Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File:                     wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier:          fHsiTbwlXkRcnM+a/aAfxwAsYTb82DP6pWzKCqj9clg=
Subject key identifier:   A6:08:13:62:1F:B7:D0:90:A8:D7:EA:DD:45:A2:88:24:3B:6F:CE:F6
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer:       /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial:       01962E2B2D6D29F9A4050CE983A4E4458DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number:          045F
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
                          2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: yaiWudG6Q1PgtScEHzpuBUFBCSXEV8dyXbhrJNIv2Kc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2d:6d:29:f9:a4:05:0c:e9:83:a4:e4:45:8d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=a60813621fb7d090a8d7eadd45a288243b6fcef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:bd:61:3f:97:bd:aa:a8:62:70:fd:4b:65:
                    64:48:3b:18:3c:5c:a7:05:19:cc:fd:81:f5:77:ba:
                    a2:fa:4a:f0:7e:3e:0e:2d:bf:13:ea:03:50:37:e3:
                    73:e8:0c:db:48:ce:e6:d5:25:49:60:ac:a0:7d:24:
                    e0:4a:18:3d:f1:15:43:f6:f1:70:7b:ff:54:14:d1:
                    9b:ec:93:20:33:53:86:1a:c8:25:9e:65:61:f4:51:
                    68:fb:97:0c:57:12:6f:1b:18:71:ad:c0:20:cf:8b:
                    31:69:2f:21:75:e2:46:19:2b:ea:1d:cc:7d:fb:22:
                    a6:15:14:88:a9:a2:ef:18:57:13:ba:18:d3:b5:95:
                    f6:9f:82:a4:aa:b0:0c:3c:1d:a7:1d:d2:0e:03:2d:
                    11:69:e8:4e:7d:9d:9a:cb:c0:f7:ac:30:4b:60:02:
                    77:99:dd:fb:d9:b5:fb:26:9a:e9:f9:42:54:74:0c:
                    b8:49:cb:0f:c5:51:52:81:da:5e:e6:8a:a5:6e:f2:
                    f9:01:32:ea:05:7d:77:08:dc:9a:9f:5f:be:fa:13:
                    b9:f0:04:03:03:60:c0:68:23:ab:b3:34:7b:21:aa:
                    4d:58:06:4d:18:99:10:9c:73:b1:44:9b:35:02:a7:
                    01:40:b8:7e:11:49:47:79:72:42:e9:c1:d5:48:cf:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:08:13:62:1F:B7:D0:90:A8:D7:EA:DD:45:A2:88:24:3B:6F:CE:F6
            X509v3 Authority Key Identifier:
                keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9e:9a:43:d7:df:2d:82:97:df:55:b0:49:47:08:f8:d9:ac:
         8c:36:f3:4b:20:bc:7d:cb:81:15:82:c6:71:0a:72:23:df:f8:
         e7:9e:a2:4c:e7:49:c2:1f:d7:01:81:c3:6b:43:48:f1:6b:ee:
         81:82:27:4e:bc:8a:68:d6:9c:cd:26:99:25:0a:66:f3:31:56:
         55:7c:80:89:a2:44:ff:13:dd:d2:a5:53:69:86:be:57:1d:d5:
         57:fe:39:b1:0a:95:59:ca:28:52:2e:4a:0d:67:43:8f:9a:57:
         ad:30:d8:a3:78:bc:db:69:c9:b4:c6:d4:69:97:60:55:f7:b4:
         ac:75:ae:81:2e:75:48:86:9a:c7:02:fc:c1:8f:f6:a0:92:b9:
         36:e9:62:0f:af:24:c8:6a:61:c8:f3:fe:f6:59:61:e1:03:bb:
         aa:18:06:d4:94:33:0c:98:99:23:f9:0b:cb:47:77:73:38:16:
         f5:ff:99:1b:db:63:49:22:d8:20:fd:4b:6d:a9:5a:23:82:bc:
         9d:5a:35:7a:f3:7f:6a:31:56:47:d5:40:d9:df:14:de:17:a5:
         7e:62:14:1e:3c:05:ff:9a:b6:67:44:fb:5b:17:da:62:6a:40:
         a3:56:27:3d:bf:12:b0:2c:23:ff:7f:92:15:9a:82:99:2c:04:
         49:c8:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----