Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
File:                     85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json)
Hash identifier:          fUDfcKZKVJGff78+6ASvRQGhkIpXKGi4iCnnTS9PjiU=
Subject key identifier:   F0:39:DE:96:69:29:D5:6C:A0:F6:4B:F3:71:D2:AF:5F:FB:EB:A5:08
Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
Certificate issuer:       /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Certificate serial:       01962F06648FFBDCDB19FDA2CA1133376688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
Manifest number:          1014
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: kUT8swEqnhuYnGS+65K4d2z6QpAYi4lf7cvLLjDDQ40=)
                          2: mG96Y715wDIwvEKSq5Z-71rWs6M.roa (hash: Y3E3/3Utv7uEbR1MqLWFqsWoMU44kmtfUjplzEpgK2w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:64:8f:fb:dc:db:19:fd:a2:ca:11:33:37:66:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=f039de966929d56ca0f64bf371d2af5ffbeba508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:3c:2d:55:29:42:6a:09:05:ea:a4:87:2f:
                    af:a1:ea:50:f7:65:22:32:dc:d6:bf:39:fb:04:a3:
                    6b:f3:33:26:a2:c1:36:b5:22:b8:7a:11:d6:75:0c:
                    52:f2:dd:21:b6:73:f9:5c:de:82:c7:eb:c3:2b:a5:
                    15:d5:7d:8a:28:68:0c:f2:d2:0c:04:c3:16:ad:3d:
                    1b:e1:21:f7:17:c7:1e:a8:77:d8:2e:74:50:bf:f2:
                    0a:7d:ca:d9:3b:a0:e8:29:7f:9c:c5:10:d2:34:96:
                    04:ed:ff:5c:18:ea:be:19:e6:99:be:ce:06:5b:bd:
                    11:1d:fe:f2:17:03:1c:67:0a:cd:de:7f:73:14:87:
                    5c:8a:c5:db:d6:ea:86:35:90:a3:f3:db:92:78:60:
                    32:84:6b:9f:c7:94:28:f8:50:61:f6:6d:c1:5a:6a:
                    8e:bc:24:c0:e6:8e:e2:5b:dc:4a:28:63:5a:c8:f2:
                    8a:37:87:0b:02:12:c6:6b:25:46:35:fa:9e:22:70:
                    80:6d:54:de:44:ec:f5:e4:1b:21:97:11:a1:2c:ff:
                    ca:5d:14:b8:84:52:5e:de:3e:7f:ab:73:17:93:7c:
                    4d:c2:75:7c:bf:7a:35:36:e8:3e:ba:4a:22:cc:6d:
                    79:66:ab:18:66:90:b8:2d:4f:d6:22:0d:e0:c0:e9:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:DE:96:69:29:D5:6C:A0:F6:4B:F3:71:D2:AF:5F:FB:EB:A5:08
            X509v3 Authority Key Identifier:
                keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9f:f9:a9:fc:fd:27:0a:c6:96:9b:34:5b:05:5a:13:17:2b:
         b7:d4:c3:c8:64:5b:f9:f5:b6:ab:79:49:8c:25:9e:d8:7e:5d:
         a9:70:b6:c1:7f:95:7b:e9:7f:56:5b:37:57:04:52:14:85:5e:
         05:7b:f5:bc:2a:5d:1b:e8:0b:ff:3d:3b:ff:0e:be:8f:8d:25:
         9c:08:41:2b:95:5b:f1:32:1d:70:3d:0b:a4:a9:4a:c7:3f:b5:
         88:25:ee:a7:4e:92:23:d9:73:3a:a3:55:d4:0b:69:08:33:fa:
         da:bd:55:d6:3f:0e:54:53:88:45:39:b9:83:8f:e1:7d:d1:e6:
         bf:db:00:a5:66:fa:44:e4:dd:4a:da:56:5c:0f:23:5f:17:67:
         e6:e2:37:c2:73:2a:6f:0b:52:3b:26:b1:46:5a:62:3b:11:91:
         75:6c:0b:2e:34:3c:b1:ab:ad:22:46:a1:bf:be:10:f4:e5:c6:
         fa:7f:a1:56:44:52:6d:65:2b:b5:3b:aa:4d:1b:09:b1:89:45:
         8e:3d:79:7d:07:2d:43:d2:16:a4:c7:87:67:c9:29:1f:66:05:
         46:9a:36:45:7f:ac:e7:b7:2f:4b:97:b1:76:7f:40:1e:4a:72:
         1d:95:2e:a1:c6:0c:aa:cd:1c:fd:13:84:ab:b3:14:29:5d:4e:
         09:12:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----