Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File:                     wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier:          Shltr/MeokZLXl7DlTF/jiWAes1JsRXy44rYhUkOgSk=
Subject key identifier:   EF:42:EA:8D:09:85:F0:FE:F3:8D:EE:E1:EE:A3:61:F3:BC:1F:95:3F
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer:       /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial:       01962F744C610B2A0B8120E539ADCEF11FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
                          2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: 9dwGa9Dd2RrcnrwjKnzmhUXIhSYa24TsQSNZMViLfcc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4c:61:0b:2a:0b:81:20:e5:39:ad:ce:f1:1f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=ef42ea8d0985f0fef38deee1eea361f3bc1f953f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:d3:6c:5d:5e:68:65:40:83:eb:cf:42:c3:
                    2c:94:4a:dc:c9:0f:cd:f5:da:78:ce:64:ba:62:87:
                    d2:ef:86:8a:c7:6a:79:bb:77:5c:0e:6c:8e:05:54:
                    92:df:7b:3d:61:b5:c8:93:8a:20:5a:1e:b5:c8:fa:
                    1f:d4:96:fd:a3:03:dc:d8:8c:11:f0:86:4b:84:06:
                    3e:fc:f9:98:94:45:9e:2d:69:cc:6d:92:f8:0e:95:
                    64:d9:92:92:f0:ff:3a:a5:fc:2a:d9:3a:3c:ed:6c:
                    c3:2f:34:3f:75:84:10:ae:8d:d7:3c:4f:79:0e:e3:
                    5b:90:86:57:4d:a0:be:9d:77:76:7e:d6:5d:d6:1b:
                    dd:f4:5c:fc:61:79:d1:b6:e7:9f:69:4d:14:fe:6f:
                    c7:1b:5f:0b:85:1b:30:bd:c2:33:82:a4:3a:83:d8:
                    79:03:28:3f:f0:94:4c:d2:94:ed:d8:44:0d:d3:46:
                    ff:f2:e0:e0:a2:6b:a3:ab:62:14:a7:76:d2:39:12:
                    ac:ed:4a:50:60:d8:b2:1f:a8:4e:03:c3:4c:49:60:
                    0f:45:be:43:52:94:de:39:9e:aa:a8:1e:d2:9f:1a:
                    17:4c:a0:13:bc:1c:a4:b0:71:ba:3a:a7:39:f0:a8:
                    34:39:ea:7d:70:ff:c8:03:65:42:75:47:d9:de:2e:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:42:EA:8D:09:85:F0:FE:F3:8D:EE:E1:EE:A3:61:F3:BC:1F:95:3F
            X509v3 Authority Key Identifier:
                keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1d:b4:41:02:f0:39:38:d3:9a:5a:fb:cb:80:84:fb:6f:6f:
         51:28:2c:5d:71:44:6b:f3:53:94:99:ab:f6:ea:db:4f:db:ff:
         ee:f2:58:a9:94:99:f3:39:16:18:0f:ff:76:2c:de:a2:ee:47:
         90:28:dd:13:0d:dd:ec:83:38:28:79:95:47:2f:1c:21:c4:00:
         b4:3d:fa:fd:0b:d8:32:cc:dd:81:18:fa:db:b7:2a:fe:09:0d:
         c0:bb:b4:f4:e1:9f:85:e9:3e:ce:1f:88:89:a1:bc:4c:03:7d:
         a8:dc:91:16:0d:07:d7:ff:12:51:6c:38:9d:95:16:f5:d2:de:
         94:7b:05:0c:7a:86:b7:b6:4a:cc:0c:94:db:19:e2:6b:99:79:
         c3:cd:f0:cd:6a:c6:0c:b5:c8:fd:bb:f9:c8:80:74:bc:a2:02:
         79:14:24:8d:f6:3e:fe:e2:40:b0:c2:6e:8d:51:ed:00:74:67:
         6d:8d:9d:11:47:05:e7:a9:7a:94:3f:59:6e:af:78:e6:c9:14:
         da:53:bc:ee:39:66:dd:83:d9:ad:6f:82:8d:a2:af:e1:df:8b:
         85:57:35:ca:8a:52:25:9b:bf:e5:30:a0:b7:e4:bb:ce:6c:92:
         0f:a1:4a:bc:91:4d:f0:45:ce:5f:8e:9b:9a:f0:73:05:55:44:
         9a:30:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----