Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File:                     wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier:          ZOp1X8tVUbuOh89RcGLaJ/YbpISys4B22EqBOsRs7Qk=
Subject key identifier:   30:20:0C:9B:8F:74:59:1B:39:2D:3C:1D:93:B5:08:93:19:FB:A3:F5
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer:       /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial:       01962DF401EB94E17DAE5E37468630D2840C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number:          0805
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=)
                          2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: 0mR6rXKHxo+h3JhLS3VxqH2Vu1j5H+QZ8LfWiKuMkUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:01:eb:94:e1:7d:ae:5e:37:46:86:30:d2:84:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=30200c9b8f74591b392d3c1d93b5089319fba3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:b7:ad:1c:ae:f5:7c:5a:25:69:c7:72:1c:
                    f0:82:9d:f7:96:9c:e7:9e:08:88:63:05:fb:40:c6:
                    82:35:22:99:68:33:b5:a1:f4:1d:45:57:1d:04:71:
                    b0:3f:42:01:3b:09:6a:c1:2e:f6:06:9e:ca:6a:23:
                    14:65:f8:db:5d:0d:19:5d:c9:0e:79:93:e1:f7:64:
                    2d:53:c8:dc:ab:bc:09:97:b9:e6:66:b0:4e:7b:9d:
                    f7:9d:d2:89:3e:36:d4:fe:8c:7b:ce:ff:b3:b3:d3:
                    b2:3a:d0:c3:0b:66:43:0b:6c:90:f7:d8:00:85:1d:
                    10:43:ec:29:d8:d8:71:8d:be:7f:57:29:c8:68:b0:
                    1b:c0:fa:9e:84:91:64:d5:68:71:cf:10:5e:05:50:
                    36:e3:08:f9:54:4a:e3:55:ea:ac:90:cc:df:b6:53:
                    ab:9a:3a:02:a8:5d:1d:5d:13:15:5c:4b:0e:74:d8:
                    c0:6b:40:3f:be:ac:0e:da:5e:ce:3b:e6:db:d7:35:
                    b1:49:0c:39:69:25:91:0b:8e:17:8d:db:dd:d4:7d:
                    bd:dd:b8:dc:f8:10:5e:86:29:d0:d5:ba:89:51:73:
                    7e:2a:e0:5d:93:92:6b:fc:45:74:d5:02:fa:60:53:
                    94:4f:6f:62:13:ae:b3:9f:32:30:48:5b:a5:41:1f:
                    a2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:20:0C:9B:8F:74:59:1B:39:2D:3C:1D:93:B5:08:93:19:FB:A3:F5
            X509v3 Authority Key Identifier:
                keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0c:8d:13:10:c3:fa:02:3a:ff:31:11:b1:54:ce:4d:e5:22:
         0f:65:c0:77:b4:67:69:0e:fa:e0:d9:15:e8:1d:6b:e2:bd:b3:
         09:6d:8a:98:8d:0c:fb:88:f2:63:63:22:d6:a9:42:63:80:d6:
         4e:4c:3f:f7:27:63:f8:55:50:49:2a:f3:db:cb:98:15:8f:16:
         44:49:14:f5:20:f6:70:2d:98:86:91:54:de:b4:e2:a1:a3:24:
         d4:41:ad:25:e8:7d:b9:c4:4e:5f:2a:a0:80:d1:0b:5a:68:d2:
         7b:39:35:54:d8:94:e2:d3:40:f8:45:25:b8:37:5e:37:7d:bb:
         57:e1:e3:ec:7c:d1:03:c7:ed:0f:23:09:ec:7b:fb:c3:2a:ef:
         29:2f:6e:7c:34:a5:ac:45:58:6b:8a:6c:0e:e8:aa:ca:e0:75:
         a6:7a:1d:f9:bd:dd:5a:e6:a9:9e:b5:08:d9:5d:74:82:c9:b6:
         94:2c:df:4c:36:40:9f:c2:4d:b4:05:ee:89:4f:64:78:ca:06:
         4c:d9:6e:47:1e:f6:f5:c5:96:5b:5d:3b:5f:6a:ff:32:e6:e0:
         82:79:7b:28:26:0e:fa:89:e7:bf:ad:c6:34:ac:bd:da:6a:0d:
         f3:5a:3f:2d:f9:e9:3f:38:bf:b9:45:17:46:d3:2e:61:49:5f:
         a1:09:5c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----