Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
File:                     wvypREWGBrEBfibDyhdDD3_5JLM.mft (raw, json)
Hash identifier:          YCPJrTQ8HhMJT3bzYsjvuc5JZfKmUkb4JnlA6z6MW0s=
Subject key identifier:   A4:5D:28:34:6B:11:51:82:2D:22:DD:A3:B9:EF:3D:12:0F:E6:BE:31
Authority key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
Certificate issuer:       /CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Certificate serial:       01962E9910EAF4F1C87A4958425D3620F83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: hWs8BC_h3pk307welYbUg7knJ4s.roa (hash: dB9CucoPV9UQVFmYpgxFuKafR8O28SK4AMzI4d3GC5o=)
                          2: wvypREWGBrEBfibDyhdDD3_5JLM.crl (hash: 88I1QuGm+keG7D2tDsjjkN2GDd22E4PTVmXuWGy7UcQ=)
                          3: zsnDAUQ9OWrVKsrixNM64UubPEE.roa (hash: 8s4+Ar8E4qPe68moGEzfuFe9b4Z1MTv6KsbZ2gEaOyo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:10:ea:f4:f1:c8:7a:49:58:42:5d:36:20:f8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fca944458606b1017e26c3ca17430f7ff924b3
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=a45d28346b1151822d22dda3b9ef3d120fe6be31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:04:14:f9:6e:cc:01:66:a1:98:32:72:03:
                    0f:1e:05:75:06:fb:0e:63:41:a6:60:ba:52:3d:7a:
                    34:65:f0:e3:95:af:e9:37:14:de:23:94:ac:47:93:
                    81:e8:c8:3e:72:84:69:47:bc:00:88:9b:e7:47:7f:
                    62:e3:15:4a:15:a2:fd:c1:47:e6:69:37:a2:66:45:
                    8f:3c:49:99:3b:77:2d:0f:ac:52:ff:78:5b:c5:2c:
                    dd:52:6d:3f:de:b6:51:f1:be:36:63:bb:8b:75:dd:
                    5a:b5:11:b3:15:e6:fc:2d:79:3a:66:47:75:ca:01:
                    fe:f0:bf:cd:1b:eb:05:ee:92:76:71:2c:1a:8b:f1:
                    f8:22:87:7a:9a:fe:42:17:11:22:2f:56:3b:5f:46:
                    53:13:c2:76:a2:e1:bb:3f:66:c4:f8:0e:8a:65:5b:
                    aa:20:e6:68:e2:f7:90:02:17:71:c3:d3:e6:29:2e:
                    f4:ab:a1:73:be:ff:ef:ed:15:ef:0e:95:ce:7b:ca:
                    03:be:53:65:d4:e2:f3:b8:74:0d:57:fd:63:a4:b8:
                    4f:b8:42:41:46:ef:87:16:9f:b0:31:29:a1:23:62:
                    68:97:e5:e4:67:ba:8d:da:24:44:64:26:ce:96:77:
                    aa:fe:a2:9b:2f:df:da:fe:6d:a0:b7:c8:65:dc:54:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5D:28:34:6B:11:51:82:2D:22:DD:A3:B9:EF:3D:12:0F:E6:BE:31
            X509v3 Authority Key Identifier:
                keyid:C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:97:2e:9b:2b:84:be:78:04:b8:cc:92:a9:4a:2b:b5:82:af:
         76:51:25:60:11:ac:a7:6f:af:24:2e:2b:34:05:81:4f:0a:0e:
         61:07:6e:64:1b:ba:55:a6:4a:d7:03:5b:3d:2e:a5:6c:ae:15:
         01:a5:74:68:04:84:be:6f:9f:fd:a9:b6:90:9d:fd:b0:06:cc:
         fe:11:ba:c0:71:1c:44:d8:d8:54:e3:60:ae:33:7e:bd:27:5e:
         68:89:91:87:0e:26:ed:e3:4d:51:69:ee:68:5b:4c:cb:17:e2:
         1f:c6:8a:b4:57:5c:74:a4:4b:0e:d7:be:0e:bc:1d:aa:83:4a:
         d2:db:d8:e4:9c:40:60:85:fb:57:63:2f:3b:92:1c:2f:dc:da:
         74:f7:a2:3f:54:39:74:19:bd:cd:61:97:54:85:10:6c:c7:81:
         c5:62:b3:5b:1c:b5:86:e0:9f:02:d4:0a:30:89:b7:ec:03:6f:
         9a:53:7e:00:0c:a6:08:a6:8f:e6:1d:c8:20:63:3e:70:a4:8b:
         40:49:6b:54:96:81:7b:dd:ec:1f:9d:99:9a:8f:47:da:c3:d1:
         a9:90:1c:e1:20:70:ff:62:8e:35:f4:db:d5:4f:af:a2:e2:1e:
         83:95:27:88:e1:4e:be:0b:ab:84:8f:b4:12:41:0b:eb:45:de:
         90:26:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----