Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File:                     wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier:          wSXphtC3CRaVWCh+RGgKEVRBlaDBs9tXTLDxk3aFPY4=
Subject key identifier:   2E:BE:1D:E8:45:FA:56:B0:1C:B1:61:89:47:5D:F2:F8:AE:C7:E3:4C
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer:       /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial:       01962E98AF2F1364482E4BA44AFF933FE7F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
                          2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
                          3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: IgCFym+1QqT0sTxh7GTKBAWaNVOZ+Ea938zV36oxNoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:af:2f:13:64:48:2e:4b:a4:4a:ff:93:3f:e7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=2ebe1de845fa56b01cb16189475df2f8aec7e34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:ab:16:31:3a:d0:61:4c:6a:70:8d:3e:62:
                    f5:34:4e:6c:8b:72:92:a7:1b:3e:02:7a:a7:b8:dc:
                    e6:10:71:b0:f5:a4:14:2b:52:6b:90:82:78:5d:85:
                    e5:bf:ca:54:fb:5b:e5:dc:3b:0d:3a:a9:ab:f1:65:
                    5f:17:8d:54:80:9f:c2:61:2f:db:23:55:7d:f4:3a:
                    e7:4f:0d:af:65:9d:01:e7:12:f4:d8:a9:64:18:7d:
                    15:89:c8:97:3a:70:c4:1c:01:8b:85:e2:47:6e:5a:
                    f4:78:2e:e1:ec:af:bd:ca:3c:3b:0e:6c:27:02:d4:
                    bc:1f:46:ee:8e:1b:ef:f8:fe:13:2a:75:83:be:ab:
                    dd:b8:20:78:61:21:16:34:69:d1:0f:0b:28:f9:b6:
                    a4:1a:bf:09:6a:ec:18:45:2e:d9:52:6a:96:bb:07:
                    5a:a3:35:9d:49:fd:4c:bd:1e:a3:22:52:6b:75:a7:
                    d1:5f:61:41:64:88:a5:0b:20:5d:ca:29:16:c3:34:
                    ed:79:67:48:cf:da:3b:0b:a0:f2:97:04:4e:08:e5:
                    54:f4:f4:d6:5e:ed:30:32:14:2a:8e:a9:1d:4d:3e:
                    bf:01:03:40:af:4a:da:3b:d5:4d:40:3f:97:d3:e7:
                    b5:30:fb:8b:43:cc:44:9d:67:1b:60:3d:0c:20:43:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BE:1D:E8:45:FA:56:B0:1C:B1:61:89:47:5D:F2:F8:AE:C7:E3:4C
            X509v3 Authority Key Identifier:
                keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:17:3b:fc:fb:f6:2f:da:ab:7a:ec:6e:ac:e3:4b:5b:9b:
         14:94:b5:58:ec:5a:24:37:8c:c0:db:f9:dc:50:eb:fd:83:3b:
         4a:72:d9:e6:b4:ff:50:c0:9a:09:c6:b9:25:17:84:fb:fb:41:
         02:3e:5b:34:d2:74:2d:b2:5e:a7:44:b0:bf:fd:ec:38:56:a2:
         ab:cc:40:7a:fb:48:fe:9c:b0:b2:0e:23:f3:95:d1:38:cd:7a:
         77:04:75:90:71:ae:9e:bc:7a:82:46:96:d7:ab:3a:26:d5:59:
         56:dd:df:81:ec:28:2f:41:45:4a:a0:63:1b:b1:b7:2d:e7:53:
         f0:83:f0:f8:38:06:43:76:21:55:89:fc:f4:81:38:ab:3f:28:
         f1:93:be:01:0c:6a:5f:ac:51:d8:40:ae:78:26:77:47:02:3b:
         53:fc:cb:e0:23:5c:95:7f:b4:c6:20:21:fb:82:80:47:a3:8e:
         92:a4:c6:7e:c1:de:6f:9f:b9:15:45:2b:2b:80:41:c1:e1:e4:
         ba:67:50:d0:6c:91:4d:a3:c9:59:6a:4b:5a:4e:9a:ee:e1:1f:
         42:2a:91:77:a4:5d:40:8c:af:07:5c:94:c0:7b:3c:a0:f4:2f:
         85:c1:bb:55:67:ad:49:5c:ba:6d:ac:1b:e1:a9:39:c0:b0:1f:
         2f:86:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----