Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File:                     wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier:          3XRU3T2+6JE0iPT4H78oeNDY/R3C1Kc9vBbF4eMCoY8=
Subject key identifier:   DD:97:AA:D7:0D:26:45:07:A1:FF:3E:77:B3:DA:EF:68:62:98:74:42
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer:       /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial:       01962E61BD82D937B523E34105A7D71025E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
                          2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
                          3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: lVyhTqfmuWv0F7l6RotufjWE+lAuzjgn2rQ606wIP4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bd:82:d9:37:b5:23:e3:41:05:a7:d7:10:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=dd97aad70d264507a1ff3e77b3daef6862987442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:90:91:3b:0a:26:a7:94:46:49:19:75:f6:f2:
                    1e:b3:00:5e:f6:1b:a0:fd:30:cb:74:f0:d4:f1:25:
                    cb:31:7f:0a:41:07:fb:30:86:a6:fa:e5:26:94:63:
                    b8:1d:55:42:ff:9c:58:f6:39:53:11:9b:ee:b3:d1:
                    0a:14:e4:ac:4e:e7:81:d4:c3:cd:4c:97:f2:27:65:
                    73:1c:33:72:86:af:3c:7a:83:d9:80:37:00:27:d5:
                    40:ad:bf:e2:93:63:f1:04:bb:83:5d:41:a5:52:47:
                    43:d0:03:18:51:cf:be:51:bf:5d:b9:ce:7f:91:02:
                    d9:46:81:1d:21:8a:db:12:08:5b:35:8b:24:77:04:
                    64:02:42:96:aa:fd:00:89:50:82:f8:5f:3b:0c:c7:
                    2a:29:b5:01:d5:6e:cc:62:39:ab:d9:6b:6a:6e:01:
                    c8:cb:7d:56:61:fd:aa:f2:13:7b:b8:f0:b4:fd:f0:
                    04:71:62:6d:02:3f:4d:dc:43:5d:7d:7c:98:bb:87:
                    d9:6a:5a:7e:2d:f8:09:1f:e9:01:80:ce:12:06:9d:
                    5c:a7:56:7b:51:6a:ff:e0:f9:ac:36:21:b0:26:22:
                    c6:97:19:eb:96:dd:62:13:c6:fb:a0:4a:fd:b5:89:
                    ea:15:4d:f3:bd:c7:50:02:fe:32:49:d5:5a:f2:38:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:97:AA:D7:0D:26:45:07:A1:FF:3E:77:B3:DA:EF:68:62:98:74:42
            X509v3 Authority Key Identifier:
                keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:bc:95:93:1c:cd:80:96:58:a1:33:23:31:50:5a:14:0c:68:
         4c:44:d2:3e:d6:ef:0c:f7:ac:a1:f4:62:3f:f0:49:c6:37:d8:
         dd:20:9a:37:3b:7a:ab:66:9c:2e:ac:5d:39:6b:68:7a:61:a9:
         3d:9d:ea:cd:8b:0a:84:4d:3e:75:84:90:d8:53:41:d8:4e:66:
         dc:96:63:8c:0c:86:2a:32:f6:89:f8:53:a1:fe:92:90:ec:09:
         91:26:93:18:d9:21:bf:08:19:c3:6e:26:bd:7c:7b:cc:99:28:
         72:af:20:6f:8d:f4:f4:87:81:6c:22:2e:d4:0a:39:9e:4e:66:
         6a:f5:ef:d1:84:a4:e5:60:b5:3e:20:40:f0:7b:c6:e0:bc:f0:
         46:bf:0c:ec:63:77:97:27:65:03:2e:15:1b:e7:9c:5e:5c:95:
         9b:1e:43:61:14:c4:56:e7:f4:7d:0e:6d:93:0a:55:41:ee:ec:
         a4:7e:2a:d0:03:b0:0e:d6:d4:63:86:32:75:29:12:9a:c4:9e:
         33:79:c0:37:80:8c:28:25:bb:47:6e:e2:f8:d8:54:8d:57:4b:
         e5:3a:73:b7:71:f3:1f:50:cf:b3:ef:db:68:df:a9:d5:4d:b8:
         e6:b9:3b:cc:25:e0:83:a3:c5:9e:0b:a1:69:7a:3e:61:af:0f:
         76:6c:2d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----