Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File:                     wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier:          byLZZlyRPQX2SRT/y/lpoaRzWInu89lPpAWMCOlXu/U=
Subject key identifier:   96:88:4E:25:09:63:AE:0A:90:76:6B:92:A5:4C:69:BC:74:99:46:0D
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer:       /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial:       01962FAB731047E2503D348D4521E905A296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number:          0963
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: Ts1wD-6dXK6YF6lbWc4Bp6qGGOU.roa (hash: l6AYzjv5b4VOeQIHxSNacHxCFNVxW6gn4dbeXJ7uQKA=)
                          2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: wYbs5yyITYpkj1CeMAKjLrKG0CkoNmPetH6QPwBnO1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:73:10:47:e2:50:3d:34:8d:45:21:e9:05:a2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=96884e250963ae0a90766b92a54c69bc7499460d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:76:35:98:eb:93:1c:12:2f:62:7d:e7:d2:
                    f8:95:7e:81:5f:67:15:1f:63:11:a3:a9:98:d2:fe:
                    83:18:18:01:af:cc:ea:8d:52:8c:3a:8f:7b:76:db:
                    57:16:d4:a2:bf:21:7f:7b:4d:93:f8:fa:e7:ff:42:
                    18:56:8d:f5:db:b2:34:ed:29:57:28:1e:2a:15:a3:
                    1c:d8:21:ba:e4:9f:aa:d6:b2:3b:ab:12:35:67:dc:
                    86:06:53:e6:e0:9f:d0:ad:40:2c:fd:bd:01:29:1e:
                    7f:78:85:84:6d:9c:7c:10:91:98:26:5e:24:02:8a:
                    86:6e:e1:aa:3c:cb:a9:9e:b9:50:22:14:44:4f:35:
                    d1:ac:d6:08:0c:b2:07:40:89:03:fa:3e:e3:35:df:
                    db:9b:ed:94:7c:26:a6:65:bc:2b:c6:4a:69:6d:ee:
                    77:c8:ff:4a:c5:5e:d1:55:30:dd:cb:6c:43:7d:fc:
                    7c:ae:fb:71:e4:b8:d2:dc:31:1d:0c:92:2d:42:1c:
                    ef:1d:14:eb:a2:9b:b1:fe:51:16:94:9b:24:97:a9:
                    9d:77:a9:60:89:48:d4:bf:95:64:0b:d8:07:ee:be:
                    a9:3b:eb:38:d0:a1:31:dc:f1:7c:36:1d:49:fd:bd:
                    fe:1a:5b:a1:b1:81:21:a9:35:5f:14:5b:88:ae:76:
                    39:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:88:4E:25:09:63:AE:0A:90:76:6B:92:A5:4C:69:BC:74:99:46:0D
            X509v3 Authority Key Identifier:
                keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:99:e2:b1:f2:93:62:1a:10:26:34:aa:d4:91:05:9a:c6:2c:
         30:21:40:69:d5:da:90:0b:24:aa:ae:19:ea:86:07:07:4c:d3:
         9b:1f:eb:f8:ce:be:56:33:f6:c0:71:17:4e:9e:6d:5a:23:56:
         57:f5:97:08:6d:33:5d:50:9e:56:41:a3:07:6e:9c:a4:70:35:
         17:00:fb:2c:60:01:16:44:08:d7:42:76:a4:1c:48:50:ca:b2:
         f3:3c:09:ef:c1:0f:8c:00:4d:2c:6b:31:67:65:95:1c:8b:2b:
         dd:10:88:7a:80:7e:70:4f:fe:ba:f8:54:0d:6f:22:75:18:63:
         fd:ca:11:8c:57:a9:eb:cb:a6:b0:bc:de:a0:01:46:0e:46:d9:
         20:2b:85:a8:c0:d6:4a:9b:b7:1f:52:8b:d6:5f:ce:2a:a3:58:
         70:bb:83:4c:f9:4b:57:f1:f4:cc:ab:fd:c1:09:59:b6:2e:96:
         9a:dd:f1:79:72:5e:e3:94:a8:a6:49:5e:40:0d:7c:9f:ee:79:
         d5:4c:b2:dc:7f:50:b9:df:01:0c:d2:9c:23:2d:99:83:de:26:
         1d:52:cb:fe:77:03:63:05:52:6c:d8:81:fc:50:83:9a:27:39:
         b2:22:81:f6:97:70:30:4b:db:b0:00:16:83:35:52:49:7a:eb:
         2e:ee:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----