Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
File:                     wmxJkkbYEuUuy6e39V4m7a71NG4.mft (raw, json)
Hash identifier:          7YRqaJ7XQuJnZR4k7h/TxBdVcvyEhdwbnbQpRdpWWq8=
Subject key identifier:   99:4F:61:FB:79:B2:8F:4A:A9:18:D8:AF:1B:2A:94:68:3D:5D:36:7A
Authority key identifier: C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E
Certificate issuer:       /CN=c26c499246d812e52ecba7b7f55e26edaef5346e
Certificate serial:       01962ECF7F3944114A92C9165C689A7A8C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
Manifest number:          07CE
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa (hash: vtLkjXKXNNQtUub74+UwuR4CERXIYE5j4Tti0GLdQIg=)
                          2: wmxJkkbYEuUuy6e39V4m7a71NG4.crl (hash: F83HvCtqTC7EBkeZ57stalEbboQ6f0UJxwcPAcrZn5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:39:44:11:4a:92:c9:16:5c:68:9a:7a:8c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26c499246d812e52ecba7b7f55e26edaef5346e
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=994f61fb79b28f4aa918d8af1b2a94683d5d367a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:17:f1:39:eb:60:b9:8b:50:59:e5:63:fa:
                    7f:2a:14:ed:21:7d:9b:dc:9a:b4:3c:8a:c3:a5:58:
                    ac:eb:18:e7:33:b7:37:c7:6e:d3:23:ae:da:a4:fa:
                    9d:4a:ac:f8:28:d5:43:44:54:85:37:f2:b5:cd:00:
                    09:17:c6:0c:5b:19:54:d9:b6:a9:b2:2f:d7:0f:77:
                    2f:c8:25:84:e3:0f:48:0c:fc:5b:33:ce:6b:ad:cf:
                    20:63:74:5f:38:f5:b9:39:72:06:91:74:91:3b:99:
                    56:43:e6:2b:bf:5a:6e:cd:60:79:4d:37:fb:ba:7f:
                    62:ab:6d:1f:a5:61:1b:83:d1:df:0d:59:01:eb:f1:
                    67:f3:31:9c:b2:11:0f:5d:85:e1:87:2b:05:c7:27:
                    05:df:c4:31:24:96:b1:f0:4d:e9:4f:f3:ac:46:eb:
                    13:cf:42:7e:fe:fc:79:b5:f6:c8:ec:9b:26:d1:37:
                    24:48:7f:b1:eb:90:82:fe:74:78:dd:76:79:66:bf:
                    45:73:77:a2:f7:13:2a:69:b8:f2:5c:76:b4:76:0b:
                    16:87:61:f5:63:0d:ac:49:56:45:13:f5:5f:66:05:
                    22:ba:44:99:96:76:93:c2:d2:d1:92:13:df:07:d9:
                    ff:56:3a:1b:bc:5d:bb:2c:e6:8a:de:c3:7d:23:2d:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4F:61:FB:79:B2:8F:4A:A9:18:D8:AF:1B:2A:94:68:3D:5D:36:7A
            X509v3 Authority Key Identifier:
                keyid:C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b1:36:92:18:ac:26:8e:e5:04:95:7a:7e:84:10:c3:81:04:
         bd:1d:2f:8d:c0:b8:ef:ab:1f:b9:c2:d8:ec:76:d8:5d:0c:2a:
         05:24:3a:43:0d:39:62:f0:74:ea:73:d2:a5:4b:6a:f9:42:d0:
         c7:05:3a:b7:fa:5b:7f:39:87:07:d1:cc:d9:98:d1:31:c5:11:
         97:15:b8:1a:84:f1:08:f9:c2:70:ad:66:f8:29:12:8f:b6:b2:
         e4:53:6d:55:40:bf:94:a0:6e:3e:de:53:36:e8:e5:0d:7c:e0:
         69:c8:e1:64:7f:34:15:ae:09:f0:12:25:73:b8:ee:39:9a:cd:
         8c:2b:98:dc:a5:2d:79:73:0c:ed:f1:e4:7e:63:cb:f8:e3:75:
         17:c5:29:7b:c8:13:68:79:58:1e:75:11:db:8c:33:94:4c:35:
         9e:6e:f4:11:0f:6f:f8:ec:9e:d8:d9:6b:fe:d8:64:e4:25:1e:
         6c:4b:f2:24:ae:dd:8a:47:32:41:c5:13:65:a0:4a:0b:88:71:
         0f:6d:6f:92:eb:75:ae:6d:13:ba:e9:c8:23:d8:f2:43:36:ce:
         99:ef:ef:15:40:01:75:b9:ca:e4:62:17:95:9b:54:4a:8e:e1:
         73:a7:cb:f6:4a:0e:a6:f2:ef:d9:d4:1a:5d:84:c5:0b:59:7c:
         fd:9b:9d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----