Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
File:                     wZ91slk8orGwpf0MVAFd4wbEfuY.mft (raw, json)
Hash identifier:          7Zcq9/jsdzayDXMqGTsBzf9xV7LE+yRLWnOE9Ghc6aM=
Subject key identifier:   1E:2A:40:CD:87:F1:26:B1:AF:30:02:FD:6E:95:38:F3:46:25:40:86
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Certificate issuer:       /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial:       01962E2B020384387225D5F0DAE25ACB9442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: NcyIXNvoa22SJL0FsYyeOTgc_BE.roa (hash: I7SWTbgf+E38lSjzpIc20ooNKJL8yjb7efp//cF2mds=)
                          2: wZ91slk8orGwpf0MVAFd4wbEfuY.crl (hash: oj7POAvQyrnkVUv0oqzA7ziB8UcbdhHlESNO7wAp6tQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:02:03:84:38:72:25:d5:f0:da:e2:5a:cb:94:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=1e2a40cd87f126b1af3002fd6e9538f346254086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:d1:2c:62:e6:5c:83:f6:0d:0f:1e:58:f2:d8:
                    3a:ce:87:93:84:ba:0f:c2:e0:5b:7b:b9:65:71:d3:
                    a5:16:3f:f4:ae:fd:32:42:8a:5d:2d:93:06:d2:bf:
                    c1:7f:2c:01:91:fb:8f:38:52:51:7f:b4:ce:34:09:
                    7a:87:b2:86:94:20:09:b2:c6:0b:d5:40:1a:40:32:
                    16:6b:b8:77:a3:a1:f7:aa:84:5e:f9:60:f3:d8:02:
                    6f:83:7c:a9:38:4c:dd:30:38:bf:db:0b:89:6a:27:
                    86:41:e2:fd:aa:54:a0:c5:9b:9e:a2:4a:f0:3d:31:
                    0f:c7:76:6b:eb:14:af:15:db:cc:dd:6c:49:93:a4:
                    ba:33:e7:c3:3d:de:0f:16:8c:22:af:84:4d:d3:7b:
                    3a:f5:39:b7:a0:c0:e4:7a:aa:0c:b6:9c:63:af:63:
                    fd:a3:b5:67:a4:41:54:06:f8:2f:76:83:23:a9:d0:
                    c8:e1:d4:b4:8c:70:bb:4a:69:60:e2:bb:9b:d7:c5:
                    b4:33:4e:60:c3:fe:63:5d:d3:61:3c:0b:e5:b4:15:
                    6f:73:83:4b:d8:05:a0:c1:61:84:a3:2a:48:68:79:
                    80:e8:43:17:27:4b:bc:06:0b:24:47:2d:60:9f:00:
                    ce:a0:70:20:c4:ac:a7:4b:4d:b8:98:d1:fa:09:0f:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2A:40:CD:87:F1:26:B1:AF:30:02:FD:6E:95:38:F3:46:25:40:86
            X509v3 Authority Key Identifier:
                keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a5:ac:91:7e:e7:9f:20:b2:58:f5:d0:01:b0:70:05:e0:b5:
         15:5e:9b:0e:e2:ef:bc:65:a4:f1:33:4c:96:02:dc:72:c4:ce:
         0d:0a:00:12:16:ab:34:4e:1b:03:b0:e4:36:76:6f:05:bb:78:
         1e:62:2d:18:34:e2:13:68:41:44:3b:12:63:fc:e6:c1:3e:a7:
         cb:47:07:7b:9e:cb:44:7a:8d:17:db:c4:93:14:a6:53:eb:70:
         d3:54:11:64:d0:c5:1e:14:7c:d8:38:e2:32:4a:4c:01:ca:6f:
         c4:40:e6:c6:dc:31:7c:44:c8:7d:3e:71:84:60:fa:4b:a9:a9:
         d9:b0:8e:7a:7e:49:cd:7e:99:eb:bf:2a:18:52:fd:63:65:96:
         37:f9:fb:03:4c:17:6e:f0:dc:25:c2:f0:67:12:95:cb:e9:32:
         db:f7:88:18:d9:e1:d6:84:4a:da:b7:d5:a7:db:c1:d3:2e:98:
         da:db:81:65:4d:57:b8:71:bb:43:bf:48:f4:88:1f:f7:9f:3f:
         61:00:d0:89:35:ed:7e:40:a8:e3:d0:71:55:b1:61:14:13:77:
         ac:05:ee:90:60:f8:a1:2c:08:81:ec:77:d4:2c:4e:6c:b1:19:
         99:e9:d7:1d:11:e3:4a:4f:de:1b:23:3c:ff:29:85:75:ab:78:
         42:3e:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----