Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File:                     wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier:          J8naGnx9kuBD3GPGfZsCW+W2+G4mjCBw3OhbhQEOmHA=
Subject key identifier:   BE:2D:C1:6B:52:C7:F2:3E:96:D8:31:DC:50:89:D3:3C:37:70:19:3B
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer:       /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial:       01962E2B2A657A77411361BBC4A0B55C3146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number:          02D0
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
                          2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: dH8m+q8G2jO8lGAPX5Fz0fNH4SL6+Myb/O6+eeHHuN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2a:65:7a:77:41:13:61:bb:c4:a0:b5:5c:31:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=be2dc16b52c7f23e96d831dc5089d33c3770193b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:7e:ea:9f:60:a3:43:83:48:73:fc:d5:85:
                    7c:c1:94:55:ac:cd:6d:e9:7d:af:44:d7:03:31:22:
                    8d:69:09:4b:b8:62:29:72:e6:63:5a:4a:d3:99:f8:
                    f3:e2:45:0d:e1:cb:da:1f:dc:63:9d:bf:80:b4:80:
                    e9:61:3d:a3:4f:cc:54:3d:ec:b4:b1:b8:83:2c:b2:
                    dd:c0:f0:de:d3:fe:70:5b:56:e1:14:69:1e:b4:1b:
                    55:b4:da:c4:c3:cb:33:60:84:32:18:11:d0:56:6f:
                    87:73:db:f7:a2:15:57:cb:44:1d:c1:65:7a:f4:43:
                    e9:9b:50:67:58:ee:c2:68:9b:f1:69:e1:cc:ab:c0:
                    8b:78:78:21:cd:8c:00:89:30:8c:48:c1:ce:36:3b:
                    b5:9e:5f:e0:3f:9c:3f:e8:55:fc:c2:81:9e:cf:00:
                    20:71:e1:ed:60:bd:dc:96:f5:32:ae:8a:9c:24:fd:
                    d5:dd:dc:b5:01:b0:9c:d5:0d:57:ec:78:ce:44:08:
                    b1:2c:bb:8d:71:17:b4:99:48:51:ed:e1:3c:6a:0e:
                    73:b5:b9:18:ef:7f:22:c3:9f:62:0e:c7:44:73:cc:
                    f1:3e:8a:83:9c:84:a3:04:06:2d:3c:3b:ee:65:17:
                    b7:31:51:7f:3e:5a:66:29:f9:2d:57:a7:db:a2:1d:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2D:C1:6B:52:C7:F2:3E:96:D8:31:DC:50:89:D3:3C:37:70:19:3B
            X509v3 Authority Key Identifier:
                keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:95:7e:8e:53:c0:79:41:3f:a4:c7:42:b7:0f:a1:fe:36:16:
         91:d2:e5:78:eb:08:3f:f9:9b:bb:95:d7:e8:aa:6e:29:46:18:
         5d:aa:3a:49:83:e1:5e:9d:6e:b6:7a:a7:46:e7:8a:77:0f:b4:
         cc:2d:35:d4:30:37:0d:91:61:9b:26:ac:6d:11:65:3a:31:0c:
         fb:25:b3:5d:d3:ee:b6:8d:37:05:e1:8d:30:16:c4:87:e5:f5:
         5b:1c:b4:d4:34:a8:04:b1:ba:13:6d:1d:39:b4:f3:51:d6:10:
         39:8d:e0:8d:f5:90:be:b5:62:e7:3c:79:d3:1e:8a:ee:69:f6:
         15:58:27:ea:68:22:e5:39:4d:3a:a4:03:77:8b:01:35:1d:19:
         da:81:35:89:49:2c:c6:24:f8:e1:b1:79:b3:bd:aa:d2:96:5e:
         14:11:48:28:a8:f2:c8:0b:2b:a1:2f:6b:30:38:e5:d8:20:b5:
         f3:23:bd:18:1b:99:f4:2e:49:3f:1e:54:c6:8b:f6:1b:b2:53:
         4b:a0:b4:a8:1f:af:c5:82:90:de:35:da:d7:f6:cc:28:30:96:
         98:ab:28:36:d3:44:2e:7b:0d:59:50:28:ad:cf:02:ed:6d:d7:
         76:4e:90:8e:8a:bd:1c:87:f4:dd:75:ec:6f:4d:20:13:51:9d:
         03:97:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----