Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File:                     wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier:          D3n7VpK70y5uJtf4uMD8vi99RzhpSUzY7S8UQJuCY2Y=
Subject key identifier:   87:5D:F1:83:8A:C9:26:82:9F:31:ED:AE:C5:84:BA:6B:94:A5:DB:1A
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer:       /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial:       01962F06A662F69C47415ACF10F4616ED60E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: hC6THvKHe5uSDROMW6kLELYwxL0.roa (hash: WD5tslYZuls5xxVxHqrkg7m1jUZOFnnaeXM0AUBhaiI=)
                          2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: POiKAPgIeXV55PZsvBizuBnhpmS088gL9NR9Hmj4YrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a6:62:f6:9c:47:41:5a:cf:10:f4:61:6e:d6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=875df1838ac926829f31edaec584ba6b94a5db1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:6a:05:32:56:17:48:3b:44:f9:97:e0:cd:
                    e3:76:fb:a9:0d:cf:17:72:8b:1d:ad:da:23:33:79:
                    94:fe:b4:48:e2:aa:dd:0d:81:ce:5f:9a:2d:47:65:
                    19:59:bb:9a:ee:31:a3:9d:95:35:21:ec:84:38:b5:
                    c2:fd:df:d3:55:92:e0:7d:d8:3e:79:d4:7b:67:61:
                    5d:ed:da:c8:b5:40:49:1b:31:7d:21:d6:fe:d2:fc:
                    83:f6:9a:ba:79:04:63:a0:c6:4a:ab:4c:31:69:4e:
                    a7:b6:21:06:a8:85:df:6f:74:96:bd:4f:1e:d3:92:
                    37:97:83:bd:c7:b0:68:e3:94:96:62:90:3a:dd:5b:
                    63:fc:16:f4:a4:27:e3:bf:b4:7a:b8:ab:5e:56:42:
                    9b:b8:26:8f:40:f5:72:58:1d:c9:26:66:29:c9:40:
                    29:5d:fb:b4:ea:07:a7:fa:a8:1c:3a:9c:85:42:40:
                    ea:0c:22:65:85:0c:6a:9b:f6:a1:09:b9:04:50:ff:
                    66:7c:e5:dd:10:2b:46:7f:f2:c4:2c:e3:a1:83:e0:
                    8c:04:aa:f1:34:a4:62:d4:5e:63:60:af:14:9c:2e:
                    e0:6b:f8:d8:de:21:a2:0c:a7:84:d4:b5:b6:74:4e:
                    2e:c0:1a:33:94:25:7d:c6:54:59:64:41:de:5f:9b:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5D:F1:83:8A:C9:26:82:9F:31:ED:AE:C5:84:BA:6B:94:A5:DB:1A
            X509v3 Authority Key Identifier:
                keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:76:d5:75:9b:7c:6e:38:11:b8:cc:b3:cd:fe:96:8c:71:d6:
         61:7d:b0:25:9c:ed:f3:93:d2:5b:05:c4:10:7e:d2:e7:a7:25:
         2c:79:36:e4:ce:0b:ea:9e:c6:88:91:ba:78:25:f5:63:64:c6:
         4e:98:5b:94:a4:27:fc:b1:d6:df:bb:47:80:3d:77:7a:59:7d:
         16:24:f0:25:e8:84:1f:8c:b8:3c:0d:11:28:84:64:30:ec:ab:
         07:02:21:a8:6b:6b:a0:89:d2:80:1d:31:7d:dc:bd:0b:92:dc:
         e1:0b:81:aa:0b:6c:e6:94:40:a8:10:0b:54:af:77:08:9a:82:
         0d:a0:18:8f:3b:36:de:c3:f6:da:f2:e0:76:83:fa:18:f1:fb:
         16:92:14:ce:9e:80:78:32:62:eb:45:93:b5:51:c7:f4:e5:4b:
         6e:01:58:6d:a2:b6:5b:8b:5d:72:00:32:7c:51:e2:e4:3a:14:
         7a:2a:a7:af:76:64:a0:1c:be:f6:e5:ac:0c:65:d1:48:46:a8:
         bb:60:3b:d8:47:c5:4b:1a:67:38:82:6d:da:60:04:7b:0c:b9:
         61:b2:71:f0:97:63:ab:9f:26:d8:e8:bb:d7:d9:91:9e:19:02:
         6e:df:f7:4d:05:0d:4c:6c:16:e9:cf:ea:c1:0d:42:36:fd:9a:
         d1:40:d6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----