Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File:                     1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier:          EizU+0g82m1YSZlOxBGu2HEqTBAn3M6DBpCMCF7fIqQ=
Subject key identifier:   D0:C6:3D:72:B6:BA:76:CA:F6:F0:A9:51:9B:6D:C2:BD:3D:90:02:29
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       01962E2B25647729F124DC07AB4265FA7C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number:          0AF0
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: W+Te4EBWovtj+IOxlJHXhHBujs+l/LeyaC3LpHm+bc4=)
                          2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=)
                          3: 9EySi5v3kgKf55_WnEy5Sq0kn-E.roa (hash: oUVGFfPRJjQhnddKcz1XXOwKzQbtPqL+f9+Nwb2NEX8=)
                          4: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=)
                          5: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=)
                          6: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=)
                          7: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=)
                          8: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=)
                          9: ek7JCPCS41NeXK6-BL1kWJMswuo.roa (hash: rhIkMhLc1Llh35BWqPoGtUcJlgy1f4TdKGKjnLruEnc=)
                          10: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=)
                          11: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=)
                          12: l2sQI2kIfw7Qk5M-1_S91gHcxwg.roa (hash: ChOC3F775GRHKD1BnL2UZEcRcy5R5qW/aHDpTQ0+OAg=)
                          13: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=)
                          14: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:25:64:77:29:f1:24:dc:07:ab:42:65:fa:7c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=d0c63d72b6ba76caf6f0a9519b6dc2bd3d900229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9a:c8:88:95:99:9b:31:4d:06:44:eb:19:66:
                    91:57:fc:41:a8:9b:e3:0d:22:59:1e:e4:46:f1:ae:
                    18:64:b7:b4:9c:b3:74:3a:0e:74:bb:cd:0a:8c:a4:
                    f8:8a:4d:a8:d2:09:f5:99:38:f2:01:fb:da:70:36:
                    d7:db:64:7a:59:97:0e:33:a4:7e:7e:db:ba:b1:46:
                    f8:b0:0a:c3:f8:f7:60:46:e2:8a:72:14:68:b7:8f:
                    3c:99:a8:ef:0e:bf:a3:7d:c1:fe:ec:38:08:9b:71:
                    e4:81:52:85:d5:56:1d:11:07:b5:86:fc:b7:eb:f4:
                    bf:08:fd:af:f7:16:17:db:ae:a0:20:56:0c:81:56:
                    68:26:69:f8:06:de:44:4a:6a:f8:78:d0:42:ac:9f:
                    d1:03:97:3b:77:f6:33:d2:f8:c7:ec:3d:27:2f:fa:
                    4d:b9:fe:89:e1:00:53:0a:7c:a1:b3:b4:2a:f2:ee:
                    20:75:cd:c3:99:9b:f5:59:fa:8b:b1:14:0a:59:c8:
                    ab:ae:11:09:65:3e:41:b2:51:42:af:a1:0f:3b:dd:
                    9e:cf:5b:0f:af:c1:8e:91:6e:9d:22:08:45:e5:78:
                    a5:6e:36:2a:53:15:c6:60:7e:fd:cb:58:56:f7:07:
                    24:93:c0:61:27:6e:db:02:e2:d9:88:da:4a:1d:ee:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C6:3D:72:B6:BA:76:CA:F6:F0:A9:51:9B:6D:C2:BD:3D:90:02:29
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:10:ec:a1:7f:67:cd:da:5f:0b:d7:7b:f0:b7:1f:b9:d6:0d:
         57:78:9e:77:17:4c:03:87:39:2a:e1:e3:2e:4c:22:ee:b2:25:
         c6:cd:81:fd:ae:4e:62:d7:11:eb:d4:3c:90:3d:37:71:a4:22:
         e5:15:b2:31:06:6e:5d:27:8c:11:3e:9a:8b:4f:9d:a9:9d:b2:
         d8:78:52:39:50:1c:a3:ab:3e:1e:1b:7a:32:60:53:48:84:0a:
         26:d0:01:3a:7b:93:75:10:71:a8:39:f9:ee:05:0b:a2:53:b3:
         2b:e5:16:9e:25:ec:5d:03:26:ac:ad:ee:21:94:99:fd:c1:bd:
         0f:6c:c2:29:92:25:db:64:a7:b0:04:fa:ad:46:65:ef:50:80:
         3d:66:6e:49:7a:11:d9:94:ee:7f:d4:09:45:44:26:a8:6f:cc:
         0b:95:e3:62:b9:94:5c:f0:dd:cf:61:16:20:9d:d3:50:c3:92:
         5c:f3:12:bd:20:9c:6a:c7:78:0c:fd:19:1e:b0:ee:8d:bf:d1:
         8b:bf:83:d5:d9:34:d4:89:70:74:07:95:40:b4:19:29:3a:41:
         30:9c:29:80:a8:c5:93:d4:fc:4a:44:2c:16:df:11:81:7e:0c:
         08:5a:3b:4e:a8:4f:d2:af:8c:27:26:54:c8:58:ba:95:e7:84:
         0a:13:f8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----