Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
File:                     wOod26TL08tX7IYNhf9P-TAa_OU.mft (raw, json)
Hash identifier:          XfPfu9jxei9aj54iLR+bBpgTLQuaTLoDeiXOrLPfht4=
Subject key identifier:   B7:A1:EA:BF:94:65:83:97:F7:99:34:D1:62:3C:BD:11:09:28:CA:E2
Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5
Certificate issuer:       /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
Certificate serial:       01962E996CBA6E1EFA819E2DE58253226FEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: AMYGfvxAWSGgHnKu_QntycSpGmI.roa (hash: QcPElnjpeBVJZHljf/0lA1BJWaDX6zX8ch7k4Gzc5Ng=)
                          2: wOod26TL08tX7IYNhf9P-TAa_OU.crl (hash: 50/Cz8Hle6EgQdakIpfEDnC3MCmD5+OLBbM1kA5SkVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6c:ba:6e:1e:fa:81:9e:2d:e5:82:53:22:6f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=b7a1eabf94658397f79934d1623cbd110928cae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:09:ae:91:72:e1:e4:eb:4c:94:c1:52:86:3d:
                    ae:1a:5d:51:86:46:4c:d4:96:b6:16:28:d2:d2:fc:
                    40:f8:2e:ef:c4:9d:91:53:b1:0b:25:f7:46:3b:c4:
                    73:3b:4b:2d:60:d7:35:03:e1:82:fd:04:ad:16:46:
                    96:5e:55:c8:2b:34:07:59:1d:f3:de:d8:e9:53:dd:
                    77:29:a8:73:55:dd:65:20:80:71:af:25:16:e4:ed:
                    1b:df:f1:10:b8:07:ff:61:c2:de:d6:9f:e5:a7:03:
                    d1:50:61:87:b8:fa:59:f5:37:3e:ad:dc:a7:81:e0:
                    c9:f5:39:23:5e:61:42:cf:ac:ed:b7:84:b4:3c:bf:
                    0d:c0:13:05:72:09:30:c3:2c:97:23:68:b6:47:c5:
                    f8:ca:04:55:23:64:b4:b4:4c:54:0a:9b:aa:4c:1e:
                    76:80:4d:5c:77:8e:48:35:50:22:c3:b5:fe:0f:1f:
                    c1:e5:e8:cd:0e:b3:99:a5:cd:3b:88:a6:45:c6:30:
                    63:a1:05:77:4c:a5:46:7c:c0:f6:76:aa:ec:3f:c8:
                    7a:ab:3f:9d:37:8e:d9:71:3d:5a:60:6c:c8:ca:cf:
                    01:5a:4c:ad:ad:88:3b:d7:83:14:d3:fe:ab:ef:b9:
                    21:8b:53:ae:dd:f4:95:1e:41:b8:b3:0a:61:5d:7c:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A1:EA:BF:94:65:83:97:F7:99:34:D1:62:3C:BD:11:09:28:CA:E2
            X509v3 Authority Key Identifier:
                keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a9:1e:13:b9:2b:5f:c7:53:e8:2e:2a:1d:82:95:e0:f1:55:
         02:6b:35:99:c1:0d:94:d5:1a:1e:d4:85:92:66:4f:16:bd:f4:
         13:1b:bb:5c:23:be:ab:e3:0f:d6:c7:32:7c:1f:5f:1d:85:ac:
         2a:09:45:6d:e0:3d:45:f5:1c:a7:25:0e:d3:bd:44:c6:ab:00:
         ae:bc:74:6c:eb:5b:ea:fe:44:10:74:4c:22:29:0c:61:80:52:
         13:7d:c1:bb:46:3c:43:f4:32:ea:fd:a9:f8:14:4f:75:fd:6b:
         14:09:58:8b:8f:4b:01:42:fc:2b:06:12:2f:6d:2c:6c:bb:54:
         e4:c4:39:18:bc:1a:2b:63:5d:72:2b:f2:b3:ca:b6:f2:82:ea:
         c1:70:e2:2a:0e:99:7e:60:ee:1f:ae:9f:73:7d:d3:fb:35:ce:
         8c:91:d2:5a:c0:59:92:9d:b6:44:52:34:9b:f5:5e:1e:ac:6a:
         2f:15:a2:03:4a:b7:4f:f9:3a:6b:1d:e0:c9:9a:14:2a:50:72:
         cc:02:08:fc:a7:1e:2e:d9:96:75:d3:cb:4d:cb:7c:b9:41:8a:
         96:f4:43:5c:0c:d1:55:dc:1b:2f:d2:fa:a7:cb:3c:a8:8a:fd:
         53:4b:ca:e9:b8:8d:bc:5e:55:a7:0c:79:4f:d3:28:c1:ad:23:
         b9:45:83:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----