Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
File:                     WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft (raw, json)
Hash identifier:          hMzz6ItNDA/+ktFNVw0cAissrIJmxgQMOe4Nqr8AZxc=
Subject key identifier:   6F:0A:FC:7E:DD:74:F5:03:24:08:21:76:13:57:41:24:38:18:05:B3
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Certificate issuer:       /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial:       01962E99BF4E126D49DED559D1F4C7D648DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
Manifest number:          11C7
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: HASJFQJ0dhUBOsyjobgHrPemYuk.roa (hash: t2cor/choG8bzkBioIX6Z6t5j6GZXqfW3BgdsKtvgZE=)
                          2: V2wJ6rRmC43RRh3IPdBHHjW281Y.roa (hash: Avq4OHU4hwzXrjOvbzGbJG8yV+Q0N6KuIdKdAo1r63E=)
                          3: WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl (hash: 5DgU9/JRVFAN2Q278k6lLQrBhEpiapmbUjw6TY5orNw=)
                          4: rv-2MUAhxSXgJ6_WUeSuY2HQEIc.roa (hash: pFW5RVqZxflQiZHo+kcVS/DdoHRiWRG5Vues4Jg84IU=)
                          5: tIRGV1d2T8vpZcEr5yhT7qzzmu8.roa (hash: k7phpFXieBGnmSKu+QsLBAEm2dEA+/STqbnwyEif0CA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bf:4e:12:6d:49:de:d5:59:d1:f4:c7:d6:48:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=6f0afc7edd74f5032408217613574124381805b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:ae:bb:89:86:36:e0:c6:af:e3:bf:e8:e1:
                    e4:bc:ad:f9:94:3b:57:75:a9:7a:e7:16:ac:8b:e9:
                    3c:3b:f9:36:3b:98:27:3a:8f:d4:1c:1b:7b:e8:1f:
                    20:d4:54:ae:56:81:ea:c9:8b:1f:77:c3:78:c3:92:
                    d3:02:c4:19:b6:7b:b4:27:e4:4a:fc:47:cf:0f:50:
                    9c:48:36:d6:e5:75:e2:b7:57:da:4c:bf:da:31:50:
                    d2:1d:4c:1a:a5:c6:ee:8a:99:b1:49:96:fd:2f:4e:
                    b5:58:12:ff:06:24:13:b0:56:bb:5c:fe:27:aa:de:
                    07:a9:d0:3b:74:25:19:1e:04:e0:07:4d:03:58:ec:
                    ac:44:97:98:fc:ee:2d:50:2a:0e:14:1d:6d:1f:5c:
                    21:54:bb:e7:92:7e:3e:12:36:4d:17:19:94:30:bb:
                    21:95:4d:a4:ec:cc:11:2f:8d:57:eb:5d:51:c7:bd:
                    e4:05:99:ef:5e:5c:1b:8e:3a:b2:40:7e:b6:89:85:
                    d9:d4:1e:72:12:20:fa:7b:ba:24:81:79:e1:db:4e:
                    d4:f4:80:02:19:c2:94:91:ab:d8:4d:26:82:f5:d2:
                    48:34:2c:e5:08:b7:34:1a:ff:63:5f:9b:a3:46:6d:
                    90:2e:4d:d2:1b:01:79:1a:c6:7c:d2:4c:91:40:d0:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:FC:7E:DD:74:F5:03:24:08:21:76:13:57:41:24:38:18:05:B3
            X509v3 Authority Key Identifier:
                keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e5:6a:71:61:a6:e6:09:d2:0e:ef:a1:1b:b0:ba:52:30:86:
         e8:c1:84:e9:6b:f6:33:63:c7:4b:23:9e:65:2c:5d:7c:50:2e:
         71:96:88:a9:5d:af:5d:d5:83:49:10:99:8d:1d:38:28:6f:60:
         ce:38:91:ae:dc:07:25:34:32:9a:71:37:75:e6:e0:08:28:fa:
         05:2f:21:ee:c3:81:02:5e:b5:ff:98:1e:9e:5f:62:8b:5c:6d:
         32:02:f9:ed:17:74:13:96:e9:a0:d9:16:2c:aa:36:e2:9a:5b:
         b1:f8:64:37:7f:7d:6d:1e:4a:e1:62:1c:34:31:fe:4c:94:bc:
         90:7b:14:fe:8a:db:86:7e:68:25:b7:9f:1a:57:f7:b4:d0:fb:
         07:ae:bd:94:8d:28:09:ed:52:3e:46:b5:5b:70:31:56:05:9f:
         41:14:44:32:1b:71:d8:3e:4d:44:f2:cc:5c:f3:98:4e:44:ec:
         45:74:8b:95:9e:93:59:c5:05:0a:be:e9:ed:0b:d1:bf:e5:1d:
         58:1f:78:ec:33:92:46:e6:85:86:a7:e4:a6:a9:b2:4f:fa:ba:
         2d:a8:30:25:e9:fc:22:8e:1f:87:ad:e6:90:96:e3:26:8b:e8:
         c5:5f:43:e2:38:fa:87:45:e7:5a:9d:7a:8d:4f:d3:2a:24:66:
         39:54:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----