Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
File:                     wz-t0SfmXNkN4-lWjly8-0jJsko.mft (raw, json)
Hash identifier:          howCQMC3hgEZP3/sffPvEM7wgrIGkFHW3IZ+9pIPMu8=
Subject key identifier:   A0:E3:32:F7:68:CD:00:BB:60:2C:7C:8F:43:22:C6:8D:80:D7:BF:35
Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
Certificate issuer:       /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Certificate serial:       01962F74713525350BA7B106A4A34BFB3B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
Manifest number:          04EB
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa (hash: QFNaK1Gy0ycMOCo2B8J3U81MNF8ZnZJf7GULAc5HdJY=)
                          2: wz-t0SfmXNkN4-lWjly8-0jJsko.crl (hash: JYaABtQIwHEFaLTtYowWiPpt0ss+DmpHtpoU02sgvBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:71:35:25:35:0b:a7:b1:06:a4:a3:4b:fb:3b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=a0e332f768cd00bb602c7c8f4322c68d80d7bf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:13:ac:a0:cb:5a:ed:50:19:d7:d5:f2:13:
                    16:cf:2a:0a:3e:5e:b5:0c:47:d9:95:cb:c0:7c:ed:
                    df:01:37:5e:4c:79:43:91:af:c7:11:c1:9d:8f:23:
                    e9:4f:8d:5f:ea:eb:c3:a4:48:38:8c:cf:b2:71:bd:
                    6f:b8:fc:92:23:8d:bb:60:73:8d:10:4f:ca:fe:18:
                    1f:a6:04:4f:da:1f:25:1c:6a:13:2e:1c:c5:b2:68:
                    96:c6:b8:21:4a:a4:dc:ea:6c:45:ff:a8:2e:46:90:
                    0b:ce:93:ce:af:1d:9e:37:d7:3a:e8:08:3d:e3:d7:
                    f0:a0:e7:91:41:b1:f2:37:02:d3:0a:fc:b1:02:81:
                    1a:87:6d:8f:d9:bc:a3:70:4f:90:19:d3:8b:d9:b1:
                    2c:9a:ce:2f:7c:78:54:f5:91:e2:d1:49:23:4f:35:
                    18:1b:a4:80:47:e3:e4:01:11:7a:db:9a:cc:3e:55:
                    3a:e1:d0:e8:5e:8c:94:06:c7:d6:09:9c:ad:8d:a0:
                    0e:96:d3:74:40:e7:3c:1c:a3:52:07:a1:cf:74:39:
                    58:8d:30:76:71:1f:3a:82:d5:8e:d4:12:70:f3:ae:
                    fc:32:38:21:80:01:7f:df:0e:00:10:1c:df:04:1a:
                    b9:f0:8c:fc:78:57:bf:8d:cd:b9:1e:94:6b:b5:0e:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E3:32:F7:68:CD:00:BB:60:2C:7C:8F:43:22:C6:8D:80:D7:BF:35
            X509v3 Authority Key Identifier:
                keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:78:12:77:58:fd:38:2e:4a:14:e1:20:80:0a:4b:ec:e7:1c:
         da:b7:59:0b:c2:4d:ed:20:2a:f4:c3:f9:5b:e6:74:49:b7:37:
         9d:b2:8d:12:83:51:e6:cc:5f:f8:fb:50:5e:e3:d2:99:72:c8:
         d6:d0:51:d7:72:0e:85:ee:1b:aa:f4:61:b6:f3:28:bd:97:19:
         93:46:24:8d:56:f9:ce:87:a5:5f:8b:38:80:59:88:72:d6:6e:
         b7:86:0b:e2:e7:a0:23:f1:37:88:a5:ff:cc:66:38:34:67:e7:
         23:1e:5d:c4:26:b0:7a:35:c4:d1:b0:d1:9c:56:27:66:8c:38:
         8c:12:8e:36:76:76:5e:47:c1:75:3f:db:36:72:34:16:44:a3:
         b9:36:d6:c4:a6:dc:e3:8f:36:07:2a:7e:e4:58:cb:81:9d:c3:
         ee:d3:d5:3e:63:4a:df:12:09:75:bf:97:d3:8f:df:f1:86:e5:
         dc:ed:02:72:b4:b3:48:63:85:e6:dd:56:5c:b2:5c:08:97:66:
         cd:00:2e:42:82:c4:4d:b9:5d:51:54:16:f6:cc:59:a7:66:3d:
         c1:fb:be:e6:c5:fc:82:41:8b:3d:0a:02:0b:d5:fc:a2:96:13:
         a0:fa:fb:9e:41:68:c8:d3:f3:e9:c6:a9:c2:b6:c9:2f:c6:41:
         a0:fc:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----