Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File:                     wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier:          OmQJCt63F9fMD6tCCkimHxz5Ht2fIw0ShC3IDCqebvA=
Subject key identifier:   A7:23:FE:6A:2C:60:FF:8E:EC:D7:B7:BF:36:FC:C6:23:40:27:0B:E1
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer:       /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial:       01962FAB9C74729187ABE28A8B57C67B06C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: P3YoBo67vazrugYfMD3lybaWtAo.roa (hash: /AdjcQW3/wvGSZ4+BEuR5TlveAfDafAH3hNdQ89CSF4=)
                          2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: O9sZSNu8f6Xg0MBDReC4MG6XDmvJZeiKL3SfNgrsIlQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9c:74:72:91:87:ab:e2:8a:8b:57:c6:7b:06:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=a723fe6a2c60ff8eecd7b7bf36fcc62340270be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:24:1e:7a:22:69:c8:60:6a:15:21:78:6c:
                    05:b1:2c:01:43:a6:76:87:55:8d:63:de:f2:67:86:
                    41:84:47:7b:0f:ad:52:13:7b:9e:c3:69:2a:cd:52:
                    d9:4a:1e:c3:56:17:fd:2f:ad:fc:9c:b0:64:c7:22:
                    98:3e:11:5b:bf:12:09:ae:05:a5:94:a9:34:ac:9f:
                    75:be:78:32:1a:9b:61:60:3a:f0:fe:4f:3c:08:7e:
                    bb:5e:9a:86:15:27:6c:9b:99:67:02:42:08:e9:94:
                    c1:40:60:d3:d0:08:a4:dd:05:57:4c:a4:15:8b:3e:
                    fb:0f:e5:cd:9c:d2:96:44:15:1d:40:8e:70:41:e5:
                    f3:10:69:f4:8e:15:40:b7:22:f9:f9:e7:57:bf:eb:
                    c7:30:4c:bd:fc:66:b3:31:9e:23:6f:33:df:76:db:
                    8a:66:e6:76:42:3d:a8:eb:1e:ef:93:eb:9e:85:42:
                    79:f2:6f:f6:5c:8e:cc:da:19:f9:ee:1f:d6:bc:17:
                    93:c4:91:2e:3d:11:e8:98:07:52:8e:d9:35:24:61:
                    c5:b3:91:9c:29:0b:e4:e1:3c:64:2b:e2:89:d4:d4:
                    ba:a2:15:5b:79:fd:b2:4f:bf:f3:75:b2:84:89:63:
                    91:a1:01:ba:c1:56:0e:ec:f3:3b:f8:8b:90:f3:99:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:23:FE:6A:2C:60:FF:8E:EC:D7:B7:BF:36:FC:C6:23:40:27:0B:E1
            X509v3 Authority Key Identifier:
                keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e0:a1:1b:6e:ba:88:ec:67:00:af:29:d6:0e:7e:b3:fb:07:
         fe:09:79:3f:06:97:24:ba:4c:c8:91:d9:52:fc:56:bc:f8:2d:
         57:80:3c:ce:df:ed:09:96:f0:e0:29:61:52:f0:93:00:21:49:
         fe:29:ce:d5:e0:80:a9:a5:29:ad:ae:a0:94:e8:b5:64:d2:f9:
         43:b1:39:10:7a:93:53:0e:82:28:31:78:d5:f8:bd:b4:c4:f9:
         27:a4:be:d0:41:22:1f:87:d4:43:73:b6:0d:94:b5:6f:47:75:
         fd:15:61:84:92:69:94:2d:24:bd:98:af:5c:26:b9:81:73:53:
         5b:56:03:33:88:b9:b2:a9:46:b9:7d:0a:6a:7f:db:93:35:a6:
         46:1e:5e:48:9d:31:58:47:82:c5:30:61:1e:0f:42:b9:36:41:
         e8:8d:34:a8:32:12:50:50:04:2a:dc:45:70:54:b1:c4:6d:7c:
         b2:ea:f5:32:9c:ca:dc:e0:a6:02:e9:83:00:79:95:69:10:3f:
         83:2a:2f:6a:28:73:3b:e3:db:81:ac:3e:f3:e2:26:f7:4d:5e:
         3d:e9:e2:79:a7:99:c1:72:6c:13:36:9f:73:df:f2:1b:36:06:
         80:d9:9f:50:ea:07:db:04:f2:79:2b:97:30:84:f5:7d:f9:96:
         d7:c7:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----