Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
File:                     wR0IGGQzkDBptda7ZS-YQo9TyAg.mft (raw, json)
Hash identifier:          8EBnEAPqw2ktD0/FqxCVLEccjwl9a75xRm1QDjAkK0I=
Subject key identifier:   4F:00:9A:20:11:90:8D:53:DF:5F:0D:73:B1:20:F1:C4:29:67:48:58
Authority key identifier: C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
Certificate issuer:       /CN=c11d08186433903069b5d6bb652f98428f53c808
Certificate serial:       01962F3D858068702912B7B2F5F1EDDFF3CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
Manifest number:          CB
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: GlQUBzcNJmw0558H72JeNJOtGUQ.roa (hash: OAZrKZei1mukwSf7KdhyGGJ75nXzfwov+lRUskVC4AA=)
                          2: GzLNeemJ5NyzmlXIMSE-P5qpPK0.roa (hash: gMekrQRvaaYdzpl1VdoBplLf+AZyuoskovW0AOifAys=)
                          3: wR0IGGQzkDBptda7ZS-YQo9TyAg.crl (hash: YofaUZiBjGnDtuRCAeV/W9bbVxslLtBVSu3SJCpmOTQ=)
                          4: xok2gimWwzURof_w9dO-DRDDn3Y.roa (hash: onwOc+d+Y67hjnLHKYPr/lttMavIYzZkOgnV1cJxF50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:85:80:68:70:29:12:b7:b2:f5:f1:ed:df:f3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11d08186433903069b5d6bb652f98428f53c808
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=4f009a2011908d53df5f0d73b120f1c429674858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:20:bf:bd:18:52:ba:c3:79:ca:03:26:02:
                    e6:1b:01:88:67:c9:74:30:ae:09:e2:50:89:bc:12:
                    bf:17:e5:49:84:96:ad:96:1d:89:24:d6:2e:2a:47:
                    ad:42:d0:32:aa:b9:fc:a1:ec:38:d8:d9:b8:6f:1d:
                    88:d4:0b:8f:3c:70:40:12:96:1c:4a:47:2e:9e:a0:
                    4b:2f:31:1a:08:76:2d:b4:90:11:ea:de:a1:ff:1c:
                    7d:f6:55:07:6f:00:99:7a:bb:8b:30:0b:c2:6c:ed:
                    15:bd:a2:47:2c:8c:e1:0e:c7:86:df:bf:f2:7e:e7:
                    f9:a4:9c:8a:0a:e9:94:38:f1:d0:bd:80:32:1c:0b:
                    7f:36:a1:73:ea:cc:0b:78:d2:73:5b:32:e3:da:1b:
                    2d:76:2d:60:f1:3e:67:c0:41:77:81:3b:63:3f:5e:
                    4a:55:d4:67:22:52:90:e4:45:6b:ae:8b:e7:8d:a2:
                    4a:ca:74:2e:b5:76:ea:76:b0:6c:b1:4a:c3:77:7b:
                    d9:53:1b:b7:e8:84:40:d2:48:2d:f9:19:24:73:55:
                    3e:b1:b1:ca:e1:17:70:f8:a8:dd:bc:d4:02:50:e6:
                    b4:0a:c9:81:0a:e0:12:fd:fa:40:1a:d0:8a:85:66:
                    ab:3d:23:ed:43:1c:8b:87:3f:b4:79:a2:11:3c:74:
                    27:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:00:9A:20:11:90:8D:53:DF:5F:0D:73:B1:20:F1:C4:29:67:48:58
            X509v3 Authority Key Identifier:
                keyid:C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e7:63:e3:10:83:4a:d1:79:46:05:ef:bd:4c:94:5b:3d:70:
         9f:2e:3e:18:16:40:95:e2:82:45:1b:a4:02:8e:74:42:cf:80:
         50:af:b6:ee:50:73:9c:1b:33:a7:7a:dd:aa:6d:0d:a8:52:e2:
         ca:09:96:99:7a:97:c1:75:b3:36:cf:f4:7a:d2:6a:a7:05:f8:
         31:fd:8a:cc:90:33:2b:66:d7:ac:f6:92:4b:4c:b2:12:a0:a8:
         bf:98:5f:a3:87:15:68:1c:36:07:97:19:f4:fc:df:6b:d0:1d:
         e0:ce:ce:e4:f6:3c:f6:3b:36:63:58:c5:26:70:8e:70:db:18:
         b1:09:b4:f1:e7:61:79:e6:fe:35:a1:96:b9:7f:e3:e8:e8:69:
         95:69:4f:d2:00:8f:60:88:bf:75:e1:0d:d0:71:0a:a6:80:4f:
         eb:b2:37:59:3c:a1:a5:ff:72:46:67:4c:dc:1d:bd:14:1a:a3:
         b5:89:39:d1:10:c9:8a:3e:2f:70:a9:7a:38:0a:fd:25:e6:46:
         e1:2e:69:9b:a5:31:c0:65:88:7f:4c:fe:71:04:4b:9b:10:cf:
         0c:25:3f:4f:c9:59:cb:4a:09:b7:67:d7:3c:36:9c:a7:a6:9a:
         d1:5e:a3:ba:b3:3f:a2:6e:27:dd:5b:38:2c:38:fb:ac:fa:18:
         95:c8:29:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----