Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
File:                     w8YbUevIQYDwprIy6H351hyQ-qs.mft (raw, json)
Hash identifier:          pE53j1Daiu9DKpGXJbSec+b1oWmp5vIbyfKdmYqUnQw=
Subject key identifier:   B8:C4:BD:7B:24:5B:D1:B9:3D:7C:C5:CC:F6:2D:C9:22:F4:E4:F1:D9
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Certificate issuer:       /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial:       01962FAB0CCB0EC9DA443F8A351AB596D3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: 1-ndEryzCguWCGvVWWmkd8W4KbQ.roa (hash: W7EqtKjOdrRjfIUBcKhssjKWmvswGN88L1U5twVHTxE=)
                          2: 5fWADeIk4d10ZbIqGhJnIwZyHH8.roa (hash: QzLL6CT6LeM4dPuY4ZTi6ISO36hu50lOly24fxPuWC4=)
                          3: w8YbUevIQYDwprIy6H351hyQ-qs.crl (hash: GuffjQWt1NaWWLiChy/wo2Im/8p6EFxZ6aACKpBIZq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0c:cb:0e:c9:da:44:3f:8a:35:1a:b5:96:d3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=b8c4bd7b245bd1b93d7cc5ccf62dc922f4e4f1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:d9:7a:3b:67:c1:56:19:db:c6:dd:06:dc:
                    9a:e8:86:16:79:71:f9:73:77:94:f6:a9:04:eb:90:
                    db:e4:9c:26:a5:1f:94:e9:c5:a3:73:2d:2d:3e:e8:
                    da:64:8b:7a:d9:95:b8:17:47:17:30:21:cb:85:8c:
                    84:0c:98:43:f6:ea:b8:36:3b:b8:d1:06:38:13:9c:
                    82:ba:9f:5d:a2:25:a1:a2:7a:ad:fc:80:74:bb:fa:
                    ba:70:8c:8d:ce:74:80:1b:58:d8:5c:bc:f2:b9:7f:
                    05:64:29:15:07:1c:b1:db:dd:12:96:89:a8:4b:7f:
                    2a:60:4b:f5:1b:e7:09:ae:6f:7a:ee:8f:fa:54:da:
                    88:a1:5c:98:ce:25:40:5b:cf:26:62:ab:10:3f:f0:
                    67:ef:4e:f1:bb:11:90:f7:1f:d9:b2:e0:dd:c0:6c:
                    be:86:b2:70:fe:ec:ae:5a:c4:0c:fe:c3:cb:5a:e1:
                    e3:39:58:22:c5:39:fb:d4:53:ef:52:f9:77:ef:3d:
                    73:b3:b2:9c:cd:6a:4a:01:fd:37:18:3d:b3:55:b6:
                    67:f2:42:39:0f:ef:3f:d2:53:40:b2:ac:f8:b1:f3:
                    a1:8e:80:82:45:ae:48:36:c0:6b:a7:df:fb:54:4a:
                    68:e6:e0:bf:a4:86:c5:79:16:88:2e:f8:b6:6f:20:
                    cb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C4:BD:7B:24:5B:D1:B9:3D:7C:C5:CC:F6:2D:C9:22:F4:E4:F1:D9
            X509v3 Authority Key Identifier:
                keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:71:9f:8c:92:35:7c:b6:92:ae:0b:a5:27:80:4f:fc:03:07:
         48:cc:42:f5:7f:39:d5:d2:3d:d7:f4:74:16:e8:ca:c1:62:ef:
         ce:07:25:05:3d:06:43:50:bc:83:fb:f0:2a:a7:21:27:c9:da:
         72:49:ad:5f:ef:15:dc:43:b1:45:90:00:03:f4:c4:1a:19:70:
         7e:e9:4c:70:a3:5a:43:dc:8d:66:0c:4c:6e:4b:4a:43:0e:08:
         5a:32:ec:eb:9e:89:25:2d:70:a1:c7:3f:56:2f:e3:88:4e:b4:
         71:6f:9c:87:3c:a7:20:f5:11:b9:25:ca:e6:9d:31:4d:90:90:
         25:a0:4f:16:fb:14:00:79:0e:d8:a1:4d:15:13:06:d8:10:f2:
         5b:81:d1:ea:98:be:d7:de:40:18:61:7c:10:8c:a4:d3:1a:b8:
         9b:43:3d:48:ed:e0:cb:d5:8b:59:3c:0a:ad:b1:b1:34:5c:c4:
         c1:53:1a:e7:1f:c9:c1:71:6c:18:7f:e8:bf:46:20:62:88:70:
         e2:c8:e3:74:aa:02:0d:a6:63:8c:6b:56:3d:39:c0:1a:38:83:
         d9:33:76:73:2a:a1:ce:47:7b:bf:67:60:f3:bd:c0:61:ed:ec:
         bc:c6:a7:65:a5:94:a7:9b:f5:ff:1d:da:dc:52:f4:24:ba:d5:
         2b:08:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----