Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
File:                     wT40HB4U01p0ls54KOMFX4Y5Nc8.mft (raw, json)
Hash identifier:          Sv7zFRN+IEoSnFrNoqw2TakLslkdmyU9U8zJLp+1DH0=
Subject key identifier:   BE:80:33:16:0B:17:77:AB:2E:02:09:7B:03:AA:13:E2:76:18:0B:4B
Authority key identifier: C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
Certificate issuer:       /CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Certificate serial:       01962F747BC17BFA6AB20D18BB798425EC0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: f1wBKCsXK0uC2nsel0GIe5b0KZk.roa (hash: G9RLd4HtWguPLDAL1JjtSWQmaqJ7AZGAeDkABfQH220=)
                          2: wT40HB4U01p0ls54KOMFX4Y5Nc8.crl (hash: UrjfpzRNVdAS4C2RACWF2iozS2Nu9/mL8RvI5zsJ6CQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7b:c1:7b:fa:6a:b2:0d:18:bb:79:84:25:ec:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13e341c1e14d35a7496ce7828e3055f863935cf
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=be8033160b1777ab2e02097b03aa13e276180b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:1e:b5:b2:58:87:06:b1:7a:d8:57:83:21:
                    40:89:5b:d6:fe:67:e4:e8:30:cd:4f:d5:e0:72:fa:
                    c6:75:bc:62:83:81:b9:8a:fc:cb:0c:e0:16:9e:4b:
                    30:10:1f:97:c8:93:51:2e:2f:5f:99:fc:ce:46:31:
                    6b:1f:38:ba:80:a0:1c:5d:0e:40:04:29:79:3a:6e:
                    53:8b:42:df:24:29:a0:80:c8:18:6d:fb:4c:9a:90:
                    78:eb:db:83:b5:a8:0f:3f:4e:fc:2a:34:c5:16:fc:
                    f4:5d:a5:98:87:88:8e:26:12:71:8e:f3:e9:77:0a:
                    ed:c4:b2:6b:b5:da:66:55:45:19:9d:b4:1e:99:9a:
                    3a:bd:10:28:35:09:c0:bd:25:2e:b7:4e:31:3f:27:
                    a4:da:34:c3:0a:23:ad:ea:58:6b:23:9c:38:6d:f1:
                    61:f8:c4:d0:87:05:0a:76:76:05:66:7d:5b:f8:e2:
                    e6:5b:48:fa:80:30:41:a6:1c:fe:61:00:71:17:2c:
                    fa:ad:fd:db:c9:9c:72:03:2d:40:d5:e5:18:10:a6:
                    4d:dc:b5:60:ca:9e:5f:9e:58:1f:c7:cd:2e:2d:d1:
                    47:13:93:24:7e:57:d0:a9:69:d1:0d:30:7d:c9:52:
                    22:15:2e:f9:6b:a5:87:47:f8:2b:ba:6b:79:2f:a3:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:80:33:16:0B:17:77:AB:2E:02:09:7B:03:AA:13:E2:76:18:0B:4B
            X509v3 Authority Key Identifier:
                keyid:C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:94:4f:44:2f:3d:00:ef:5b:b5:33:b2:91:34:c5:24:c5:f1:
         8b:ac:dc:c0:8b:be:ef:60:e0:cc:ca:8a:62:38:ec:e2:96:32:
         82:92:51:26:09:1b:62:15:c2:7d:d9:b1:3a:a7:82:9c:8c:e9:
         d7:88:a8:d2:a7:f0:e4:3f:fe:af:e6:ff:76:ee:6b:7f:f3:f8:
         0b:fe:1b:09:4f:7f:c6:48:3c:7c:da:96:fa:31:aa:0d:8d:d3:
         47:c2:48:d2:b4:99:03:04:09:21:f7:7a:63:6f:2e:4e:cb:3f:
         03:86:13:66:c2:c1:93:04:b4:a3:58:d6:d8:be:2c:ba:fb:e9:
         4c:91:85:f2:ca:32:bc:78:13:a7:5a:25:0a:a4:f0:ca:d1:bf:
         0e:e5:1f:46:ad:e7:39:89:cf:b3:5c:ed:be:1e:41:5b:a8:f2:
         cd:85:53:b9:ea:d9:cf:6b:10:dd:7a:b0:f5:4b:5a:ad:69:96:
         ac:fe:ea:5c:77:fb:d3:d6:77:db:e2:17:17:06:1e:b5:8d:bc:
         28:85:47:fd:85:b1:e6:39:08:1f:f6:56:7e:b3:c4:15:eb:7c:
         2d:3b:40:2c:e4:29:79:f0:20:25:08:cd:6d:f9:de:98:db:1e:
         a1:6b:8c:52:c6:fd:00:ad:ea:e8:af:c7:ff:1f:48:4c:45:22:
         55:1e:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----