Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
File:                     wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json)
Hash identifier:          DWVjALvZf4n71Q+rCROQQA+8Be2YLvAHPjUCe5ay9JA=
Subject key identifier:   46:71:65:7F:F7:0C:87:1C:9A:C4:6C:64:92:81:60:1D:17:9A:FE:F7
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Certificate issuer:       /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial:       01962F3D5FD53C30F2DBE89FF5557C4ED596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
Manifest number:          0B6E
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: M-zl6ZmtNK_TSwrT44MkMmFWsWY.roa (hash: 4yxdkDwmfz59LnRbcG6OUavxv8vAR+8hlDkw2Ess8wU=)
                          2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: x/Iq3E6KXL84d7I4WXIPPmuZLCj5hVrGFCydUTMFgtk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5f:d5:3c:30:f2:db:e8:9f:f5:55:7c:4e:d5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=4671657ff70c871c9ac46c649281601d179afef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:53:d6:b0:ec:47:28:22:e8:6d:72:cf:fb:
                    d7:60:c2:67:3b:c7:66:0c:cf:63:64:25:de:e9:20:
                    be:d0:06:ab:7c:85:16:6a:49:1f:98:6b:06:00:ea:
                    92:b5:6f:88:f7:88:26:f6:57:f7:e5:1f:f1:22:70:
                    75:72:65:47:f5:10:3b:46:41:cd:d1:89:71:9b:8b:
                    b0:37:a3:5c:7b:61:22:be:50:7b:22:c3:19:50:8d:
                    66:82:c6:95:4c:93:8d:f2:6b:c8:c0:9d:19:2d:1b:
                    ff:eb:f2:76:35:0f:70:99:66:41:9d:d5:c3:5b:76:
                    45:d4:50:7f:a5:93:19:a7:9f:93:c9:98:fb:ee:f9:
                    bc:92:2c:ea:4e:b3:e1:e2:d6:6d:6d:0d:d1:46:f3:
                    57:d5:71:25:ad:f8:10:b4:01:d0:64:4d:39:e6:36:
                    ed:55:f5:ec:45:ad:e2:d7:67:ac:c1:83:42:37:8c:
                    5c:d8:26:e5:99:c5:0a:31:57:be:e1:bf:00:be:c3:
                    32:1c:61:80:74:41:79:0f:3b:ba:d1:3d:1a:34:45:
                    be:af:80:67:6e:15:c8:0d:f6:1b:69:b2:4c:9a:46:
                    b0:14:9f:9a:36:9a:ff:e4:74:93:78:f5:d2:63:35:
                    66:58:70:3c:ec:06:88:a7:f8:4b:80:26:0f:0d:ed:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:71:65:7F:F7:0C:87:1C:9A:C4:6C:64:92:81:60:1D:17:9A:FE:F7
            X509v3 Authority Key Identifier:
                keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:42:61:cf:b0:fe:57:2e:e6:1b:0d:7a:cb:78:f3:35:e4:14:
         a2:64:10:74:ba:00:cf:9e:4c:9e:20:cb:0f:a8:8e:5f:ae:3c:
         98:c0:4d:cb:fb:8d:1c:6c:87:db:61:91:bf:95:0e:45:26:cf:
         1a:31:07:02:ad:1c:ca:c2:b9:cb:04:ef:a7:ef:a1:32:03:17:
         5c:3b:2b:2a:fe:5e:2e:d3:7c:32:86:a3:be:6e:6d:38:e5:0d:
         a1:f5:a9:d4:d8:1f:67:ce:3c:50:5d:2d:a8:97:5e:79:bf:ad:
         94:b2:0c:cc:be:55:0b:4b:c1:43:5e:ed:2c:8a:84:0c:6b:8b:
         c1:ae:27:01:e8:a2:20:a9:73:0f:c8:84:6e:05:61:69:1e:e4:
         73:2d:65:d9:32:06:fb:06:2e:7e:ef:42:75:1e:99:7a:a0:79:
         af:0d:bd:94:81:1f:80:7a:5a:d3:27:a3:38:cd:62:63:aa:99:
         b5:92:cf:1e:e7:8b:63:b4:80:b0:9f:0b:2f:19:61:30:76:6b:
         4e:b1:03:e2:58:84:79:6b:47:3b:17:79:74:d3:31:c4:88:32:
         8b:f3:99:4f:22:f0:80:dc:97:1e:70:1c:b6:66:12:9e:d8:fe:
         c3:cc:06:19:68:37:e1:d2:31:fe:b3:71:d2:a8:78:ec:49:16:
         a5:c4:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----