Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
File:                     wvX9MCMFUknyE9FcugAMoCa7b6M.mft (raw, json)
Hash identifier:          ELBqkgaqoNRPvt20JnxA12cKgKUeYxCfnwVOPQo9Nq0=
Subject key identifier:   F0:3B:C0:B3:87:3F:2B:01:2B:A8:77:7B:C6:78:7C:16:AA:54:CD:DF
Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
Certificate issuer:       /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Certificate serial:       01962ECF54D7B9597996F21F6CBB7AF61ABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: BMHVHu-JbszVmlaPK0QGdQjobqk.roa (hash: G29ynB8gmG1T9KHI25JYWbt3xJ8CodHiSO5tv95eYEk=)
                          2: wvX9MCMFUknyE9FcugAMoCa7b6M.crl (hash: Ti97FbH03CeRNbECD5HdXDfiK4FuNGu7WKtFypbZW9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:54:d7:b9:59:79:96:f2:1f:6c:bb:7a:f6:1a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=f03bc0b3873f2b012ba8777bc6787c16aa54cddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:16:e1:e9:c9:03:33:10:9b:53:c3:dc:73:
                    a8:4a:36:db:82:71:01:2c:e2:69:ab:7d:17:dd:ef:
                    7a:3a:81:93:b9:55:d8:82:c6:a4:ec:f2:2e:59:c0:
                    b9:48:e8:62:65:64:4e:ab:04:7f:b9:59:3c:da:66:
                    27:ea:52:51:2e:ae:5a:01:a0:32:a2:13:42:77:62:
                    a2:9f:db:d6:d0:a5:04:a0:6e:fd:04:2d:e2:83:22:
                    34:74:12:f7:1e:88:3a:c0:66:86:ab:3e:7f:22:57:
                    54:4b:8e:31:9c:5f:ef:bd:3a:73:10:8d:ba:b7:2c:
                    ce:39:f8:4e:c0:9b:e7:47:14:f3:97:ac:ee:15:ad:
                    3c:31:80:98:31:fa:7d:01:26:77:22:b0:32:4f:81:
                    40:8d:08:18:b1:09:f6:59:16:f7:89:ef:68:0c:75:
                    c0:7b:2a:25:cc:ef:8a:dd:6c:51:f4:f1:3b:3f:0f:
                    60:60:23:e4:c6:d1:83:3f:8d:f3:22:bb:24:91:b4:
                    89:e2:4b:0e:10:35:cc:cb:37:57:8f:3b:dc:74:5d:
                    e1:0b:f7:f5:43:b1:a8:48:30:a3:b8:09:9c:29:7a:
                    d0:25:18:b2:9f:e6:f9:f3:8c:e9:d4:d7:77:5e:8a:
                    5a:5f:6f:40:89:35:bb:80:8c:ea:b3:3b:7d:05:b5:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3B:C0:B3:87:3F:2B:01:2B:A8:77:7B:C6:78:7C:16:AA:54:CD:DF
            X509v3 Authority Key Identifier:
                keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:53:73:fa:4a:e0:3d:c8:94:76:29:8f:c7:a8:f8:d2:ae:3c:
         c5:05:b6:10:8d:e2:01:20:0a:ec:ae:b3:14:3f:95:70:01:60:
         7e:f9:83:b9:ce:89:28:f8:f4:3e:b0:fb:33:78:8a:16:fc:f1:
         e9:4b:ad:2d:51:0b:5f:42:5d:1e:cf:3b:d4:40:62:2d:a1:00:
         ce:0e:c7:9b:cc:ec:33:1f:e4:e6:58:16:14:1f:7d:6c:b2:bc:
         91:38:4a:95:cf:be:32:c1:40:9c:2b:7f:39:90:25:9c:c0:2a:
         2a:51:c7:26:ce:0a:21:f7:b2:3e:7d:0d:c7:19:a2:8d:38:08:
         57:35:69:db:08:73:b7:ae:ad:b7:03:e4:2c:1e:47:96:89:79:
         5f:a2:fb:67:47:e5:d0:83:ca:a4:e9:04:2b:db:e5:32:ee:fa:
         03:de:ee:8a:1a:fe:d4:c8:f6:31:b5:66:21:ba:37:27:67:23:
         5d:48:40:01:85:32:89:cc:f5:5a:1d:3e:b6:19:16:f6:9c:12:
         2f:a2:ea:bc:93:34:3a:0c:9b:21:4a:52:7a:53:2e:03:a7:4c:
         fb:bf:9f:bf:bd:ff:af:20:5b:b3:d9:c2:87:0b:2d:0c:2b:f8:
         3d:0d:cd:47:04:be:f0:f9:38:b5:56:0a:cc:b6:3c:a5:06:3d:
         9d:ca:18:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----