Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File:                     wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier:          rDjKBbPTWT3k8LMGC4ML+F00BMoXfTkorH+iYvP7yig=
Subject key identifier:   1C:68:FA:3B:6C:9A:A6:2A:7A:69:CD:0B:3B:BA:87:FD:99:44:6C:A3
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer:       /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial:       01962F3DB568AA7F96D140F61613F9FD0158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: aU__37kt8ckO_YJQdDxx1zfJXr4.roa (hash: G2q1R6crWsWgIzSolrfZ7On3iNyzuy0vug1zXtUIFQY=)
                          2: ahMDGxNyecqlZxcgrlYmGrrq9pU.roa (hash: h30GXSYF139afkSTNjFaEpPAUr9XbrAvQRMhITWnZY8=)
                          3: mIknYG3WTBISQkb0avBlTMQBHO0.roa (hash: iFjLxQXc/Bjp4mKvj7ItM6hlDfEhly4nMW0gLz+f1Fc=)
                          4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: HF7E2Y/FmZMBDQOIMPy51RqmJIBAIZQ05SPw9r6JdSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b5:68:aa:7f:96:d1:40:f6:16:13:f9:fd:01:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=1c68fa3b6c9aa62a7a69cd0b3bba87fd99446ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:40:68:c3:0f:e3:43:37:63:88:d3:c9:c1:
                    9d:92:36:b4:f0:11:68:7f:f8:0f:63:c4:b1:6a:a2:
                    51:f5:14:4a:30:5e:25:bb:fa:44:37:0f:02:0f:f7:
                    27:1c:dc:1d:4a:b2:b3:79:3d:90:9f:5c:d5:b1:61:
                    ac:2c:dc:38:2e:63:40:21:da:31:76:09:e8:c9:42:
                    01:08:5d:f6:e2:00:ec:42:fd:56:a7:48:39:90:36:
                    5a:25:d8:03:6c:a1:3b:eb:16:f6:8a:20:2c:8a:19:
                    60:a5:b3:89:eb:6d:9c:b6:be:f6:6e:e9:66:07:b0:
                    78:48:8a:90:7b:6e:ca:8a:44:8d:cc:33:48:94:9a:
                    16:4b:73:a6:2f:c7:21:41:71:3e:96:0d:c3:39:c6:
                    01:42:36:68:12:2a:67:07:ca:19:c4:75:58:b9:62:
                    13:4f:58:5e:ad:2f:62:af:7d:cb:41:14:0a:1c:75:
                    1a:9d:cf:0d:d2:71:12:e4:d7:49:25:6f:da:53:41:
                    18:d5:5a:8c:0e:d9:e7:d2:23:f9:e8:a5:d8:89:44:
                    12:26:50:3a:cf:82:22:f2:02:c5:b2:b8:fa:6c:ac:
                    4d:ad:d6:be:16:61:96:c4:ca:70:70:6a:e8:f2:1f:
                    57:bf:1a:91:d1:cc:cb:18:ac:23:08:86:8e:28:68:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:68:FA:3B:6C:9A:A6:2A:7A:69:CD:0B:3B:BA:87:FD:99:44:6C:A3
            X509v3 Authority Key Identifier:
                keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:21:15:00:66:67:d3:e3:bf:ef:97:f7:2e:1e:db:44:fd:27:
         6f:d8:ba:07:1b:19:dc:69:cf:f2:cd:34:f1:6c:84:61:96:e4:
         2a:6a:91:9b:56:18:d9:e4:c1:11:49:fa:cd:a6:10:a6:8f:58:
         ba:c0:6c:82:11:fb:97:3e:ed:95:32:11:4c:1d:0a:1e:24:e5:
         cf:a9:66:fd:db:4d:37:eb:58:a0:bf:85:24:ae:5a:2c:b6:26:
         81:65:d4:c5:97:68:a9:4c:b8:da:ce:d5:72:0d:b9:ad:05:87:
         73:c7:1e:58:fc:b9:a6:40:b4:67:85:8e:ae:16:94:0e:24:61:
         a4:0e:c2:d8:d3:e1:44:b2:24:d5:84:e0:a6:5f:55:8d:4b:46:
         55:91:8e:4d:0e:d3:54:47:4c:4d:d0:35:43:81:27:08:04:ac:
         69:32:e8:41:f9:96:13:51:10:b4:a8:fe:db:c4:f4:dc:f8:ac:
         2e:d5:bf:80:05:2c:93:22:dc:68:1f:9a:1a:13:9d:fa:db:dc:
         8f:c4:44:8b:18:e0:da:58:da:38:c4:2f:06:24:d6:2a:72:da:
         1d:38:13:5a:ce:41:fa:72:4c:c4:cc:f0:56:d9:3f:a5:04:bf:
         af:cc:46:2b:a7:d7:55:9d:73:56:dc:d1:91:91:be:a8:2a:5a:
         ad:eb:a2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----