Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File:                     WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier:          nZwPzOt5X112GsjQ7bTglmx5pwhIjcZxMw3ZdXPtaDY=
Subject key identifier:   06:3B:25:B8:04:80:7E:01:59:22:AB:ED:4A:6B:61:47:D8:D4:BC:C1
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer:       /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial:       01962DF3B38680784CB4F14C589EA4133849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
                          2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: +kLWPYVh2yTHqADaPjemtn9kc6/Q2JQ7J+ditIe0GRY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b3:86:80:78:4c:b4:f1:4c:58:9e:a4:13:38:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=063b25b804807e015922abed4a6b6147d8d4bcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9c:48:05:7f:d9:b9:2f:89:d2:53:e0:ba:8d:
                    d5:84:1c:04:13:79:5d:c6:cb:e7:5c:7a:fb:b4:77:
                    43:55:af:1c:0a:a4:34:79:83:a5:dd:92:f4:ce:f4:
                    e9:0d:6c:35:32:f1:29:db:23:c2:a2:cf:f3:b8:b8:
                    14:1e:7c:5c:72:66:89:a5:59:7d:43:38:00:eb:87:
                    57:92:10:73:aa:28:6d:89:89:4d:54:40:a3:df:14:
                    30:fb:c9:79:9e:d2:b1:33:14:f1:6e:1a:6e:2d:95:
                    97:2b:2b:7e:53:96:12:3c:cf:7c:7b:39:b1:dc:bf:
                    8b:77:21:ff:d0:da:f2:5e:00:07:0e:51:6d:80:41:
                    18:a4:eb:d5:1b:0d:2e:e1:69:de:7d:ac:4f:73:1b:
                    a4:5a:50:e1:e5:61:87:e2:8b:b2:6d:fd:97:7f:77:
                    f4:04:cc:ff:6f:ba:1e:11:20:de:cf:1c:45:ec:d7:
                    22:35:68:e8:13:fa:06:62:f9:5e:8b:69:f5:b7:c3:
                    7c:91:ef:40:81:e9:21:2f:6e:a1:ec:10:8b:35:56:
                    97:65:8a:90:96:03:7e:c3:2b:3d:1d:95:74:79:50:
                    43:f3:a3:96:6e:c5:83:ce:4e:3c:c4:43:8c:7d:6e:
                    af:4d:b5:7d:7c:68:62:7b:9b:00:73:74:92:7e:d6:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3B:25:B8:04:80:7E:01:59:22:AB:ED:4A:6B:61:47:D8:D4:BC:C1
            X509v3 Authority Key Identifier:
                keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3a:3e:02:7a:87:a5:ca:d9:34:db:d0:31:00:da:1c:68:f1:
         8f:09:c3:fa:81:1d:96:f4:2b:52:b8:a4:52:42:fb:52:8e:23:
         50:16:8b:f2:9e:d6:de:d6:a6:4f:49:64:ba:e0:e0:c0:fc:cc:
         29:a7:11:bd:cc:75:cc:07:76:60:ee:01:67:0a:15:11:27:b0:
         11:f0:a9:12:3e:c1:b7:a4:03:36:99:e5:56:1e:03:bf:f9:2e:
         12:22:ae:3c:ec:7c:e5:ac:55:91:4c:fc:56:b9:67:da:27:5b:
         4b:63:e2:8f:bf:67:4d:4a:19:3f:cb:11:12:1a:90:9b:26:57:
         09:d1:b9:e6:9d:f3:12:47:4e:de:87:6b:7a:61:ed:cb:20:71:
         b7:06:c3:ae:da:f2:ad:26:70:88:1d:96:02:91:8c:e3:29:2b:
         45:9b:b3:94:9f:36:17:0d:44:d3:39:8c:a0:30:12:3f:e9:93:
         5a:d3:98:63:6b:12:7c:aa:7a:79:d9:61:ef:d3:ea:3f:81:e2:
         aa:0f:83:db:c1:0b:1f:e5:9c:53:d0:4b:82:6d:ab:8c:1e:1f:
         e5:ca:39:0f:fc:92:49:f1:30:74:14:b4:7a:92:0b:4a:99:3e:
         dd:16:38:ef:56:42:ab:8a:14:41:05:64:e6:20:36:1d:7a:d2:
         f8:f5:ef:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----