Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
File:                     wrUuo8q9FGpXffzfuHX_WjV1ctc.mft (raw, json)
Hash identifier:          sTdQbwN/IX6CVHn61cXC6hP3kz4FsHcFs99SDN3a+fg=
Subject key identifier:   81:03:D9:96:6D:1E:50:20:36:01:85:88:86:0E:5C:D5:5E:99:43:8F
Authority key identifier: C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7
Certificate issuer:       /CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
Certificate serial:       01962F069F5E7BB642DAE7D6218503A4663A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
Manifest number:          046F
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: MG_LemiZ4GgmFKwuBUT8GzFCS9o.roa (hash: OHMWKPBCF82oEvnytVAEpjmK3rUs3XOc7SKkHkxU2KQ=)
                          2: wrUuo8q9FGpXffzfuHX_WjV1ctc.crl (hash: fCSQBbARiZidNqMnqt45dTik9g1oGKsXUgx648SM+VA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9f:5e:7b:b6:42:da:e7:d6:21:85:03:a4:66:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=8103d9966d1e502036018588860e5cd55e99438f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:bd:56:58:01:32:59:e4:a7:29:13:13:4b:
                    d1:9b:1b:cf:be:ec:03:bf:af:57:b4:cf:d5:34:9c:
                    a9:56:47:6a:b1:b3:18:51:0c:32:0e:05:d6:d3:c9:
                    77:26:42:a9:c8:1a:d9:7d:dc:7d:31:05:4d:60:91:
                    73:a2:d3:e3:d2:45:d1:55:0f:a9:37:aa:c8:96:50:
                    67:fe:10:e2:05:39:61:84:0a:9f:11:46:0f:58:2a:
                    e0:13:94:a0:39:fa:68:5b:4c:8a:84:6b:e9:74:07:
                    f7:96:b4:0f:b9:35:ba:46:22:34:1e:12:e6:0e:08:
                    59:a0:c9:71:a1:4a:c2:4e:fc:5b:7a:c2:bc:c1:c0:
                    f8:f3:21:be:d5:cf:80:2a:ae:5e:71:77:ad:c7:79:
                    94:c6:a7:aa:87:34:a5:a6:40:5e:22:56:d3:d7:91:
                    4d:de:75:ed:ba:8b:f5:0b:16:ac:d9:b9:fa:51:68:
                    08:b0:0a:70:ee:44:bc:43:f6:90:15:59:ae:2a:e0:
                    b1:3a:e5:c4:f2:71:48:53:33:7c:87:7f:61:8c:72:
                    d4:ef:b8:6a:a3:0e:2d:e0:e9:bd:d9:68:7f:18:b7:
                    6d:5d:4c:db:c9:a8:59:11:50:da:07:19:8b:03:3b:
                    49:00:2e:d4:b8:0b:3a:44:51:2c:64:b5:78:35:65:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:03:D9:96:6D:1E:50:20:36:01:85:88:86:0E:5C:D5:5E:99:43:8F
            X509v3 Authority Key Identifier:
                keyid:C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5d:0a:7d:75:6f:6c:26:84:f6:a7:ce:8f:cc:c9:d8:6e:1c:
         6e:66:da:d0:fe:37:63:91:67:dd:a4:a1:0f:59:75:a1:eb:d9:
         a2:2f:6f:e3:39:f9:51:95:67:d4:21:6b:6a:17:d8:c0:37:bd:
         fd:e6:8b:45:8d:e0:05:93:98:4c:e5:79:74:8d:b2:bb:11:e9:
         bc:02:4e:7c:9a:84:cb:3e:99:7a:2d:fc:23:bf:43:a1:dd:81:
         da:03:2a:ef:ba:4e:7f:84:73:c3:ad:74:c0:f2:d8:94:ac:b6:
         eb:df:09:29:7d:3c:3b:7b:1c:3d:c7:99:05:1c:0b:14:a8:47:
         82:d8:de:a9:f9:a5:2b:e6:f3:b3:5c:81:ef:28:84:ad:1c:98:
         f5:e4:67:8e:05:e0:00:2f:07:14:8f:16:8b:3b:76:e5:7a:fc:
         af:c1:46:36:2c:3b:cb:14:8c:3e:44:6d:87:5b:71:ed:ab:27:
         d9:0f:54:53:a8:09:30:e4:b8:93:cb:0e:66:59:5e:3f:ff:1b:
         4b:93:29:20:93:52:30:8f:a1:a5:a7:98:85:29:f3:39:40:1e:
         0a:03:d5:b9:f9:f8:3d:87:ef:3e:23:b0:8b:98:67:cd:95:eb:
         09:d2:9f:2d:7f:c0:57:46:12:25:e2:99:ae:45:53:4f:f9:ea:
         28:b2:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----