Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
File:                     wei4jx4wVzoOIOR51boAtOkYJ7Y.mft (raw, json)
Hash identifier:          HAp7W3JKpzSqOgaqhqJhtku0gHGR4043CqMBwYr/gh0=
Subject key identifier:   82:27:99:DE:ED:73:1C:39:95:3B:7F:0C:F2:20:2B:1A:CB:2A:49:26
Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
Certificate issuer:       /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Certificate serial:       01962E2AEF45845A4DB8864510D5B4E9D94D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: X1Gl7pI0OMRR6ajfA3cvno5vstw.roa (hash: zVVJwLgXELHLdhQ+YSrbw1EHdsK7mWsiuWthVrRspkM=)
                          2: wei4jx4wVzoOIOR51boAtOkYJ7Y.crl (hash: bYTEonUHBUKOlIXFgt3pJx7Hdwjsd5mX/uoU3KV6B6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ef:45:84:5a:4d:b8:86:45:10:d5:b4:e9:d9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=822799deed731c39953b7f0cf2202b1acb2a4926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:cc:f1:6f:11:e8:66:96:42:62:c9:a9:3e:
                    38:6e:ae:72:c2:7f:a4:3f:f7:3e:46:66:5c:04:4a:
                    55:c3:6d:58:64:9d:09:cd:b4:1e:d7:a5:07:ad:4a:
                    6f:72:eb:98:de:f8:c4:30:fd:5d:4b:88:55:4a:7e:
                    38:58:8b:87:d2:9f:da:00:4c:66:3a:a4:9d:ad:5a:
                    bd:dd:37:25:12:d5:be:cb:30:f4:c8:1c:f6:39:14:
                    61:6f:2a:38:5f:45:31:b4:a9:8c:5a:b6:35:cf:c4:
                    7e:5e:19:1a:47:12:66:f8:8b:ed:37:e3:c2:da:e0:
                    e4:a0:92:0c:6f:ed:82:6d:02:a7:99:e3:3b:02:37:
                    55:44:4d:6e:23:e7:c8:49:ef:e0:ba:31:ab:86:2a:
                    7c:e8:ea:40:41:83:2d:b9:74:79:43:a4:65:b0:39:
                    1f:67:ee:19:6b:40:c9:04:ae:81:d8:8a:45:0d:c6:
                    7c:45:6c:d6:21:f9:65:c5:83:83:6f:00:0c:fa:b0:
                    41:56:b9:a5:c3:2e:38:13:54:71:6a:f0:8a:15:24:
                    9f:10:cb:1f:d0:e4:30:9b:13:07:93:c3:b9:a1:e9:
                    46:d1:0b:d7:8a:67:81:91:a1:33:a7:c4:8f:a6:1c:
                    f1:c6:cc:b9:f3:67:22:41:ff:c3:e8:1b:f7:f6:ed:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:27:99:DE:ED:73:1C:39:95:3B:7F:0C:F2:20:2B:1A:CB:2A:49:26
            X509v3 Authority Key Identifier:
                keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cd:96:8f:3d:1d:b9:16:3d:3b:46:7b:15:0a:df:35:67:75:
         e3:36:84:b0:5c:71:a5:ff:1a:2d:b3:97:c4:ac:04:c4:18:eb:
         da:87:90:1a:4b:ff:8f:47:25:fc:18:ce:15:16:99:98:ad:31:
         01:d0:ab:4f:63:f3:c1:4c:a5:74:c3:cb:da:9b:a6:c8:a0:1b:
         9f:7e:79:ba:46:f7:c1:b4:84:89:55:30:e5:07:27:7f:d3:6b:
         9d:cd:29:52:f1:e5:78:12:d6:92:2d:5e:46:71:db:7d:45:1d:
         2d:9b:b3:1d:44:74:1e:20:85:89:8c:f6:f4:45:e2:b1:03:a5:
         2d:2f:7a:47:8b:0a:b4:8b:f4:99:27:8f:b0:34:75:a0:a8:5d:
         9c:f8:59:10:c8:ae:85:f4:c5:b6:aa:f9:e9:21:08:bc:b0:eb:
         57:ec:34:86:a9:39:b3:9d:f5:e6:67:06:dd:19:aa:f8:74:1f:
         96:95:b6:b5:fc:c6:e2:66:ad:f5:6e:6b:70:ea:34:dc:75:bd:
         54:57:5b:54:a1:d6:cd:55:af:d8:bf:d3:1a:a6:94:49:ad:04:
         8d:2b:32:98:13:d5:2c:b4:fe:65:72:27:a8:7d:49:b7:06:2c:
         f9:7f:44:52:a4:58:a3:2e:8c:11:87:7f:62:fe:a0:94:b2:88:
         14:73:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----