Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File:                     wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier:          N3ZgUz+lb5opH4Hgct6+Kp7HP+hkRRe1OoACVwyvv04=
Subject key identifier:   8E:02:EF:D5:79:0E:2F:26:54:9B:E6:83:A5:E8:60:36:45:DA:65:AA
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer:       /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial:       01962E986FE82AE8DAB9362144923E5566AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: L5n__TlZWPdvDvLr4ZFidz4XLKs.roa (hash: joZuWv/Q4EyLrxkijZ/RW681SRLMu9NB8uvDRrrDNHk=)
                          2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: 1oy8pEnHhKFaSkVQOgrxLFMZzGV8A7LyXpiVKbqTvhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6f:e8:2a:e8:da:b9:36:21:44:92:3e:55:66:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=8e02efd5790e2f26549be683a5e8603645da65aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:82:cf:8d:49:61:06:a3:83:99:c7:d9:d9:
                    3f:91:85:e4:7d:39:ed:9e:84:b0:1f:ec:95:42:c1:
                    65:25:6e:1a:85:45:22:19:e0:4b:48:bb:0b:ed:02:
                    58:86:cc:55:e9:ce:e9:65:8b:d7:00:95:ae:d3:41:
                    a5:d9:72:ea:9a:bd:bf:87:9f:1c:ef:d5:03:29:62:
                    7b:a7:a6:a6:d7:fa:18:15:83:e5:98:9c:34:6a:4e:
                    55:94:12:c8:41:0c:71:1f:5c:1f:82:a7:d4:9f:13:
                    15:00:d0:7e:de:f3:54:5b:89:54:c4:93:15:9b:a6:
                    f7:7b:94:d9:64:00:1f:00:87:45:ad:ac:4c:bd:71:
                    ea:9b:6e:5d:0d:05:c3:ab:c6:da:f3:b4:40:c0:9f:
                    65:6a:82:b8:a6:b4:a6:af:32:a4:8c:1b:43:26:5f:
                    c6:82:25:e8:1f:04:7e:4b:3e:3c:4a:69:f0:46:e2:
                    b5:f9:c0:1d:c4:93:cb:03:33:32:a4:80:fe:8d:ae:
                    96:59:d7:6c:5d:1c:24:5f:6f:2a:52:69:bc:6c:1d:
                    ce:08:01:49:bd:95:2b:f5:ce:c4:78:f1:fe:72:fc:
                    28:e6:96:7e:73:ad:cf:fa:9f:a1:5e:1c:10:ad:9b:
                    af:74:05:2b:ff:13:ae:3b:34:6f:c9:5a:c9:92:44:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:02:EF:D5:79:0E:2F:26:54:9B:E6:83:A5:E8:60:36:45:DA:65:AA
            X509v3 Authority Key Identifier:
                keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f0:6d:86:11:bb:92:42:5a:d7:6f:6a:58:c0:ae:b0:81:0c:
         4e:9e:49:5f:0f:b9:72:3f:28:e8:75:c6:cd:c7:44:f8:5e:19:
         d5:d8:27:da:ff:0e:f0:09:f8:24:01:e2:04:6e:4c:eb:c0:62:
         e5:49:22:37:ff:4b:8d:bc:f2:1f:3a:91:5f:45:1f:e0:ae:8c:
         dd:09:a0:f5:20:f7:44:5d:07:27:4d:d7:ce:b9:2f:45:c9:38:
         63:50:23:f9:dc:86:9f:80:7f:5c:40:9e:61:f6:41:3d:ef:97:
         1d:a2:e9:61:ce:f1:0e:5d:86:25:4a:a3:64:f9:a6:27:d7:12:
         71:b4:21:66:5a:12:47:e9:99:13:96:56:b2:7a:98:38:02:3f:
         af:29:23:a2:a7:5c:ba:3e:63:f6:c9:9a:3a:a2:d5:8d:12:f0:
         e7:68:cf:6c:e8:e0:c1:35:11:b2:49:e1:2f:36:b7:a4:2d:81:
         23:be:01:e5:95:f3:f1:57:2f:10:eb:3d:2d:2b:35:f8:b4:64:
         f6:c8:ab:ff:2c:15:bd:a9:62:f6:a4:15:10:24:2d:74:9c:f4:
         9c:13:23:b0:8a:36:ee:54:01:cf:df:4f:14:7b:ef:cd:68:6d:
         47:8e:df:90:d6:62:63:ab:57:34:d4:66:3a:56:93:22:e2:3d:
         90:b6:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----