Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
File:                     wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft (raw, json)
Hash identifier:          eH8w+qBr6sQ2ZIO3QAIZY7E4rKkUaQuSX4em24ftGj8=
Subject key identifier:   A6:BB:A4:FA:F1:28:E5:B0:43:41:A6:03:72:FA:40:47:4D:7B:F6:80
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Certificate issuer:       /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial:       01962F74A400AF28A586234E5DE219A35018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: A5e1ajK6VG8bsSgi6vHK9FVhkA0.roa (hash: DwfexPS0q4iJHOaKGcYE+MnhBqtqidrsPJZ1x03qAag=)
                          2: FZT_BTCcPvUDg2WMebmfcMFfqlk.roa (hash: 9tnNWNBi7xBlzEQuuTA6YbXDIlQAtmVWyk/P9qheXMo=)
                          3: XOd2oE1ewhF-ZbAEMdaVC12jAfE.roa (hash: Qb1mjfUYvzsw4HemAT0H4CHevsLBTYDDvuwnqPNJ06Q=)
                          4: ukTsh__PD-e49THfmeczO06Ewzg.roa (hash: 2pxpwWB8nzVKK5ZFAoaYU/qGI9s7E3tcdxUF1upjgL8=)
                          5: wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl (hash: V08mKAQBHEirKRAtas+FbqMfLxhf5HR9ygIYB8QymeA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a4:00:af:28:a5:86:23:4e:5d:e2:19:a3:50:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=a6bba4faf128e5b04341a60372fa40474d7bf680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:21:13:31:76:5b:a9:70:10:89:cd:7b:20:f8:
                    63:9f:0b:1c:e3:47:03:a7:44:19:51:09:f7:91:57:
                    75:09:2c:96:37:c9:9c:09:5a:b6:df:99:48:40:5c:
                    ad:e6:fb:33:20:5b:0c:c4:6e:de:6d:d4:2d:25:45:
                    dc:73:22:85:60:26:35:5d:99:9d:56:69:e6:6b:d5:
                    36:27:3f:1e:ac:7f:e2:90:3f:19:6c:ae:2f:03:ba:
                    f8:1c:13:9e:df:87:f9:12:ef:f9:f3:9b:d2:1d:6b:
                    8d:6d:b2:f0:26:cc:4b:1f:47:19:fb:e3:6d:65:c0:
                    0f:9b:41:a8:05:23:64:70:cd:bd:e8:69:66:c6:92:
                    44:ef:de:05:2c:0a:88:fa:f8:47:5b:af:f7:0f:ad:
                    91:1b:f6:38:7f:9f:fc:de:07:6d:6c:80:69:00:a4:
                    57:aa:a5:4a:34:09:43:4b:4f:5c:01:9d:ac:7d:d1:
                    17:52:01:3f:77:92:95:c2:62:48:6a:82:f7:62:50:
                    67:38:ad:5b:7c:71:02:ca:44:42:11:42:06:35:d3:
                    68:02:22:e0:c7:88:79:d9:a0:43:c6:e1:93:2c:08:
                    51:91:22:c5:2c:2b:72:bf:16:74:65:fc:83:52:08:
                    87:4b:5d:9a:d0:5c:59:4b:95:2c:54:f7:ad:79:d2:
                    cc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BB:A4:FA:F1:28:E5:B0:43:41:A6:03:72:FA:40:47:4D:7B:F6:80
            X509v3 Authority Key Identifier:
                keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:de:61:45:67:7b:ac:79:2c:e1:61:7e:21:88:c4:9a:e2:33:
         d2:ff:37:69:57:1c:c7:52:d5:f8:35:3e:fa:7f:6a:f6:06:c5:
         9f:d0:bb:f3:f4:95:b7:dd:9b:69:a1:62:9a:4c:4b:b5:21:80:
         a6:f8:9d:35:04:91:69:71:a9:bd:93:19:f2:05:f0:81:39:34:
         be:19:85:aa:51:bb:5d:74:28:3a:e0:dc:40:e2:15:bc:3d:24:
         c3:e9:a1:0e:26:90:b6:0d:43:22:95:b2:1d:a2:aa:69:84:c8:
         5e:78:21:33:3a:80:21:95:c5:31:0d:9a:ef:ba:b7:eb:45:13:
         06:21:11:f9:c8:f2:d9:3a:d4:ff:aa:46:d4:d4:8a:96:74:ea:
         3c:01:15:3c:05:34:d1:d3:86:05:84:5f:d1:3a:c6:3c:2b:a6:
         9f:06:02:56:69:f4:39:1f:4b:3b:fc:1b:31:d3:8b:ad:6c:39:
         78:87:f0:9d:9e:cf:c3:f8:25:e2:2d:f2:d5:4c:be:56:06:8a:
         d7:f2:8d:1b:bf:1e:98:a9:63:e7:1a:e2:f9:a0:90:e6:8b:c4:
         fa:7d:6e:28:c1:57:fb:e1:c3:60:ed:61:40:42:1d:74:17:ea:
         78:6e:db:51:4b:f4:b5:0a:e2:b7:f0:5f:e0:ba:ac:56:97:a3:
         b4:6a:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----