Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
File:                     zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft (raw, json)
Hash identifier:          90E9XIyC++3i9bSxZ56wLqFpz2kjIT2MkJG7yOK4Dsw=
Subject key identifier:   43:2E:6F:3E:D1:19:6D:17:91:4A:22:1B:3F:F6:03:30:8E:52:20:DE
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Certificate issuer:       /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial:       01962E61BFB45AA5288DE89EB891646A4851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
Manifest number:          1485
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: YqsIJO2_ffnr84dFD6FPVdm33CU.roa (hash: pxoJD8X1pGpkVmBMQ12ROsjSsHVTYIEf7xsdsWhn70g=)
                          2: fuWr4ajPQIorYySrCuX8pRFFTFM.roa (hash: m3vIKMXFzJeuW2Nn3Yn1mc3oXD70c/mqAAyNwLfO+oc=)
                          3: zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl (hash: 6mkdslQAafbkEX475MdWG5BG1SJsXTPNxm6qgn8I1Ps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bf:b4:5a:a5:28:8d:e8:9e:b8:91:64:6a:48:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=432e6f3ed1196d17914a221b3ff603308e5220de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e0:2c:1f:86:95:92:00:2f:8a:ea:31:bf:7d:
                    8a:a2:5d:52:ec:4f:a0:21:75:63:b8:84:0f:f8:17:
                    07:22:b6:df:59:cf:8f:98:a6:42:a9:4b:80:f8:51:
                    30:36:68:9d:cb:a6:b4:3b:6c:9e:4f:aa:5d:98:39:
                    c3:de:91:62:90:bc:34:2b:52:6d:b6:fa:b6:54:e9:
                    e1:6d:aa:11:08:0e:b7:1e:92:89:3e:f3:98:99:b7:
                    fd:b8:ac:9e:4a:93:5b:6b:7a:65:13:67:d2:47:17:
                    88:19:61:d4:5c:6d:82:0d:fb:3e:c8:50:0d:20:37:
                    a0:04:d6:12:80:f0:8c:d0:1b:f5:63:ff:5c:ee:31:
                    3d:0c:f5:f8:ff:65:41:cf:a0:c5:5d:58:cf:db:7c:
                    e6:77:9f:1a:ec:00:11:3b:3d:c4:7f:54:1c:3b:ff:
                    3d:ff:07:b3:24:4c:cb:2a:c9:a2:a7:5b:87:ed:01:
                    7a:49:ac:6d:5b:da:3b:16:c8:9d:ee:f4:15:13:0a:
                    af:f0:9c:15:d6:b3:c9:b8:3f:d8:d6:27:d6:76:aa:
                    dd:25:1d:67:91:1b:94:bb:47:88:9d:47:2f:31:24:
                    b5:0b:6f:18:ee:f5:12:1c:00:79:4a:6c:83:f4:53:
                    5b:ac:a1:23:25:69:3e:20:81:56:bf:a7:87:e6:47:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2E:6F:3E:D1:19:6D:17:91:4A:22:1B:3F:F6:03:30:8E:52:20:DE
            X509v3 Authority Key Identifier:
                keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:b7:2c:11:28:ba:b0:42:2b:de:a3:e5:47:82:18:a4:6e:
         b5:b7:5d:aa:87:f6:cc:6f:28:f5:32:f6:a7:11:c9:17:ed:16:
         91:54:90:bb:3c:b1:94:63:b6:6a:a6:ea:6e:fb:dd:66:e5:99:
         07:2a:37:57:fb:c3:94:40:77:cc:a2:ad:61:4f:1a:cb:df:06:
         82:cc:8e:7d:e8:81:9f:d8:e8:eb:eb:b0:19:d7:e2:eb:5a:c3:
         24:0a:67:28:1f:36:da:30:15:43:f8:c2:47:19:37:af:72:6e:
         09:d7:61:c3:1b:b9:fa:61:f1:41:d9:78:bf:5d:b1:6f:e6:46:
         9f:62:89:4c:ff:27:da:e5:0b:81:0e:01:70:a2:b3:6a:b1:a7:
         95:08:f0:06:19:46:b5:be:f7:31:53:3c:5f:0e:61:e3:af:ef:
         2d:ee:11:b5:e3:a5:24:05:68:c9:0d:0e:bd:3d:79:60:63:88:
         d6:19:16:85:8e:75:0c:09:58:38:5c:3f:6c:ce:ce:ce:c1:90:
         c6:d9:12:1e:23:95:fb:06:02:6d:01:dd:cb:9d:3a:e1:da:ac:
         f5:d2:cf:65:71:8e:27:11:7d:cb:53:ff:6d:03:92:c5:4f:7f:
         b0:ba:f7:89:a5:60:43:8a:32:95:b5:16:06:4e:28:99:4b:38:
         75:14:84:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----