Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
File:                     wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft (raw, json)
Hash identifier:          up6HHV/u9e5NBjAcZe5XNPSvfBGggWvWPy1fZZfpwdQ=
Subject key identifier:   B4:26:7D:A8:99:24:52:E6:DC:BC:55:83:01:F1:65:8C:F3:BE:CB:14
Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
Certificate issuer:       /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Certificate serial:       01962E995684A7D720A9B733932921CC02BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
Manifest number:          070F
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: 0iMFk8Lfng7XvalPLjNNFDCKCXk.roa (hash: RGgyt63YX02pCUWXH4nSFvIeyVgvG587fQXMrvVwyd0=)
                          2: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl (hash: ERv4h2K5HBSQu5Za5/An/DrejByufaONEpQKxcKGyDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:56:84:a7:d7:20:a9:b7:33:93:29:21:cc:02:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=b4267da8992452e6dcbc558301f1658cf3becb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:88:d3:2b:5b:3b:73:51:89:29:39:a4:ed:74:
                    0b:a9:c2:f4:d1:d3:94:2a:9e:88:2d:f5:03:a6:dd:
                    a1:bc:0d:e8:ba:1e:9e:bc:ce:db:38:3f:d6:7f:ae:
                    52:16:f7:d1:4f:8b:d2:c9:6a:38:16:64:10:53:39:
                    c8:f6:8b:46:20:56:7e:36:9f:9f:3b:71:41:a9:c9:
                    96:fd:a5:e2:e0:f1:be:c4:1e:f2:ac:d2:83:88:eb:
                    cd:40:64:d3:34:d2:7e:c4:c8:b0:f8:98:fa:18:00:
                    58:a7:18:ca:aa:c1:97:2e:a0:88:2d:22:d6:95:7e:
                    ff:90:e7:8d:bf:10:eb:19:7c:97:8d:62:a0:08:99:
                    ee:7c:7b:b9:a3:db:91:79:38:da:fe:38:38:02:f4:
                    14:6d:55:3a:11:ea:62:f5:65:9e:36:50:bc:54:91:
                    32:7e:0c:e0:ac:9f:51:4e:c9:26:cc:6d:12:05:86:
                    85:80:fb:90:6d:e3:a1:b0:6a:a1:90:84:d0:ee:67:
                    1e:0b:02:6f:83:4c:44:fa:5f:b2:21:9d:4c:55:41:
                    1f:e0:ad:a3:69:2f:6b:34:c8:82:e7:39:f5:94:56:
                    8e:fc:1d:f9:84:bd:d6:40:f2:df:ea:f2:c5:bb:ce:
                    3c:6e:f8:51:3e:ee:49:30:0a:9f:50:82:28:0a:e3:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:26:7D:A8:99:24:52:E6:DC:BC:55:83:01:F1:65:8C:F3:BE:CB:14
            X509v3 Authority Key Identifier:
                keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:97:5d:21:08:5d:a3:91:91:6c:b7:65:d7:7f:ed:bf:1e:da:
         1f:fe:21:7d:5d:ba:2c:fa:ce:6a:50:12:c9:15:a4:45:ee:4b:
         7f:7c:11:82:38:59:70:2c:66:5f:ef:8a:a1:0a:52:22:ea:2c:
         82:c5:3f:4c:77:22:d7:ed:19:6c:f6:b9:a8:24:11:66:2e:11:
         8c:65:07:79:7c:0d:62:8d:80:77:2c:82:0f:6e:d5:e4:49:a8:
         82:e5:66:8b:1f:b3:fd:97:96:70:ef:d7:2d:a7:f4:70:1a:0d:
         d1:82:78:36:bb:44:73:6c:8b:69:3c:32:74:74:d2:86:1f:eb:
         f2:fd:be:bc:ee:37:47:72:cb:a0:a9:af:8d:c5:ba:33:47:0f:
         a1:12:b4:6e:77:16:4c:ba:9c:b9:d5:42:75:8d:20:dc:69:9b:
         28:01:31:78:60:e5:2b:81:68:d3:1f:be:f1:cf:2f:c3:f5:d6:
         e8:44:3e:68:af:82:51:4d:fb:23:a7:1f:9a:ef:04:71:8e:67:
         f2:69:5d:5e:cc:97:8e:6f:4a:88:d1:bf:5d:eb:94:0a:6c:5f:
         38:b2:84:a1:dd:e1:bc:ea:00:23:45:db:7e:ad:8c:b1:2b:0f:
         fd:f2:84:63:7c:fb:13:1b:62:02:db:5e:65:c6:8a:8f:92:1e:
         ee:22:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----