Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File:                     wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier:          qacmKhB+pdrC6nrz//PcYV51QsCe/h08Wfg+zQ0Qqug=
Subject key identifier:   67:AB:E5:EA:03:09:AA:3E:1F:19:0E:20:3A:C5:62:6C:0F:7C:AB:B6
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer:       /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial:       01962F3DE92D255C2C3D966F608FDFDDE551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number:          0375
Signing time:             Sun 13 Apr 2025 13:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:48 +0000
Files and hashes:         1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
                          2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: CfJNd6SHoyRgP28bG3+65vOWTKY6+Iu/eL70S/C5zx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e9:2d:25:5c:2c:3d:96:6f:60:8f:df:dd:e5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
        Validity
            Not Before: Apr 13 13:01:48 2025 GMT
            Not After : Apr 14 13:01:48 2025 GMT
        Subject: CN=67abe5ea0309aa3e1f190e203ac5626c0f7cabb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:38:23:e8:e9:47:c7:bb:8f:16:b2:d6:16:
                    f2:85:fe:96:b9:26:89:34:8c:ac:7c:02:1c:04:d0:
                    a3:c4:ba:be:12:a8:56:60:b8:00:b7:72:ba:5a:cf:
                    68:4a:31:ac:d1:b5:29:6d:2a:ea:fc:64:1d:77:b6:
                    50:2b:c0:00:ed:ce:02:92:fe:01:b4:d7:93:b6:6d:
                    19:58:ac:b9:a5:d5:30:a4:d8:97:91:c1:84:19:35:
                    a3:46:e2:a8:e2:f7:da:86:7f:ee:78:f5:fe:51:e1:
                    e8:e8:65:3f:38:20:7d:d1:76:9d:71:56:a4:12:5d:
                    be:d1:4a:2b:d4:86:b4:f3:e0:45:ec:20:e4:09:9c:
                    8b:88:08:a7:5a:39:d5:ec:8c:23:a6:f1:73:6c:da:
                    5b:31:b7:d7:bb:28:e1:ff:7a:77:dd:c9:78:6b:24:
                    d0:9d:cb:62:0f:08:bf:37:64:30:4d:13:7a:a2:18:
                    45:03:bc:49:22:c7:cf:a2:a2:00:68:85:51:c6:26:
                    e5:ab:78:b7:50:88:34:13:ca:89:0b:5c:83:2e:d7:
                    d0:3b:f6:e8:49:bf:54:fa:6d:77:99:9e:6c:ee:1d:
                    ad:54:67:ab:63:df:be:6f:07:b0:43:f3:4e:7f:d9:
                    6d:95:76:1a:a2:3d:d7:a6:eb:76:22:07:f7:93:ae:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AB:E5:EA:03:09:AA:3E:1F:19:0E:20:3A:C5:62:6C:0F:7C:AB:B6
            X509v3 Authority Key Identifier:
                keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:df:0c:3f:43:64:22:07:79:ee:ea:fc:31:97:98:ac:f4:d6:
         37:a6:25:50:5d:ae:c4:b1:81:d5:07:a9:1a:22:6b:69:5a:47:
         92:9f:10:2f:19:59:95:e9:da:e4:60:cc:13:54:dd:fc:6f:73:
         c1:63:54:dc:4e:6e:03:20:66:89:7a:58:41:2b:60:29:7e:03:
         73:e6:9d:cb:53:45:0c:c6:de:3e:6e:1c:e3:5b:9b:98:07:41:
         5a:ef:76:be:68:cf:7c:7b:d5:ed:99:a1:7b:f9:89:92:4f:ca:
         35:41:03:ed:20:cf:83:73:e1:96:4f:cb:68:63:41:86:1a:8e:
         4b:95:71:2b:47:88:d2:81:0a:7e:25:7d:3a:d2:28:f9:c8:b0:
         1e:c2:65:e7:88:d4:71:7e:0a:76:19:24:3c:4a:f8:e1:45:d3:
         91:21:7f:c7:da:3b:1f:70:63:ed:00:1e:75:3d:ea:d1:2e:5b:
         ac:ed:be:11:a6:a9:04:d9:28:3f:5f:e5:c6:92:30:bf:bc:f4:
         5a:80:c9:bb:6d:24:9c:73:0a:7d:a7:f6:4c:f1:72:3b:36:61:
         52:42:7c:d8:0a:9d:1b:bb:63:a2:67:f6:4b:e4:9a:43:c2:32:
         84:b5:8f:03:71:bb:ec:92:e5:09:1a:7f:09:ff:01:26:63:18:
         c8:45:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----