Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
File:                     wHgEdmsjU5hblxgIi1xnngw-pn8.mft (raw, json)
Hash identifier:          RYMfp2Zl46cto84b9Bss75sVPwNhBJpSGK5qvLFgjAY=
Subject key identifier:   8A:6E:51:DF:8C:A1:72:C5:59:26:B4:17:C7:B1:71:54:36:AC:CA:2E
Authority key identifier: C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
Certificate issuer:       /CN=c07804766b2353985b9718088b5c679e0c3ea67f
Certificate serial:       01962DF40BD9BD237D859BC38666AABBC7E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: JQloxPoQ9afiJp-IoXzHvRWMpm4.roa (hash: J8Wxq2Z9UXMMHjhsUvukCz7EJtE55wrWEedjgrBy+C4=)
                          2: wHgEdmsjU5hblxgIi1xnngw-pn8.crl (hash: pH2xvc6MJqSlJ3azdg2C9OAhxhaT3Hh3ycfR2wijuyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0b:d9:bd:23:7d:85:9b:c3:86:66:aa:bb:c7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07804766b2353985b9718088b5c679e0c3ea67f
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=8a6e51df8ca172c55926b417c7b1715436acca2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:b3:1e:5a:cb:b3:b7:15:f9:9c:41:27:7f:
                    60:84:ee:cc:c8:a9:f9:42:04:3b:ca:38:ca:89:f4:
                    7d:59:a6:8d:91:02:20:2b:b6:ab:1b:e2:f7:23:03:
                    26:9f:86:e5:58:30:76:44:ae:1f:25:a2:0a:de:84:
                    8d:46:0f:f0:b4:32:77:f6:2b:8c:8b:f1:50:58:07:
                    d6:3e:02:d6:f9:4a:21:42:f2:0f:ec:04:bf:e0:8e:
                    ad:c3:27:39:35:01:0a:69:5c:39:30:1a:d7:5d:2e:
                    86:20:cc:a7:dc:ee:b8:3e:bc:0a:1a:99:44:3e:39:
                    2a:f6:d9:20:03:b2:ee:d6:17:43:8e:54:83:1a:80:
                    c7:81:fd:a5:ea:1c:7a:fc:f5:dc:7e:c1:33:ea:ed:
                    8a:b2:87:15:c5:7e:b2:79:1b:ef:68:41:25:f6:b8:
                    b5:6e:a3:a8:21:f4:77:41:e5:b8:6b:56:ef:99:11:
                    28:68:16:e8:4c:16:10:88:dc:63:ec:a4:c5:6f:48:
                    c3:cb:1c:ff:2c:8a:1f:63:83:c9:3a:64:b1:c1:c6:
                    1a:51:27:df:e0:a0:71:f7:80:06:96:7b:f7:75:9a:
                    f6:41:dd:ae:6f:05:6e:2c:0f:8b:07:46:52:f6:c3:
                    fe:d3:00:a5:8f:90:67:90:0b:31:1e:82:4a:a9:b2:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6E:51:DF:8C:A1:72:C5:59:26:B4:17:C7:B1:71:54:36:AC:CA:2E
            X509v3 Authority Key Identifier:
                keyid:C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:a5:45:ed:ec:96:f6:8f:0b:c9:85:fe:8a:14:95:5c:12:
         bb:d6:27:58:5a:1f:25:0c:3f:f9:08:1b:27:08:64:39:1a:63:
         08:e3:5a:6d:b2:88:f4:07:28:d5:0e:55:82:48:59:9f:5b:ea:
         be:7a:f5:05:9b:ae:0b:a3:14:83:db:0e:33:72:0e:1a:5d:92:
         6d:7c:24:1b:13:37:71:35:eb:c0:6e:d5:81:a3:7b:0f:02:c3:
         44:e6:26:88:4d:a2:b6:bf:a1:77:f8:b8:b7:b3:00:ef:70:8b:
         d5:6c:23:64:61:ae:39:38:a4:ac:ef:34:de:2e:56:a6:e2:fc:
         0c:48:e1:f0:52:e4:35:a1:cd:c8:b4:b2:30:3d:fa:81:d9:6e:
         1a:2e:38:eb:b3:f8:81:48:7f:ea:0b:96:8e:df:1d:c9:be:d1:
         49:71:a2:83:7d:75:17:ef:0a:51:fc:0d:cf:75:13:8a:4a:ff:
         e9:34:a0:dc:ed:c2:07:69:45:1b:f6:0c:d4:f2:92:1d:12:74:
         4b:99:dd:32:b2:22:02:3f:93:7f:d5:d3:82:e9:4e:eb:22:2a:
         35:ef:d6:38:79:3f:98:d3:07:96:49:5f:39:49:96:4b:a5:15:
         46:86:f8:40:40:75:69:81:c4:08:1a:34:23:b9:bf:cf:6a:49:
         9c:b1:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----