Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
File:                     wb6oOT9qHTeZGYndh1_FMeQIQDE.mft (raw, json)
Hash identifier:          ltI8t2OIj+fv0D5obzb4MBLJOEF8TEkTkAl+NHHx60Y=
Subject key identifier:   6C:1A:0A:39:32:AE:85:CA:FF:B3:79:37:90:BE:56:28:71:17:C4:88
Authority key identifier: C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31
Certificate issuer:       /CN=c1bea8393f6a1d37991989dd875fc531e4084031
Certificate serial:       01962F068D33ED49C52C797B4DB4B5A9D8E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
Manifest number:          112E
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: nbmVOIuVbGlA2xpA2whbaoSkl60.roa (hash: 70PvMKGXMQMI5jikM85xlBPooLtb7IA/Vc36Qg7U1Uo=)
                          2: wb6oOT9qHTeZGYndh1_FMeQIQDE.crl (hash: 3ug96O8KFTWelAqzrjxupAXQ7B119pPa9Gb/yK1FYKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8d:33:ed:49:c5:2c:79:7b:4d:b4:b5:a9:d8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bea8393f6a1d37991989dd875fc531e4084031
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=6c1a0a3932ae85caffb3793790be56287117c488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:aa:d0:38:49:eb:2b:52:44:14:2f:78:f5:
                    e2:e6:6c:c6:d2:1d:49:72:34:b9:52:55:8a:8d:ce:
                    2c:4c:bf:a2:2c:51:20:cc:c6:94:0d:8e:0c:ee:4a:
                    e7:fc:ff:04:38:c4:a1:9e:8c:cf:f1:90:76:9a:a4:
                    8d:eb:6d:f0:e6:41:de:e3:10:b8:bf:6b:bb:7d:0d:
                    b9:9a:b4:89:65:7c:28:a0:3a:e7:5d:dc:ff:4f:c3:
                    ab:66:53:ad:a4:94:0c:03:91:68:98:eb:42:54:92:
                    28:1a:e6:6f:d2:24:36:86:e2:3e:9a:ca:73:34:27:
                    1a:c0:76:86:4d:00:31:4e:43:67:26:cf:15:8d:a7:
                    2e:e8:71:54:bc:f3:52:c2:90:52:36:a7:e4:00:8f:
                    3f:20:aa:f4:a4:20:3c:1e:8c:20:33:e1:09:cc:b5:
                    6d:b2:4f:0e:76:f1:d6:d5:98:75:7e:5c:0c:a1:0a:
                    0f:9e:f3:92:41:e2:ad:4e:04:e3:da:a7:17:9a:69:
                    f3:2a:60:29:a0:43:92:b4:fc:a6:e0:0b:0b:de:34:
                    b4:51:74:a5:70:1c:85:56:c1:a1:3a:c2:8d:e8:9e:
                    65:58:e4:0e:28:b0:fc:57:64:af:88:79:7f:d8:c2:
                    1c:f8:6e:43:7a:3a:23:98:c0:5b:d7:73:70:3c:13:
                    d0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1A:0A:39:32:AE:85:CA:FF:B3:79:37:90:BE:56:28:71:17:C4:88
            X509v3 Authority Key Identifier:
                keyid:C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:00:c5:28:31:42:c2:ea:0d:70:08:bd:f4:81:43:29:db:82:
         0e:e9:f6:16:60:4e:a8:88:6d:6e:80:48:4c:35:ae:da:f3:a3:
         02:ab:72:7b:1e:ee:0a:10:5f:e2:f2:4a:7c:04:ec:5f:1e:b8:
         5b:85:d1:5e:06:92:cf:84:83:db:87:b2:25:b8:81:de:d5:a8:
         03:d6:63:4f:fa:01:6e:13:08:f6:87:ca:37:ac:e0:69:e2:43:
         ee:57:c6:48:16:03:ff:a4:42:b9:60:62:32:f1:81:4f:a5:49:
         52:d2:59:21:2c:97:cc:a3:b5:fe:04:3a:32:55:81:58:a6:95:
         32:43:20:c0:1d:84:23:1f:2d:8b:ed:d9:77:7d:96:80:27:c1:
         05:3d:3f:1e:63:59:72:8c:ec:0e:59:1b:2b:8b:24:fa:68:1a:
         ab:c3:6e:6f:17:32:58:03:4a:54:fe:fe:8f:7e:b7:73:9a:6c:
         d8:03:f9:a3:b3:0e:bf:2f:7c:b6:48:6b:d9:6a:89:f9:a2:14:
         76:b0:a0:af:01:7c:cb:74:72:f4:e2:ac:d8:b3:09:78:5c:7c:
         38:ba:b4:22:76:67:1f:56:8f:d5:6d:f1:32:94:fc:49:78:32:
         68:21:39:45:bd:a4:42:3f:b1:4d:4c:ba:63:62:22:81:e8:ee:
         80:13:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----