Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File:                     r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier:          MTCV9ooqEMV28mn474GfiG9/ZcBB7sk+8PTIaIgpI7A=
Subject key identifier:   60:5E:5C:C6:1F:3B:28:38:C6:D6:AD:19:82:A9:64:06:89:27:DD:CA
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer:       /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial:       01962DF400D21B0CB5D73276180BD0993AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: VI7MbqfUntVnN_kMd5I5Qw5bl-4.roa (hash: yObUZYg1Kq2iUCPpFKIeS8ZVs5ZMohWqBvzb45a6JFM=)
                          2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: 7BOrLrslrkBISJHeV228y89Nhtvq2wxotL1l9JJRmD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:00:d2:1b:0c:b5:d7:32:76:18:0b:d0:99:3a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=605e5cc61f3b2838c6d6ad1982a964068927ddca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5e:72:4e:95:db:d5:b5:b1:7e:2c:7d:c9:ce:
                    ea:28:19:eb:f8:dd:da:fe:cd:4d:3a:81:30:57:15:
                    6a:ac:1d:0c:9c:32:81:e7:c3:b8:b7:7d:55:c2:87:
                    30:0b:01:4d:f5:02:78:b4:8a:9c:d9:ab:9a:bd:7b:
                    c2:0c:d8:39:34:40:9b:73:cb:67:5b:5c:b8:62:10:
                    53:2a:4b:8f:90:be:e4:5a:5a:13:0b:22:1a:8b:7c:
                    42:91:7f:af:84:dd:1e:51:d4:5c:ea:91:df:db:70:
                    40:d8:c2:1f:fd:22:2c:be:fd:62:1e:c0:a1:92:b6:
                    00:9c:e2:ab:8d:b7:36:06:22:ac:14:b5:59:5d:eb:
                    ba:28:cd:22:31:72:dd:84:8e:e1:12:45:aa:25:87:
                    a0:17:70:fc:f3:3d:e8:2f:74:87:20:86:c0:10:53:
                    d8:47:c3:0b:b1:db:1c:c7:df:1b:0c:4f:93:e8:42:
                    f6:46:7f:9c:e0:45:8a:22:d0:9a:21:99:aa:88:2e:
                    10:b3:16:fb:da:1e:77:00:a0:42:43:f9:33:2a:f3:
                    71:58:c0:04:9b:a3:2f:6c:4d:88:db:26:fd:2d:52:
                    bc:00:c9:9a:ec:bb:ed:50:2e:8d:fd:ac:58:d5:91:
                    3e:05:88:40:e3:81:10:d7:b0:7b:b5:3f:5a:a8:be:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5E:5C:C6:1F:3B:28:38:C6:D6:AD:19:82:A9:64:06:89:27:DD:CA
            X509v3 Authority Key Identifier:
                keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8c:1c:e6:18:2c:5f:94:2a:df:e8:77:a3:48:d7:32:d2:9d:
         64:1f:18:ee:c0:bd:52:23:fe:6b:79:a2:5b:a6:77:4c:35:27:
         17:27:ed:02:61:68:ca:73:54:7a:d8:ff:1c:6c:c2:cb:e8:e1:
         05:fd:ca:2b:c9:90:de:9e:60:b0:41:c4:84:6a:a0:ea:44:16:
         79:a8:51:60:40:a1:3b:42:14:61:c8:14:27:05:da:a3:2e:24:
         a0:a4:75:76:9a:2e:c2:55:f4:0b:d7:fd:49:32:4e:78:8b:4f:
         92:33:17:89:bc:9d:dc:3b:f4:38:e6:cf:1e:8a:da:f9:05:75:
         e2:1b:d5:78:27:6c:bb:dd:64:07:66:5c:91:ea:ea:fd:16:f4:
         a0:2b:51:80:fb:d7:4a:1e:d8:40:6a:b3:40:46:24:c9:82:de:
         b1:7a:40:20:2c:ba:d9:4d:78:aa:a1:51:10:3e:66:05:8c:48:
         1e:b6:74:06:77:47:a2:a3:64:ee:8e:c7:93:9a:35:20:50:8e:
         31:ac:53:2f:94:62:0d:11:f2:36:31:e7:1f:21:46:3d:54:9e:
         c3:b5:b9:d2:b8:86:77:4e:5d:11:0e:78:e4:ad:dc:5d:3c:e4:
         b7:b1:36:80:81:31:f5:69:1c:dd:36:1a:cc:76:de:39:1e:b5:
         64:72:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----