Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
File:                     wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft (raw, json)
Hash identifier:          lhzyoSVZa1huQ7myHssTl76547xCcZD+Tc2LokbYuec=
Subject key identifier:   FB:73:27:13:3E:99:C4:6C:72:C7:AF:19:A8:C9:4B:A1:6A:A7:44:94
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Certificate issuer:       /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial:       01962E988D43C6B4BEF74844D9018DC47B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
Manifest number:          04D8
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa (hash: FPKU4sBZtKV03dopSyyPb4q2mr5BiiBfqidcOPbFyqg=)
                          2: o4qbcCQCij_4lrM4fuG-GZzDpjs.roa (hash: OQOBy/7xXgD89cYeKeQCwe26Q3oYa0ii7bEbJEXvS2M=)
                          3: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl (hash: R0Ba7xDzfOYWf4RYzFzTop2YDhNZ2FH6HWXD/ZPgC+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8d:43:c6:b4:be:f7:48:44:d9:01:8d:c4:7b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=fb7327133e99c46c72c7af19a8c94ba16aa74494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2e:7f:b1:d6:9b:4e:37:13:d0:3b:de:7f:c9:
                    eb:fd:4e:da:b3:fb:04:6a:61:ce:b1:86:57:c3:3f:
                    69:db:00:1a:80:5b:84:14:ad:2e:b1:67:02:ef:98:
                    f2:21:6c:f0:13:1f:f5:14:d0:69:74:19:fc:46:39:
                    43:d2:cd:bb:cd:66:c9:d9:61:84:6a:6d:95:56:b3:
                    4e:1a:64:86:f8:15:61:66:f1:83:6d:f1:dd:65:0b:
                    49:12:71:61:ac:4e:b2:c5:98:d2:89:be:44:7a:97:
                    50:91:2c:1e:83:d2:26:d0:79:82:51:1a:ad:05:f3:
                    9d:e0:65:70:b3:d7:46:12:06:ed:43:fe:91:33:a9:
                    1b:13:3c:e2:98:6a:94:b0:b2:13:bd:ed:c4:9e:38:
                    cf:f4:eb:b9:1a:1d:61:75:3b:41:36:ef:3d:15:32:
                    8f:18:3a:45:d6:19:65:f2:1a:9f:e2:16:56:29:4a:
                    b4:7f:5f:e7:f9:4e:8f:76:43:a7:37:71:e0:eb:4a:
                    46:a4:1c:8e:e4:0a:fc:90:ba:6d:64:94:2c:62:33:
                    40:94:1b:b8:2c:69:cf:44:b8:74:4b:21:11:d9:f2:
                    24:d1:ea:c5:8a:dc:57:0f:cd:b5:ba:0b:d4:4d:3e:
                    aa:16:c1:26:02:51:8c:9a:3a:50:30:87:a2:31:b9:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:73:27:13:3E:99:C4:6C:72:C7:AF:19:A8:C9:4B:A1:6A:A7:44:94
            X509v3 Authority Key Identifier:
                keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:35:19:56:bc:d4:ed:05:50:f0:a7:15:21:a4:74:04:75:
         64:c6:b1:59:b2:b3:e2:6c:75:37:14:6f:dd:b7:fa:68:d7:95:
         20:fe:40:8a:b6:46:9f:fd:86:a6:42:df:3e:55:3c:9e:9e:be:
         e0:5d:0b:b6:d1:98:54:1c:d4:21:cc:db:7e:14:29:d4:bb:67:
         77:51:f9:a1:b9:af:21:48:12:b0:b1:08:a4:ef:11:3f:54:d4:
         44:2e:3f:1b:1b:93:b0:2b:66:f6:c4:ac:08:13:8c:3d:c3:4b:
         8a:28:35:06:0b:ed:4b:43:16:a0:2d:bb:66:f3:b8:5a:4b:c4:
         08:5a:a8:02:6f:5d:4a:a4:6b:1f:b6:06:06:b3:90:0d:db:85:
         3c:81:9a:f2:92:2f:be:97:5c:a5:5f:9b:56:e1:a3:a9:f1:90:
         22:27:28:16:db:c8:14:19:76:ec:9c:94:9a:03:2a:59:44:f0:
         cf:18:b3:2f:b3:da:e2:6a:85:8a:35:39:15:08:12:44:88:f6:
         10:3a:60:62:f9:82:52:30:d9:ef:e8:ca:44:32:f9:79:9d:88:
         cc:ee:67:d7:72:9f:55:4f:f5:e2:4a:34:fa:5c:41:95:68:ee:
         e1:71:66:31:37:c2:3f:19:e5:9f:b8:c1:b1:8c:4e:68:d6:09:
         26:d9:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----