Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
File:                     wwvzI77VsMENPzevDrNjrafKxKs.mft (raw, json)
Hash identifier:          25uNa0G55zI4R0UvLEVZMLgiuxWbc3je5138mPsSiPs=
Subject key identifier:   8A:FC:1E:CF:AD:08:CF:47:A3:ED:5B:C6:31:3E:AE:BE:A2:0A:26:BD
Authority key identifier: C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
Certificate issuer:       /CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Certificate serial:       01962E9862DE3389F201D486CE2243D30005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
Manifest number:          082B
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: wwvzI77VsMENPzevDrNjrafKxKs.crl (hash: qWuyLN9InRpcix9Y87r5nVkd3zCVqa3L/nWz0A3kH90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:62:de:33:89:f2:01:d4:86:ce:22:43:d3:00:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=8afc1ecfad08cf47a3ed5bc6313eaebea20a26bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:ae:6a:24:3f:b6:c7:a6:64:2e:e8:a0:6c:
                    57:7b:b7:3c:79:c5:b4:78:f9:5f:e6:e9:ea:09:58:
                    12:63:92:57:51:d9:94:9b:0b:c1:b5:e4:dd:c4:54:
                    87:02:27:95:3c:b5:e8:3c:f9:ee:f9:d8:f0:60:f7:
                    7d:87:15:03:ad:21:2f:c2:c5:df:82:00:a6:e6:31:
                    a0:f2:9f:b7:1f:71:96:52:b2:a9:74:b8:0d:ef:d0:
                    fd:e6:45:f4:0f:84:8a:11:c3:ad:98:d4:69:ab:44:
                    89:50:cb:e6:80:37:e7:a4:99:19:67:40:a5:85:7d:
                    df:52:e5:75:95:51:cb:79:d4:ad:0e:74:54:95:54:
                    ea:ee:9d:2d:65:7b:dc:79:ae:9e:19:50:4f:0e:75:
                    98:4f:a5:94:47:f4:b0:fc:f7:68:e6:b7:a6:9c:3a:
                    49:6f:51:df:f9:d7:77:4b:84:e0:33:cc:fc:a4:77:
                    87:9a:58:ac:ad:1a:0e:09:2c:53:64:59:b4:a6:14:
                    e6:f3:da:6d:07:9e:4a:de:9c:1a:85:5c:2b:a5:4f:
                    6d:49:4d:5b:fb:98:c1:2b:18:0b:24:ae:6d:4e:d4:
                    b1:ed:71:37:27:52:b9:36:0d:44:67:38:64:f9:b8:
                    41:12:ca:49:0c:31:12:02:cc:43:0a:08:27:e0:87:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FC:1E:CF:AD:08:CF:47:A3:ED:5B:C6:31:3E:AE:BE:A2:0A:26:BD
            X509v3 Authority Key Identifier:
                keyid:C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:32:d9:01:2e:38:3a:d4:b3:ff:86:a2:77:b0:d5:18:1c:c2:
         8a:12:25:cc:19:24:ab:1b:be:67:d8:7a:4f:8e:f7:4e:1e:5c:
         06:41:2f:40:51:3a:c5:f6:25:da:aa:c8:1e:7c:aa:86:f3:d8:
         a7:76:af:dd:47:e5:05:f7:54:96:e1:85:d7:d4:65:d5:1a:18:
         41:cf:bf:8a:2b:53:f1:9c:fa:30:7e:1f:1d:db:bb:e8:4d:c5:
         80:83:15:20:a0:0f:8d:36:3e:a8:83:7b:eb:69:c3:9d:71:76:
         ae:00:03:74:81:49:72:79:1e:71:e8:8d:80:d4:a5:82:ef:3e:
         fb:7c:b8:4c:f2:c6:09:55:9c:02:cf:3a:e9:64:47:23:c8:b4:
         73:8f:92:f6:6a:16:5a:c9:c1:d7:84:c7:54:00:d3:02:5f:ce:
         24:f2:54:0f:2a:9e:64:ee:19:ed:cf:7e:bc:5d:d3:4d:d3:2b:
         5c:dc:35:b5:0f:69:48:37:79:2e:75:79:6a:70:b2:78:38:96:
         de:eb:e3:89:07:c3:27:14:c4:8c:b0:93:6e:65:97:2c:65:8c:
         7b:09:ab:a1:f7:55:e6:33:64:df:a7:8b:6e:2e:52:70:a7:0d:
         2e:da:e9:18:47:85:3f:87:03:d0:b1:e4:d3:d4:cc:6a:5b:09:
         a0:e5:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----