Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
File:                     wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft (raw, json)
Hash identifier:          aK0DRpo+nZvC+Ds5ofB35U6r09s6GpjPA6MXJsRE2B0=
Subject key identifier:   E6:34:54:35:59:2A:9E:35:A6:6A:DB:81:7B:07:C4:09:BA:5F:D3:65
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Certificate issuer:       /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial:       01962E61BB3B7537CAF31C7246BF7F0A3696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: U48ecbKwcHeg61Lsn-9oJV9fZ1M.roa (hash: 4OZhDTAYRi1p6Bim6OrHHauK8Tj1XNwxbEYFfDDGDS8=)
                          2: W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa (hash: Mzqyt+0iiHuJ8ffJgOXtkPZgAbIE5kucHWjmbNGM61Q=)
                          3: rbSVHILo7KFdyfKkJiVN3ULREeA.roa (hash: +QOKE2skzry0xtqfIBGKUWUhJ09lXvKf9/a8XMywLNU=)
                          4: wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl (hash: TTG8qAFvfVqCF2aSlFQAhnBHKyYvKEuR3pqh57tBdik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bb:3b:75:37:ca:f3:1c:72:46:bf:7f:0a:36:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=e6345435592a9e35a66adb817b07c409ba5fd365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:39:2f:7f:ee:71:45:8e:13:44:7d:dd:a3:49:
                    27:54:75:ea:2f:5c:8d:c8:c8:dd:30:c0:2a:a3:cd:
                    c2:d5:24:1c:67:48:5f:7e:af:b9:14:2b:ec:68:6f:
                    ab:7c:4f:93:55:1d:10:ab:99:d8:fc:21:13:32:8f:
                    7d:b4:49:12:70:cf:89:63:67:e0:50:a7:dd:59:da:
                    cf:00:a2:2a:f6:30:a2:57:ac:f2:f2:69:cf:4e:b5:
                    ed:f6:fb:db:5d:7a:a6:a2:66:4a:64:29:6f:65:87:
                    a9:85:7e:ec:70:14:ac:55:55:aa:70:5b:ba:16:d4:
                    01:17:d6:4f:46:ad:6b:a1:a2:b7:d0:9c:90:7f:25:
                    6a:40:23:ad:47:7e:ee:e5:d2:cf:cb:e3:04:14:87:
                    7d:1e:8d:82:c1:1f:28:ae:c3:25:26:cf:30:67:b1:
                    39:fd:de:e3:51:7e:b6:18:a3:56:92:0d:99:34:19:
                    89:65:50:e0:bf:99:8b:80:e4:a8:4c:b0:df:d8:b2:
                    23:0f:90:f0:57:82:e2:a1:a0:ba:de:c2:af:00:cb:
                    c9:f0:08:1a:5d:b2:c8:18:fe:f8:82:15:c9:a3:cb:
                    0e:47:2e:a1:a3:29:c2:fb:d6:a1:5d:49:1b:fa:a9:
                    86:d6:e6:13:31:13:50:25:74:2b:5c:5d:9f:30:33:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:34:54:35:59:2A:9E:35:A6:6A:DB:81:7B:07:C4:09:BA:5F:D3:65
            X509v3 Authority Key Identifier:
                keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:32:8a:3e:a6:a4:1f:3e:74:71:bf:b0:31:42:2f:2f:4a:c4:
         f7:a0:c8:33:17:46:42:6c:9e:0e:45:1b:bd:55:7f:e3:5b:a3:
         ca:51:cc:05:79:93:18:03:66:f1:bf:15:23:c6:49:d4:dc:00:
         78:be:16:b8:a2:73:42:60:2e:a3:ec:53:ea:70:b6:d1:e9:f1:
         39:c9:ef:9d:4a:72:aa:c7:d8:f0:87:aa:7e:51:a9:a3:16:a7:
         67:83:e5:06:2e:55:18:4e:19:24:f4:b9:fe:b6:9a:3b:5c:2b:
         97:75:3f:53:d4:4e:32:c5:eb:16:a8:a7:f6:1d:fa:a0:46:77:
         0a:d9:63:66:65:05:82:a3:f8:c1:96:6c:7b:18:13:cf:50:15:
         21:f6:f0:2b:1b:7c:61:83:1b:77:09:1c:bb:0a:2d:9d:ba:a9:
         51:1c:f7:e3:92:13:25:4a:d1:91:b2:6a:1a:a8:90:b3:6e:4b:
         ba:ba:76:4b:e3:04:44:55:c6:c9:c7:47:6b:64:4b:df:e8:44:
         6d:a9:56:74:70:65:51:89:06:04:06:fe:8a:01:10:c5:ef:45:
         c2:27:23:91:f2:c1:24:69:d3:a3:f7:97:3a:55:49:e0:ab:5d:
         6f:dc:d5:ae:79:86:3d:e8:bc:7b:0d:70:b3:c6:fb:dc:12:f7:
         5a:7d:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----