Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File:                     0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier:          /utX2eLMM+XpQhoElLjTGu9GJjsaO+dvRrJ9KLj0a2I=
Subject key identifier:   1C:90:6E:4B:FA:57:E6:47:76:39:EC:B8:A0:AD:15:D4:B2:2C:44:0C
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer:       /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial:       01962F3D5CA283112B05D3B29CF76C2D7458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number:          01DF
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: QaYlVXXP8DywNJgElpO+I7u8JvG3G0fLuSpASkHIo6g=)
                          2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
                          3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5c:a2:83:11:2b:05:d3:b2:9c:f7:6c:2d:74:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=1c906e4bfa57e6477639ecb8a0ad15d4b22c440c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:0f:18:49:b8:9f:98:5b:fc:43:4a:94:46:
                    cd:fb:17:9f:87:7d:f7:94:55:44:81:7a:1a:cd:a5:
                    9f:e9:ea:b5:ab:cf:69:73:d5:96:ce:55:2b:2e:3d:
                    a9:0c:d9:86:b4:3b:73:4a:78:20:91:e1:c4:84:eb:
                    88:48:ed:5c:83:3b:ab:e5:d7:fd:62:9a:d8:fa:2c:
                    13:61:ba:55:38:52:95:54:29:d0:e0:e0:2f:41:07:
                    1b:15:22:d7:09:94:fe:c1:e2:f1:84:f3:c7:21:d2:
                    5a:c0:10:68:67:6d:13:78:65:a6:97:53:a8:3b:c6:
                    79:0c:35:a1:93:cc:b0:11:aa:ff:09:b5:00:71:59:
                    c1:87:db:24:15:cf:b5:41:aa:fc:1d:c0:8e:5f:b5:
                    27:c0:63:cf:77:fe:72:0b:32:98:15:65:f9:6e:d6:
                    ed:c0:24:5d:05:d3:db:32:49:e8:db:40:a6:2d:f6:
                    d9:b0:65:f5:f4:16:ae:ce:1d:02:5e:b1:db:61:1c:
                    ab:cf:68:b9:d9:6c:98:ff:cf:27:7b:67:41:2b:f9:
                    67:bb:5e:fc:75:6f:e5:72:dc:bd:e0:25:80:4c:85:
                    2b:07:05:dd:ad:a5:4a:33:38:7c:f5:00:53:b8:81:
                    c0:18:1d:cc:9d:ef:3b:7b:c9:64:11:30:3f:29:08:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:90:6E:4B:FA:57:E6:47:76:39:EC:B8:A0:AD:15:D4:B2:2C:44:0C
            X509v3 Authority Key Identifier:
                keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:39:0c:4d:b2:26:8f:37:2b:4c:1f:d6:93:b6:88:45:fb:cc:
         67:6d:58:df:e5:33:50:8a:0f:4f:5e:33:10:ad:01:e7:c1:12:
         89:0e:14:cd:da:2b:04:0f:c2:14:c5:1e:e0:5d:de:42:01:d3:
         1d:c9:f9:c5:e4:f5:fc:61:67:69:40:5e:de:e1:3f:b1:40:58:
         55:55:d2:5a:64:2b:93:db:8b:ab:d8:cd:69:23:04:08:60:4d:
         17:e5:5f:3e:90:4e:37:b5:ac:72:87:07:f6:73:66:ff:c6:37:
         e0:16:3a:df:aa:d9:a1:49:6f:9e:d5:6a:62:a1:63:ba:d6:37:
         a0:f9:9d:a4:8d:29:56:c1:c4:98:67:01:4d:40:73:ea:fb:ba:
         ad:99:dd:43:80:6a:96:2d:7e:f3:d6:1c:0c:a8:e0:bb:36:64:
         f9:ff:6c:de:06:b5:95:40:15:9b:82:37:b9:50:d4:3f:e8:cb:
         52:ed:f7:cd:44:98:c7:91:9c:24:e4:4e:5f:2a:08:3f:0e:2c:
         10:8a:df:d4:c7:c2:78:06:46:ba:2b:ca:46:7e:a7:a2:b0:c9:
         a8:a6:37:28:61:bc:fa:67:ec:5d:8b:3c:f1:7e:5e:ea:9e:54:
         61:05:0b:c1:aa:60:6e:83:0d:90:0a:1d:31:26:db:7c:6e:ef:
         ef:dd:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----