Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File:                     wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier:          jGJ3FmYi6rb80HOCySzPMFXGtc226/Ldz8kJmyn/lh4=
Subject key identifier:   F8:5A:0D:3D:55:C3:98:28:6E:83:BC:FA:B8:18:85:8C:29:C3:23:28
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer:       /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial:       01962F745E7950BDE7F4956AA1F166C764BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number:          043E
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: irXVQKZrZFERT0qlEvOEYo8eStU.roa (hash: SM6wGE9/EVXEBgUTm1zsTO58ye4c68Xl+iOGBhNr7JE=)
                          2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: w+eCqdvRs59XTELqL/vWMpPPT3DExeVN3jAczBxLufk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5e:79:50:bd:e7:f4:95:6a:a1:f1:66:c7:64:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=f85a0d3d55c398286e83bcfab818858c29c32328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:2b:df:3c:a0:c3:7b:ab:da:9c:16:08:cc:
                    77:b6:bc:81:cc:11:42:8d:38:e6:f3:fd:e7:d4:f2:
                    14:54:9d:32:ae:d4:34:ac:76:31:49:3c:de:0d:5c:
                    1a:09:f4:a7:90:91:73:0d:93:e9:45:cd:31:6f:f2:
                    16:be:cc:1d:9e:a5:88:71:ed:66:ab:36:a8:f2:30:
                    88:6b:ac:3e:b8:2f:6f:10:63:03:83:e8:e2:a5:9f:
                    89:83:2b:d3:8e:20:6a:a8:cb:66:54:c4:3c:32:7b:
                    bc:7e:6a:ee:2e:0a:ca:64:70:a5:ae:63:d2:0c:a5:
                    1a:a0:8d:06:44:ae:8a:c5:28:82:a8:a4:09:ef:00:
                    3f:e4:51:f2:24:9e:7c:87:9b:62:e7:1a:f5:b9:d7:
                    72:9b:64:f4:5d:02:85:a8:15:e9:4a:c8:49:2f:2b:
                    ca:15:07:4b:e0:a3:79:10:d9:30:f2:8d:58:70:5b:
                    e5:60:55:a6:2a:23:fb:de:38:56:13:d0:18:6a:71:
                    71:e0:38:11:1c:6a:94:be:7e:ce:39:97:81:57:ff:
                    5f:11:b8:11:1a:ce:a4:ea:f9:09:1d:bb:e8:dc:f2:
                    4b:f2:31:dc:5b:04:d9:8f:12:d9:76:f1:4e:ce:d1:
                    61:af:62:1a:7d:4c:c8:10:f7:a9:39:9d:92:87:a5:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5A:0D:3D:55:C3:98:28:6E:83:BC:FA:B8:18:85:8C:29:C3:23:28
            X509v3 Authority Key Identifier:
                keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:03:6a:21:90:d9:09:c0:d1:3c:99:bb:4e:84:98:3b:15:49:
         97:04:ac:1a:01:9a:d6:8b:e3:8c:80:82:84:f9:0e:5d:b9:0a:
         35:ff:b3:20:96:91:6a:50:9d:6d:95:be:b0:e3:ed:0d:34:c2:
         81:38:89:f8:b1:a0:5a:04:81:4f:0b:83:2e:29:39:d4:7e:61:
         e7:77:a8:6a:82:7c:94:be:ee:00:5c:f0:f6:7f:cf:74:01:c1:
         4e:25:fc:a3:b5:04:6a:dc:1a:d5:1a:6a:54:e9:0d:d1:fb:ed:
         9c:2f:09:97:c9:86:81:d6:2e:46:fc:7d:9d:e9:80:20:98:01:
         b7:62:f0:67:03:62:19:bc:60:5c:c7:34:c9:f1:91:ed:1e:46:
         8e:5e:26:49:10:dc:71:22:f2:9c:b7:da:6d:8a:12:77:43:27:
         83:1b:31:f7:c2:25:98:e1:50:a0:86:4b:8c:b7:08:e6:10:14:
         58:33:59:2e:11:f5:66:99:0d:53:e9:96:da:67:d3:7d:9b:79:
         e6:01:81:86:72:b3:03:93:2a:9e:c5:f9:4d:e5:0e:13:ea:a1:
         c7:fa:29:78:8f:61:82:2b:e6:0b:0f:1d:ac:c9:90:4b:ef:fc:
         69:15:b2:e4:be:4b:f8:7e:37:8f:f1:32:70:ac:3f:96:56:7d:
         64:ae:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----