Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          RxLzKxxOtmKa+utIwcKMexfPxGvz2/b14gh5ZBhDUDY=
Subject key identifier:   57:1D:B8:94:34:31:AD:AD:CC:31:D1:1A:32:E2:72:BF:98:BC:41:A6
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       01962F74631A43AEB9CEA797CEBD49FEB502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          0F63
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: 0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa (hash: dfbeFrG20UF3jAoNCZUQnOLXn1JG2r7gMGzts7DU6SI=)
                          2: 4AZZgr-FtZ5C7UeruxhpUjmqfpQ.roa (hash: 1LrkJHOzTguh6JvPCNh6V6i/J0BR7h6wEY/GDxBjoTQ=)
                          3: Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa (hash: mF6vNbBQIU1GWKkIg2h8rHabqCIgbySUD4lzazj7BZI=)
                          4: L1zaQrOyYMyhb-vjYsccEQ0rOGs.roa (hash: h8hWAA3iPsZGpLorxG9VKCzAf/rtjUUbjPF4osJaSgE=)
                          5: mpKpYmY8DEGhZcV6ltJDz93teq8.roa (hash: 7UANVEML/0vRWe4hxTYzTFGxeQ0U+2SuSQ0y29OV6fo=)
                          6: pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa (hash: rx92LY3LSKSOciZBDpqfQO1j0HB6jcKddcqiSbdXBt8=)
                          7: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: cdbSytHrGXahd6G3eYd7kPqp/5TfLdLyXK5S/TatvEo=)
                          8: zlP9_orrw6aHHSv7bATBUkhqiRA.roa (hash: NvMCHUJ14Lp9H+mYdu1xuY40BR4qWMQHtDYR2W3Odek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:63:1a:43:ae:b9:ce:a7:97:ce:bd:49:fe:b5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=571db8943431adadcc31d11a32e272bf98bc41a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:eb:de:b2:d1:29:fd:13:44:59:de:dd:c4:
                    00:d6:82:51:e5:cd:1a:9c:2b:64:c9:d8:a7:84:07:
                    71:c1:8a:38:16:e5:1e:64:ac:40:27:2c:53:07:03:
                    c2:37:5e:41:c5:3e:e7:d1:c8:f5:8c:7c:95:47:03:
                    f4:85:2f:e6:f5:bd:68:09:dd:b5:10:4e:6b:46:7c:
                    39:24:09:b1:a4:a9:ea:55:65:0e:97:1b:88:12:09:
                    23:33:7f:bd:45:4e:51:88:62:e1:c5:fd:36:0b:60:
                    32:70:40:e9:96:c6:01:d3:8c:be:05:ec:a5:6f:1b:
                    95:71:1a:83:46:29:d1:25:00:cc:49:74:2b:6c:7a:
                    f4:d8:d0:97:8d:a6:e7:ac:d4:15:61:6a:0c:ab:63:
                    d6:8b:11:83:52:ca:00:f2:b6:ac:1d:82:72:07:8a:
                    ae:3c:75:31:1e:20:1e:65:0b:e3:56:25:74:c1:a6:
                    08:5d:04:7e:f8:d5:9f:13:1b:96:f0:3d:9d:33:94:
                    bb:94:73:5f:66:af:e2:25:c9:1d:49:f0:73:cd:b8:
                    85:d1:da:ca:9b:88:07:8b:9a:22:17:29:45:45:4b:
                    d3:5e:f3:d8:d9:38:3b:59:41:8b:d9:be:c7:ed:cd:
                    bd:51:fa:f2:51:85:44:01:43:cd:b8:9b:22:b6:fb:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1D:B8:94:34:31:AD:AD:CC:31:D1:1A:32:E2:72:BF:98:BC:41:A6
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:47:fa:c8:7d:0d:76:e8:99:92:48:57:0b:56:37:fe:b6:a7:
         83:6c:1b:4a:a7:81:e3:4d:e4:ff:46:9d:1b:fc:18:53:33:78:
         a0:e5:08:dd:63:f1:fd:1c:1d:c5:d8:4a:52:47:a5:c3:f1:e8:
         45:57:1b:1b:5b:20:ab:2c:73:71:95:1e:ec:53:d0:9c:db:de:
         a0:8f:d4:f3:41:08:58:af:4e:f3:b0:cb:a1:9c:91:ea:c2:0c:
         fe:6f:17:41:20:d4:88:65:6e:ad:8c:97:3a:ca:5a:03:4f:d5:
         83:64:32:eb:8a:f6:a9:cf:27:14:85:05:e8:e6:10:50:64:15:
         d3:9b:30:d8:3a:f5:3d:b1:2e:c8:e4:60:48:6c:80:8f:be:5b:
         0b:bc:ea:32:45:c1:ba:d3:12:58:53:c7:77:9d:c1:12:b9:e1:
         34:32:10:d0:23:9e:27:b8:12:92:4f:4d:c4:7c:25:d8:21:ad:
         be:c9:ec:1b:e2:ee:bb:92:61:27:27:d9:a7:32:01:c4:75:4f:
         88:72:b2:6e:40:99:d0:03:d9:79:e7:45:7b:56:e6:79:c0:20:
         03:e2:f1:5d:d5:87:62:71:4d:ed:52:64:b7:fb:ae:26:17:6a:
         33:ee:20:c7:43:ec:53:91:37:32:b0:52:91:12:46:5f:5e:52:
         30:50:06:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----