Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File:                     wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier:          rtBf7ISzcwznkQWp3ziwqEkmioiMN0jgSwJkYi8Q+bs=
Subject key identifier:   84:EA:80:72:49:6A:17:D4:21:81:F8:43:15:01:33:B9:65:07:7F:4F
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer:       /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial:       01962F7463F700CB4E21C1EADA14B8AA8175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number:          0DBE
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
                          2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: 8j86l5GaDXjliLixHsRjdTWVnBHtwj3Zf7xadTLadmw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:63:f7:00:cb:4e:21:c1:ea:da:14:b8:aa:81:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=84ea8072496a17d42181f843150133b965077f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:b6:b3:87:ec:e8:97:58:ff:0e:1d:ab:d1:
                    90:71:c7:18:6f:5f:ed:3b:6b:9b:cb:4e:29:70:ae:
                    5a:c2:cc:7d:44:c3:ba:03:25:4f:fa:67:35:5b:96:
                    f0:68:4f:c4:a8:dc:01:4b:42:fb:83:3d:ee:4b:44:
                    a3:d8:fc:1f:85:25:30:96:81:d1:0e:57:66:1e:d5:
                    73:42:9a:3c:10:69:aa:c6:cb:91:34:e5:90:4a:27:
                    a6:40:00:00:8b:c9:10:6a:7c:7f:62:76:7e:c0:d9:
                    53:97:6c:94:0b:30:4f:f2:4e:70:1e:5c:37:46:71:
                    19:67:60:1e:cb:3c:42:db:67:ad:3a:01:a7:42:19:
                    5c:9b:cf:79:fb:b8:a3:93:f3:1b:f6:6c:7f:41:b8:
                    e7:99:30:be:57:02:4b:dc:c3:73:48:c2:ee:cb:3e:
                    1b:9d:db:cc:b7:15:a9:93:20:03:43:71:ab:2a:43:
                    8c:93:a9:1c:4b:27:e7:c4:9f:87:3b:cf:96:a6:9d:
                    22:7f:55:df:b9:50:c4:f6:9c:b0:51:6f:60:32:79:
                    2b:f4:aa:db:73:63:09:64:e5:03:bb:18:98:01:4c:
                    7f:7b:50:e9:23:9e:9c:f2:29:a6:51:c5:ab:85:0a:
                    8f:e6:84:90:9f:13:17:e4:a3:9c:30:47:23:07:7e:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EA:80:72:49:6A:17:D4:21:81:F8:43:15:01:33:B9:65:07:7F:4F
            X509v3 Authority Key Identifier:
                keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:98:95:fe:bf:10:47:f6:cd:6a:15:43:33:4e:48:18:b8:bb:
         4e:6c:0a:1d:ca:d3:1e:ce:f1:1a:72:f0:f5:7c:44:f5:34:db:
         e1:1b:c7:28:5e:d3:2c:e1:c5:23:a9:08:15:0f:78:64:db:1e:
         e8:f8:49:b8:87:20:0f:77:e7:3c:d9:e9:4b:b9:56:9f:91:c4:
         a6:65:61:bc:21:b4:72:25:1d:e2:bd:39:81:ec:37:83:b5:8f:
         77:e5:79:2c:01:03:b3:84:41:75:0e:01:ad:67:0e:22:7f:fa:
         78:98:8b:1a:dd:25:10:d8:0f:73:c3:61:71:2f:cf:21:f7:79:
         2d:46:41:79:16:0b:0b:69:01:9f:91:3e:59:d1:5c:aa:c5:80:
         69:38:e3:a2:23:1e:13:68:c4:c1:21:95:de:f3:64:df:3b:d2:
         cd:b3:47:b5:a5:29:1a:ae:88:fb:00:15:2c:17:da:cb:48:37:
         98:fa:ae:ae:07:1a:38:42:91:52:30:6b:77:9a:a9:cb:21:6f:
         8b:e4:fc:23:93:00:33:de:be:4c:5f:4c:99:c0:31:59:d9:be:
         1b:dd:e5:63:16:f1:53:90:b1:b2:75:3e:26:3b:4b:66:ba:a2:
         5d:b2:64:fd:23:c2:90:fd:9e:ea:6d:20:fb:93:a3:d2:43:70:
         68:9d:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----