Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File:                     wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier:          wV23LbfkBacdpCjdrAtOE/UdG6YGELMjOAF3TW5YnUM=
Subject key identifier:   A0:43:51:BE:DF:56:76:6E:D0:AE:0E:66:AD:A2:25:BA:7B:39:23:AE
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer:       /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial:       01962E61F0DE04FCA563DC08D44245A4F15E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number:          0F48
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: MaNg2WPI-q4to7SVp52zO_QNsfw.roa (hash: HsUZQaqhFj/mJrXYPb29143giiHL5X0iJfJWhLhO0VU=)
                          2: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: MppCiTza0P0IfbYfc5smYc17LtgjZdzJg2wWWjZEXKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f0:de:04:fc:a5:63:dc:08:d4:42:45:a4:f1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=a04351bedf56766ed0ae0e66ada225ba7b3923ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:01:28:82:f5:83:22:33:5b:7b:9e:d1:87:
                    cd:8b:a2:0c:3e:57:b2:ce:e8:f3:a6:46:2d:8c:f5:
                    e5:98:2f:c9:a6:da:91:55:c1:85:b5:cb:aa:d1:29:
                    bb:c0:8d:fa:15:1b:eb:2b:79:7c:9c:db:0d:e2:77:
                    52:51:0b:8b:94:24:3d:52:e2:e3:bd:8f:4f:d5:92:
                    1c:98:b9:62:f6:6f:8d:ca:a1:51:0f:a6:9d:52:f7:
                    a0:8e:a7:8a:1f:5d:cf:d3:87:0b:94:e6:99:51:66:
                    f7:44:19:22:14:85:2f:42:70:8e:37:b5:6e:f0:bb:
                    90:ef:b3:c9:0a:e8:e8:86:94:19:03:2b:dc:7b:7d:
                    93:68:f8:d0:37:91:0f:05:85:6e:cb:15:8e:f7:3b:
                    35:29:68:e2:b1:ad:04:58:fe:3e:c5:1b:be:f5:ae:
                    82:80:ee:89:b9:00:c0:57:f3:7a:c1:81:56:64:df:
                    3d:66:09:f5:e0:00:95:ed:0a:91:30:2f:97:d2:1b:
                    6a:b8:f6:a8:34:aa:e9:5f:a5:9e:a3:13:c4:37:63:
                    58:5c:83:52:46:d9:fe:00:1e:33:89:34:7b:70:21:
                    f0:04:bb:9a:b5:d0:f5:36:a3:a2:ce:f7:68:cf:e5:
                    54:9b:ae:18:8e:7a:cb:1a:3b:13:99:0b:b9:f9:b6:
                    0c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:43:51:BE:DF:56:76:6E:D0:AE:0E:66:AD:A2:25:BA:7B:39:23:AE
            X509v3 Authority Key Identifier:
                keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2d:7f:6b:24:a3:fb:f3:97:a0:f3:4d:16:a6:57:45:1f:cc:
         76:38:91:c1:32:4e:3d:45:a6:6b:e6:8e:ce:09:93:74:82:7d:
         ff:9d:c7:a5:a0:bf:d9:e4:0b:ef:c8:93:10:82:25:aa:e1:d1:
         01:c5:54:59:c9:7b:28:fd:81:cb:11:63:8f:33:db:bf:a8:90:
         de:4b:44:7c:43:64:64:15:db:29:f2:34:39:7b:93:f5:f0:dd:
         4e:5b:cf:39:c8:c8:a4:24:26:8c:81:88:2b:ff:92:c6:95:21:
         4e:ec:a2:c7:57:7c:3c:72:4f:76:51:17:b9:e4:cb:08:e1:14:
         8e:4c:df:5a:be:18:ec:65:b8:d4:d3:e1:40:3e:ba:2c:c4:2d:
         31:de:eb:c7:96:f2:33:48:90:79:18:df:a0:af:cb:bc:07:fe:
         90:d0:79:04:3f:ab:2f:dd:e4:56:b5:9a:69:71:a1:f7:f0:7c:
         4b:cc:31:cb:32:85:11:95:bb:52:34:a1:7b:7c:34:00:ba:4e:
         c5:f9:fd:f6:21:7c:4d:80:01:3b:b4:7d:b3:12:70:52:22:cd:
         ef:60:7f:37:3a:4a:e5:8c:82:dd:7f:fe:87:6b:d3:3d:65:b3:
         c8:24:37:e3:3d:db:38:c1:50:5d:54:09:eb:c0:d3:8d:21:c0:
         fe:c1:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----