Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File:                     wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier:          151uW6K0O8qJSBSGcioqiaFI4gNY67OGCRAVgMFi4GE=
Subject key identifier:   BA:13:DA:08:A8:F5:98:A0:20:B8:13:F5:14:D5:D6:1F:48:8A:CD:E1
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer:       /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial:       01962ECF8A7860A4A9943D7DC4F5D9E084BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number:          0561
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
                          2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: ap6eQsct0P7uWgQ2WzvHDRzm+cK9MMiz8WXgUHj0vJg=)
                          3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8a:78:60:a4:a9:94:3d:7d:c4:f5:d9:e0:84:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=ba13da08a8f598a020b813f514d5d61f488acde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:b2:47:bd:e0:33:6a:3d:9f:23:34:ec:1e:
                    8c:32:49:45:2a:2c:62:2f:9a:a9:82:e4:f4:2f:ec:
                    7c:e4:22:ae:e5:cc:95:6d:c0:cf:3b:19:91:46:96:
                    72:83:8b:e6:6b:5c:63:bd:61:73:46:7b:11:89:1d:
                    81:c9:e8:39:53:27:0e:4d:8a:cf:0d:69:d2:d3:fe:
                    ff:e2:ce:e9:bf:07:29:de:f1:14:96:2c:c9:3e:6b:
                    8d:29:34:37:d0:a4:02:f3:fe:cb:c9:54:d6:87:4c:
                    f3:b7:a2:60:f3:4d:7c:d3:9c:e7:45:19:af:6a:3f:
                    5a:46:69:41:c9:09:0c:72:69:9d:a0:50:f9:57:c0:
                    a0:c7:e4:e8:1c:39:47:11:c2:85:9e:63:3c:90:94:
                    09:8c:80:41:29:f0:cd:53:e3:1f:91:a4:f0:86:e7:
                    47:df:34:42:2e:18:75:4b:36:4b:1b:94:19:42:a4:
                    73:eb:6c:32:93:5b:47:0f:47:5b:44:c6:1b:41:7a:
                    4c:fe:e7:b8:34:39:62:43:af:d5:e2:1f:7b:4d:95:
                    e6:be:bb:cd:a4:60:42:b7:e0:c3:3d:e8:e2:82:68:
                    cf:68:a9:96:eb:13:9a:2f:db:c9:2f:32:06:ed:46:
                    d6:a8:90:7c:3d:21:2c:1f:ba:bf:cd:fa:32:2a:14:
                    9d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:13:DA:08:A8:F5:98:A0:20:B8:13:F5:14:D5:D6:1F:48:8A:CD:E1
            X509v3 Authority Key Identifier:
                keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6c:8d:66:66:2b:5b:a9:cf:be:44:11:78:4c:f0:5b:7b:ed:
         53:61:c5:ef:58:0e:a5:a6:60:6d:ac:c7:fd:ab:18:48:2e:20:
         81:cd:aa:5b:f5:ed:44:c9:66:c0:28:53:b7:2a:10:5a:fb:b6:
         c5:e2:13:ed:25:ee:d9:b9:32:a6:b6:52:1b:b4:d3:a4:6b:91:
         30:4a:bd:c3:46:26:fe:48:80:99:6e:ef:25:08:15:8e:d9:47:
         1e:f4:34:43:fe:96:16:4e:14:9e:99:c2:77:97:6d:44:41:1c:
         99:71:bb:34:c7:42:6d:f5:2c:bf:05:a1:26:8b:7a:03:57:c0:
         13:02:14:6e:f6:4c:60:f6:da:ca:7c:42:43:3a:87:8d:79:b2:
         53:27:9d:34:ea:a3:ab:8c:68:a5:87:54:7c:b9:80:de:fe:14:
         7e:0a:37:0b:86:d2:02:1e:eb:a3:c2:f3:0f:4e:4a:0a:df:cd:
         e2:8c:04:bd:79:e8:5a:b1:bb:65:09:f8:9b:32:06:86:ca:13:
         4f:16:00:26:24:6c:57:fb:4e:7f:75:27:db:40:ad:30:77:48:
         7b:01:78:3d:9a:62:17:70:a1:d9:13:24:56:c4:47:45:7d:10:
         46:09:03:d1:a7:33:2c:94:c6:6a:96:54:a1:11:b2:d7:40:64:
         aa:d0:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----