Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File:                     wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier:          RSzksW5UAm1/R9WN+tmgemX1LmHRB316R6lv8EDJySc=
Subject key identifier:   CF:74:4C:E5:07:FE:8F:6E:A5:F2:C4:63:3F:98:81:E4:42:57:06:9C
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer:       /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial:       01962F74B0813B710F56AE18EBEE3B39094A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa (hash: a8BYVN01+QzzRYrawK1TfdRTG9b4FCkotHQL9E9gZ7Q=)
                          2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: thrmT3yMAAXYmOsPWT6YR+/HY3vpeMHx5Pu5hHOcFDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b0:81:3b:71:0f:56:ae:18:eb:ee:3b:39:09:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=cf744ce507fe8f6ea5f2c4633f9881e44257069c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:91:b7:d7:1e:1a:46:07:59:36:d8:1e:10:0d:
                    42:07:79:8b:d6:dd:15:bd:89:f9:f8:0e:ab:4b:62:
                    02:c4:8b:81:eb:7b:3c:80:e0:b1:c9:fd:91:72:f7:
                    22:9d:40:2f:85:25:d8:e6:08:f7:0c:48:19:1f:2b:
                    51:18:fa:bd:ab:d0:dd:16:cd:0f:8d:50:56:7d:40:
                    2e:6b:3a:c2:80:a6:ea:14:42:59:dc:7e:bc:25:ff:
                    98:15:90:aa:ea:62:f7:fb:cf:0c:e8:50:78:8e:4a:
                    17:a9:70:2a:70:f7:7f:ef:48:01:c4:41:fd:64:31:
                    54:35:26:f6:3a:d1:78:a6:ad:d3:dd:e4:c3:96:e4:
                    bf:c9:e4:ab:dd:06:e5:03:a8:0c:81:1f:a9:73:b0:
                    ea:3a:88:3e:e6:d9:08:c8:31:04:e9:0b:4c:fe:28:
                    ed:a4:c1:66:04:02:de:61:3b:0f:d5:e1:81:59:f0:
                    82:ad:3c:08:35:c7:bb:0c:56:f6:26:a1:db:11:3c:
                    44:7d:92:94:6b:f4:a1:58:3e:77:97:f4:46:6a:77:
                    c3:a7:61:04:a2:9a:ac:ce:7b:75:2a:a7:34:13:34:
                    a6:ab:22:d9:fb:3e:ac:7a:60:f3:5e:bf:fe:ce:95:
                    01:cb:21:fc:96:c0:af:fe:f7:42:68:b4:48:4d:1d:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:74:4C:E5:07:FE:8F:6E:A5:F2:C4:63:3F:98:81:E4:42:57:06:9C
            X509v3 Authority Key Identifier:
                keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:13:b1:d4:7c:7b:7a:30:42:48:3a:d5:93:38:fc:39:b2:83:
         d2:a5:8b:68:60:37:66:df:57:b2:c7:65:84:9e:a3:45:a7:ea:
         1b:29:9d:23:44:6a:b9:59:26:45:fd:60:a9:f4:0b:a2:52:b3:
         29:e1:2d:18:5b:43:22:91:50:ea:6f:d9:3d:da:71:85:05:88:
         b5:11:1d:cb:c0:07:f7:d0:14:ee:84:be:b8:af:30:59:1d:c4:
         49:d6:8f:1d:9f:0d:2f:1d:fe:95:57:bc:e6:a6:ef:56:67:6c:
         62:d2:c0:3a:4f:05:ae:3b:9d:92:53:ea:ee:5d:89:8f:00:8d:
         34:10:ed:9a:ed:6e:b6:b2:03:d7:d0:42:0c:02:1f:64:90:78:
         92:24:39:73:08:f0:72:9f:13:ca:14:79:b9:1f:4c:92:b3:6d:
         e4:5e:4a:28:1e:95:7a:3e:d9:47:5e:4e:11:8b:f2:37:4d:9e:
         d4:fa:3d:46:12:0f:92:a6:3c:43:b4:ca:f0:ac:9f:cf:86:49:
         24:bd:26:80:2e:3c:a2:64:4e:3f:21:31:a4:b6:11:f9:0e:0d:
         76:94:d0:8e:e0:c8:85:59:35:e5:56:a9:cb:7d:4d:c5:8e:c7:
         65:cb:fd:ea:8b:5c:d6:4d:bb:66:77:8b:61:ac:24:80:ea:e0:
         30:17:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----