Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
File:                     wRjjTglHnc6J72HZj0wqv4GJzyQ.mft (raw, json)
Hash identifier:          +5XtRXri0tSlPVcrPesqLMlfDBC/1KBEFCEQAdhnsJc=
Subject key identifier:   36:93:49:28:91:B7:DB:D5:A2:A9:16:E7:B7:33:BA:DA:BF:C9:08:7D
Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
Certificate issuer:       /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Certificate serial:       01962F06D916D80CD786F07825F242C11C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
Manifest number:          02D8
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: C_QylDjtmeXaqfQqwZx9bW-pizU.roa (hash: TxsogUKYtZ4fwZHLxBqP+QAdRfnbhKHLWlZVu8NvQ2Y=)
                          2: wRjjTglHnc6J72HZj0wqv4GJzyQ.crl (hash: /cvqWPNkx8SZcMFyGcBA0ZpKjjA/yKeudR9r3TJHUJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d9:16:d8:0c:d7:86:f0:78:25:f2:42:c1:1c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=3693492891b7dbd5a2a916e7b733badabfc9087d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:72:53:6b:ed:fb:65:97:43:7e:30:23:1e:
                    dd:32:58:08:0b:ad:82:fc:60:22:01:86:89:61:30:
                    2c:49:9f:c8:29:54:c9:3d:1a:d5:17:c8:b5:5b:84:
                    91:52:25:4e:25:53:e6:55:c9:1c:cf:c3:cb:7c:9e:
                    8e:f4:1e:fb:06:53:ad:24:24:9b:48:81:a7:82:c4:
                    b6:eb:78:8a:89:d3:01:fe:99:6d:55:88:1c:78:24:
                    ea:ae:7b:65:71:97:82:e6:41:a8:10:26:da:da:a6:
                    40:1f:42:d6:d8:8c:93:89:76:b2:80:04:6e:50:29:
                    b5:6c:f9:00:19:0c:6a:0b:4a:ff:30:55:da:25:2e:
                    5d:82:7c:fd:b8:3e:bb:07:fe:f8:ef:48:ce:72:3b:
                    ce:29:4c:99:4b:67:c5:42:d7:bf:dc:71:1c:b8:bb:
                    6e:1d:ca:ad:5a:19:bf:55:78:03:ac:52:d8:a9:c5:
                    f7:17:58:e0:b2:71:7d:25:30:73:34:19:70:b2:9a:
                    ab:c7:01:39:4a:93:9e:74:60:26:bb:e6:9b:92:bd:
                    38:69:65:44:63:3a:a0:0e:60:3c:33:1d:23:1e:20:
                    21:b5:60:33:d9:22:42:b3:d8:14:b3:91:8c:9a:33:
                    ab:a7:cd:46:89:e2:1e:df:fc:28:60:86:47:70:24:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:93:49:28:91:B7:DB:D5:A2:A9:16:E7:B7:33:BA:DA:BF:C9:08:7D
            X509v3 Authority Key Identifier:
                keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7e:e0:06:e3:48:1a:21:17:38:2d:9b:16:89:f4:35:80:a4:
         71:b3:d9:14:2c:69:5d:7c:3d:38:3b:aa:f8:b0:f5:67:76:24:
         a3:ba:74:a5:4d:6b:62:38:63:ee:87:7f:36:d1:39:a0:32:44:
         43:b2:52:98:93:03:d8:c0:0c:4b:dc:47:1d:18:d7:96:ab:11:
         c1:98:84:b1:ae:75:2f:90:91:e8:35:f8:1b:1b:d8:86:8d:4c:
         75:94:42:5f:c9:02:01:16:23:21:30:d9:82:f0:2c:5d:14:22:
         c9:02:2b:de:e0:ef:92:41:ba:e5:69:ab:a5:8d:97:b3:e8:f8:
         4d:17:57:8b:74:bb:3c:8b:31:ab:bb:91:9b:0d:a6:c8:7b:35:
         0d:fa:bc:df:98:75:64:90:d8:8b:2f:5f:24:e4:ca:30:cd:fa:
         a3:17:53:99:0e:0c:70:94:70:7d:61:a5:75:a6:fa:7e:46:fa:
         7b:21:25:80:27:9c:09:dd:6a:e7:5a:bb:e8:b4:39:0e:c0:40:
         83:21:3a:8f:0b:57:17:4d:15:33:b2:8f:a5:da:6f:f1:04:dd:
         3a:c0:0b:5c:e7:0c:7a:18:85:18:74:a8:2d:7d:c5:05:20:f8:
         18:17:12:21:63:30:8a:bf:9a:ed:44:11:e9:9f:df:70:e2:cc:
         a7:fb:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----