Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
File:                     wHR_vibJzddiit_ttXt4vo3nXik.mft (raw, json)
Hash identifier:          WQa0F4VJgJ6CkLcEfq7j3yzo8I8My3CtekK2xBt/gB8=
Subject key identifier:   AA:E5:FD:2A:69:38:D3:0A:34:03:84:B7:2A:43:1C:62:E2:00:2A:48
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Certificate issuer:       /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial:       01962F0734A159F4A672E404B84018E0FF4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: 2nyycqBL-rAzEQltLGtAfMtGQLM.roa (hash: MBIXdHvXsLvgHf885v+F1wgnsNoLNTld5Y4auopwyqw=)
                          2: 3bQBeV9f56eObQzYUYLO4GAQ8UY.roa (hash: HtmwpWIMcqcjPv1ZUB2JqlVZpv8JVThGiHf7qzzoBm0=)
                          3: ChVY_yTwqfm0VnhsyIrbJGaer18.roa (hash: R+XyXjI6742+O3LetUXz9z0t0N+RLDWsKAzEnh76DmE=)
                          4: QeIXKKypRp3pUKZsAXhEwiToOAw.roa (hash: 4uaN2IkF9UjmjdQnaC+MinX3CAS8fZa9J2o5ym9jh2Y=)
                          5: Rm5aIxDvXkvVkBBg3XIjNRMEevw.roa (hash: 91lRhrOUw2PQdAXyAGgZms7aAgC+waBbAPHPOWg5hPI=)
                          6: Sr0IV-rO-zHkL4o3XLlXoB58rKk.roa (hash: suoX77hNmWsUeC3U2K5nrNVPL2RuFHc2TD/yXsw9YqQ=)
                          7: ePEq_iR8SghIv87pTKid6AVEFNA.roa (hash: JKXKaBC2B7MQ6+tg8cpfMIILPOh/OoQhr9iR79J36DU=)
                          8: wHR_vibJzddiit_ttXt4vo3nXik.crl (hash: umt6aN5PWK/HCJSJNwzXJAEoRV1dVeCpbYQLF+xA2qk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:34:a1:59:f4:a6:72:e4:04:b8:40:18:e0:ff:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=aae5fd2a6938d30a340384b72a431c62e2002a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2a:dd:18:1a:ad:33:08:ed:4a:3a:7f:7d:e4:
                    cf:6e:02:0b:b4:3e:80:7c:fb:ab:8b:55:8b:56:33:
                    ef:f9:d4:a6:f3:a8:e8:ec:c5:ae:28:ff:90:d0:91:
                    4a:2a:a3:03:29:e4:79:f9:7e:31:5d:6b:05:a8:c4:
                    cb:12:9e:4b:d7:30:da:0d:15:4b:67:95:c1:48:ac:
                    ee:5f:3a:37:a7:a7:b1:46:37:7b:de:a3:53:af:3c:
                    40:0c:8e:97:05:a8:41:09:b8:80:c0:d0:63:41:3f:
                    6b:1f:53:77:52:e6:c5:e5:44:fe:8b:89:36:27:28:
                    27:d9:60:2a:5d:02:30:f0:59:f4:57:4d:14:5c:cc:
                    3b:e8:b0:7d:1e:2d:28:87:ee:bd:57:68:dd:dd:cb:
                    8f:78:36:75:8f:7b:74:57:b9:57:ed:d7:ec:e6:3f:
                    b8:ee:60:0d:68:86:47:31:28:74:14:9b:1d:2f:a5:
                    63:70:6d:d1:bb:4b:5c:73:d1:cd:29:1f:f9:a4:48:
                    8e:bb:ee:20:7a:41:50:32:cc:4a:d1:ca:7c:ef:97:
                    40:e3:20:e6:0c:a8:e1:ca:f5:fd:7a:77:59:a6:95:
                    16:58:2b:e1:8d:46:37:eb:81:28:4b:b3:46:60:c3:
                    8f:30:75:46:07:2e:f3:6c:57:79:6c:b5:c6:0c:f1:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:FD:2A:69:38:D3:0A:34:03:84:B7:2A:43:1C:62:E2:00:2A:48
            X509v3 Authority Key Identifier:
                keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4b:68:76:9c:f0:b2:4f:19:e8:50:5b:2e:f8:72:c0:36:5d:
         66:be:0e:88:9b:3c:89:f6:c3:ed:8a:90:9b:a9:b4:ae:31:b6:
         0d:ab:0c:f5:84:54:10:9e:8d:bb:c0:f3:cf:bb:de:93:88:3f:
         2f:8d:fc:38:73:8a:08:a5:8f:b7:bd:b9:87:07:99:e1:ed:ff:
         14:39:29:f3:d3:b2:a1:94:d8:2b:e6:84:5d:9e:c9:f6:da:89:
         95:de:75:f4:48:73:39:29:5c:8b:76:ca:b0:64:1f:06:04:f1:
         93:69:7b:a9:73:16:a7:6c:33:1e:db:2f:6a:e7:cb:30:52:5b:
         58:90:9b:b4:23:6d:d3:6c:43:79:f3:89:09:b0:b5:be:9f:e2:
         36:40:30:2e:03:4f:af:61:a9:a2:0b:94:50:b4:1a:30:a3:e5:
         77:20:77:23:c9:b0:04:9f:6e:05:e8:0d:9c:6b:e2:f0:a9:08:
         70:c0:f4:6c:58:df:7d:dc:e9:93:68:17:62:5d:58:2d:84:07:
         4b:3f:b7:5d:d1:3a:01:8a:d9:4f:22:54:9a:44:f5:7d:b5:8d:
         89:78:79:57:12:a0:05:5f:4f:93:48:71:d1:3c:ef:df:7c:9f:
         2a:cf:90:fe:2a:6e:1c:10:4b:a9:4d:aa:9f:6b:f7:7e:c1:74:
         7b:35:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----