Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File:                     CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier:          bPwK0e+7Fi8H8pQsKZF7RBIC60fNf5oXfnk+yebJZ50=
Subject key identifier:   0E:0E:62:C5:69:17:92:58:30:A6:6D:77:C1:A5:17:78:B2:A7:6A:19
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer:       /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial:       01962F74C340E5675587900FF0858FC7A9EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: pxm8zhPcftX4Zmk1oUJFpdqtjeFbh2kDRy6akw0dhJk=)
                          2: GONoBaS0nACGnEjc-yHuqDoDlew.roa (hash: eVcWG363H9IPwj/aWLR4h7Mq2fdRg0ul16LrmgLPOaU=)
                          3: kSa4_sqr5-NiqBRmmF4fkyu-chg.roa (hash: nw6nn6yk21XAzxXJuVEoChD6KrMH42rDNZdSGxHsW0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c3:40:e5:67:55:87:90:0f:f0:85:8f:c7:a9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=0e0e62c56917925830a66d77c1a51778b2a76a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:66:e1:43:f2:50:2f:86:5c:2d:11:f4:e9:
                    e1:44:6e:df:91:90:3b:71:b1:69:cd:3b:53:76:e7:
                    e5:60:f5:66:b2:24:47:5d:fb:5a:cf:d8:38:53:13:
                    3f:83:89:fa:b7:ed:df:9a:cd:74:4e:aa:17:d1:a3:
                    83:10:70:91:8c:ac:95:9b:ec:b0:0c:5c:35:bc:fe:
                    70:89:07:2b:28:8e:11:41:35:49:82:7d:e6:1b:4e:
                    60:87:c3:5e:b2:8c:21:73:3f:5b:60:bd:91:81:48:
                    9d:89:ba:89:08:63:3a:6a:93:70:22:b1:e5:3d:41:
                    f3:d5:b5:75:fa:fd:8c:b6:f4:f2:c7:94:39:e6:05:
                    d4:2e:9e:25:4f:25:67:08:91:f8:72:1f:a6:18:db:
                    f8:4a:40:6f:ca:2d:4b:59:73:ef:0f:af:c5:53:0e:
                    24:23:b0:ff:0e:21:1d:ae:f0:d2:af:fd:09:da:c9:
                    a8:d2:b5:7d:76:0b:2f:f4:03:cc:e5:5b:bc:13:98:
                    0f:64:27:34:ed:1b:e1:8a:b0:b4:c3:06:43:dd:13:
                    dc:3c:bd:bd:ef:ec:4a:49:91:8e:45:fb:8f:d0:2a:
                    a0:92:0f:40:9a:cb:f8:f4:8a:03:a5:2c:0d:ae:28:
                    e6:3d:1e:7a:98:6f:e7:97:85:37:d6:36:14:a5:ef:
                    20:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0E:62:C5:69:17:92:58:30:A6:6D:77:C1:A5:17:78:B2:A7:6A:19
            X509v3 Authority Key Identifier:
                keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ee:8d:22:3b:5b:5e:d8:57:3d:55:e9:46:27:ff:bc:3f:22:
         b0:9b:09:49:87:21:5c:17:b7:4f:09:97:f8:ac:71:71:a2:6f:
         de:11:ad:dc:ff:64:6c:de:c8:f0:de:65:11:3b:56:46:74:3b:
         f0:57:c6:e7:1c:0e:92:01:2c:21:43:e6:bc:29:36:f8:37:e4:
         70:fe:cb:a7:5a:bc:53:36:51:b6:81:1b:0e:10:2e:94:2f:4f:
         d9:bd:47:c4:9e:99:94:6d:6e:bd:1e:ae:8b:d6:05:00:e1:07:
         68:6f:3e:ea:ae:90:c8:13:eb:c6:1b:a8:7f:c5:b7:bc:57:5f:
         fa:b3:8c:af:ba:b5:c0:d7:c7:f7:63:89:18:a2:08:00:ce:83:
         0c:a4:10:a7:44:eb:ee:47:6d:8c:aa:11:d0:a2:8a:bc:36:12:
         79:90:cb:73:5e:d8:4b:19:11:6d:6f:e2:7d:64:56:da:1a:21:
         af:48:89:e4:a5:f1:76:d8:54:92:e4:67:3a:52:41:5f:d5:78:
         2b:c5:bb:26:12:0b:1a:bd:93:60:a7:94:64:67:63:ef:67:c6:
         5b:e3:fe:e9:fe:19:46:58:50:2f:91:e4:5e:4e:4f:58:f4:72:
         e4:3e:b2:29:83:ff:3a:a1:91:3b:4a:e3:68:fd:3c:81:30:fc:
         e5:24:0c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----