:c1:b3:df:7f:15:
                    17:81:8e:4a:0f:99:33:65:63:7c:64:6c:c5:ee:7c:
                    7f:03:62:02:5c:f1:38:36:ff:47:d7:a9:cb:37:8f:
                    3e:3c:e9:ea:71:be:24:47:7a:11:bb:0b:60:8f:65:
                    d8:b1:01:8c:4b:0a:70:5d:84:54:ca:c5:a5:a8:50:
                    ff:e9:9f:06:8d:7d:de:4f:26:eb:7a:ab:a1:93:e8:
                    a9:c6:c8:a3:79:d3:5c:09:e5:eb:be:7a:5c:e2:24:
                    71:19:f1:6d:23:f8:9f:38:f3:cc:e1:47:2d:8c:0c:
                    f3:75:a2:bb:fe:88:3a:fa:5f:cc:ca:92:7e:5e:34:
                    0f:6e:d2:dd:72:95:5c:71:86:7e:3f:4f:7b:30:e8:
                    02:86:9e:20:88:80:37:80:05:0a:69:38:74:99:d8:
                    6f:9e:19:1a:5e:a6:e4:98:b8:1f:cd:36:85:8e:2c:
                    b3:8f:e1:b5:27:90:88:4d:f5:cc:cc:a3:97:4a:a8:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0F:43:D1:88:AC:2A:E2:AB:68:90:3F:62:C1:E7:CF:26:A1:2D:9A
            X509v3 Authority Key Identifier:
                keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:16:de:24:db:27:31:df:bc:ea:6e:b7:0b:5c:74:11:e9:b9:
         5a:cb:26:33:43:5a:59:38:ca:e3:88:6a:00:b6:ad:8d:39:87:
         de:60:62:e9:49:21:be:dc:9f:72:a0:88:19:f5:dd:fe:00:48:
         23:ea:4e:be:b0:39:73:55:d1:7b:c0:ef:d4:06:da:df:61:1f:
         46:a0:f3:36:d3:85:88:bd:ff:17:1f:1a:27:bb:a7:62:41:34:
         a0:83:80:4d:d9:a8:59:91:c4:df:b1:cf:fd:f6:28:83:73:2f:
         52:04:f2:13:b9:e6:ee:f7:b2:79:e0:e2:1f:0a:67:e2:01:10:
         cf:bf:f5:4f:d1:d2:1b:5e:a4:bc:bf:13:9e:13:78:eb:34:ea:
         ee:0d:4d:92:26:9c:22:b4:b4:be:02:26:0f:46:aa:f8:64:4b:
         38:d6:b9:a7:7b:93:91:bb:04:37:85:e6:88:35:df:85:32:0d:
         c0:ee:26:ed:f1:2e:78:2a:ae:5c:26:b8:c8:fc:c2:b7:7d:1b:
         86:bc:d3:85:42:ad:2a:98:1a:ad:14:9c:cc:da:5e:39:e4:d1:
         5e:03:65:52:5c:6a:90:9b:82:b7:a0:5b:34:be:31:e4:17:e4:
         58:7a:f2:2e:03:13:8e:ff:21:19:4d:a7:c5:27:f8:0b:58:4e:
         8a:f1:0c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----