Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
File:                     woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json)
Hash identifier:          025Cq1s1D+ctRWEeOoldzoa1uVZn71PRW5IdyngOzLI=
Subject key identifier:   FB:93:ED:BF:7C:FF:5F:94:20:5A:4E:7B:84:DE:6D:5B:6D:17:6F:50
Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
Certificate issuer:       /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Certificate serial:       01962ECFC6BF140DD0FC43984EBA2610FB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: fM16NL7UA9ErJ0RNfb8ePLmU6tQ.roa (hash: 2mPsCiT6kK+HE+XcnPI9z3k0mcNw38StY2DELHnEXqY=)
                          2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: sx/9HFx0LJUr1skk7f7Yzu2MAphmaT0xqyV8l/0KEEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c6:bf:14:0d:d0:fc:43:98:4e:ba:26:10:fb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=fb93edbf7cff5f94205a4e7b84de6d5b6d176f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:c9:db:db:10:29:4d:31:ef:d4:71:66:77:
                    7c:42:00:f0:ee:5a:da:27:96:4b:ce:4c:c7:62:89:
                    2b:11:65:b4:d2:e0:7f:c5:2c:63:e1:0a:a6:7a:62:
                    c1:fb:66:41:10:8b:b6:8c:36:fc:02:cb:a4:0b:15:
                    b8:dc:e7:a6:da:a5:a2:49:b5:6b:de:a0:b0:b1:44:
                    55:31:43:fc:c5:20:d1:3b:06:8b:91:54:9e:0b:de:
                    4a:59:94:20:9b:f8:f4:d9:46:16:9e:be:97:cc:e5:
                    5c:26:27:fe:3d:91:e4:58:a3:16:39:d6:7d:71:1e:
                    a7:89:81:f2:bf:e7:0a:29:62:c3:3b:51:4a:03:f0:
                    0e:d9:4e:48:7d:dc:01:24:5b:63:52:b6:2e:98:66:
                    5e:4c:91:c0:79:1f:8c:31:54:07:70:ea:43:8d:e8:
                    c4:c1:bc:b2:2f:85:67:db:6a:c6:a8:84:be:2c:d1:
                    74:7b:1c:1c:b9:43:95:ec:d9:d3:4e:be:bb:f1:49:
                    64:7e:6a:bb:f7:dd:d6:fb:59:f2:b1:d3:82:bb:34:
                    82:0d:fa:2b:6b:74:3e:da:ea:58:67:c8:77:b8:d2:
                    cd:f2:b9:cc:e4:8c:41:d1:64:ad:ce:1b:37:51:62:
                    29:5e:16:30:d5:90:8f:33:dd:8d:2f:ea:91:47:6d:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:93:ED:BF:7C:FF:5F:94:20:5A:4E:7B:84:DE:6D:5B:6D:17:6F:50
            X509v3 Authority Key Identifier:
                keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:57:81:2c:66:04:98:39:74:2c:75:8b:4b:73:03:af:ee:dc:
         26:66:46:35:e5:a0:c4:56:93:9c:53:0d:d7:d6:3a:db:fd:56:
         62:eb:f9:d7:df:2a:12:5b:7a:f1:a9:f6:a2:1f:f2:c9:7c:1a:
         7f:c7:ed:4b:49:43:48:e8:8f:7b:45:c9:8f:cf:bf:a7:4a:1c:
         e2:13:f5:1c:67:61:ab:e7:25:52:5c:13:b9:7d:1b:ed:c5:73:
         89:b0:96:4f:e1:73:a3:ca:fe:f4:1a:6b:4d:08:96:3e:39:c1:
         68:07:fa:26:eb:6f:59:5f:3b:e5:31:5f:99:80:4e:09:41:b6:
         ca:73:b1:62:c4:03:f6:6e:a8:11:47:4e:91:c6:4a:1d:e5:93:
         c2:c4:77:aa:c7:cb:d7:82:07:26:fe:ee:83:6c:ed:39:ec:f9:
         f3:d7:aa:63:62:fb:ae:1b:53:0a:a5:2e:ee:a0:0a:6a:7b:76:
         37:39:0c:70:54:f4:1e:a9:2b:2a:07:e9:4d:ab:88:bf:13:52:
         f1:37:d0:c6:c6:4a:cc:8a:cf:27:a0:70:9c:84:10:00:5e:d1:
         5f:2b:7f:58:85:4a:df:8d:1a:2e:38:32:95:f1:db:f2:bc:58:
         63:c3:bb:29:50:2a:aa:c2:7c:e3:7b:80:ef:83:76:b6:30:bb:
         5a:74:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----