Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File:                     wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier:          y2KVGrWm6fNlrHIdD5y1HIVJ7UOt7lRVEToQjJQZVlE=
Subject key identifier:   25:A3:0B:7C:EB:1F:65:BE:42:81:3C:29:95:46:AA:EB:30:57:FE:BC
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer:       /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial:       01962E9894DB19A93710A0BE07C66F113916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number:          04B8
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: Muf3zUEmjvAcicWWTWwj5ZYLuHo.roa (hash: dWeZmARYi8VXUfy+ROJsrFzhlyTYVpZ288pLW1NjhJk=)
                          2: b800M8UQE_ndSkfHQhV3cPUcjPM.roa (hash: MbkUQn3Ix8UmF2oKyZjDZOrZVxkNdqgLjfIY0GRvAPU=)
                          3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: WnH9vv+4EciXKMEvtLCyiUp6G+v+cn5Hl9aa3ZFO84s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:94:db:19:a9:37:10:a0:be:07:c6:6f:11:39:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=25a30b7ceb1f65be42813c299546aaeb3057febc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:c7:09:a2:d8:f8:a2:bf:bc:18:a5:80:98:
                    a1:c1:64:28:9c:05:eb:99:b9:7d:6c:f4:e9:58:ed:
                    f3:3f:e2:7f:c3:86:71:19:9b:a6:dd:c7:a4:1f:4e:
                    57:da:eb:53:45:50:b4:cd:2d:c6:3b:35:b2:b9:fd:
                    c8:b0:db:b9:cb:0f:ba:f9:24:e0:49:bb:3e:4d:ce:
                    55:1e:31:ae:1c:eb:6d:32:39:fe:6d:72:ea:4f:c6:
                    a4:b6:02:ee:7f:62:9e:11:6f:ed:d5:05:5b:87:5c:
                    1a:17:88:7a:85:c4:38:59:b2:e8:70:d3:07:c9:b6:
                    fa:30:57:53:ea:08:8b:5a:c1:e7:cb:02:5a:52:a5:
                    1a:42:64:72:7c:10:e8:0d:4f:b9:92:1f:d1:fa:74:
                    86:a5:83:51:6a:b5:e1:5b:b2:2a:9d:01:3d:5d:9b:
                    88:2f:e2:db:b1:20:13:70:2e:bf:de:02:91:74:d7:
                    0a:79:43:1c:36:59:d7:60:0d:eb:86:7d:ad:26:aa:
                    19:a1:94:af:e0:3a:60:c6:6b:a3:9c:48:27:db:b5:
                    43:ef:bb:f1:1f:09:1d:5c:5a:0d:09:3f:c4:a7:88:
                    d5:ff:78:05:e5:f0:1b:30:39:4d:04:b0:ea:86:5d:
                    6c:99:5c:c9:a7:10:26:7d:57:9a:a5:2e:8f:41:e7:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A3:0B:7C:EB:1F:65:BE:42:81:3C:29:95:46:AA:EB:30:57:FE:BC
            X509v3 Authority Key Identifier:
                keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:22:4a:ce:83:9b:40:07:c6:f9:2a:a7:10:37:38:70:91:02:
         39:00:88:5d:5d:41:e5:e2:4c:8b:45:eb:68:ea:9e:b0:9f:6f:
         77:c2:7e:e5:e1:29:24:73:75:8e:df:1f:b6:55:de:2a:b7:17:
         06:55:13:46:44:2d:16:3b:76:eb:93:9e:5e:53:36:11:90:ac:
         c1:44:bd:ed:5b:2e:cc:5d:16:e2:df:49:3a:8f:2c:84:84:e3:
         55:ad:db:1e:53:25:55:93:89:da:3a:56:69:e5:03:6e:ad:b3:
         4a:1b:15:92:a8:1c:aa:95:d0:90:91:d6:f8:44:5c:ea:81:18:
         f2:4b:99:d4:21:38:1a:d9:17:c9:81:c8:06:d9:32:54:79:7e:
         78:eb:af:a9:19:06:d3:8f:54:8c:aa:0a:31:2f:07:66:5d:91:
         12:dd:fb:20:5d:0e:73:ed:ea:01:f6:87:5f:a4:cd:59:72:36:
         19:b2:9b:c3:66:55:e5:76:ea:f5:aa:95:91:97:49:6a:ba:c8:
         6c:fb:40:68:25:1c:f0:88:b7:42:91:0c:b5:7b:22:c6:60:67:
         28:02:1d:3c:cd:26:94:8e:c7:c0:98:5c:96:7c:c7:b5:f5:c3:
         9a:3b:a6:89:8a:7d:2a:60:5b:5a:ac:0c:1e:f8:1a:09:39:cb:
         b5:df:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----