Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File:                     wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier:          SfIJDzc2+O1O+B3odx1AVnCQklrzyb6lVqC3U7PPdpk=
Subject key identifier:   E8:06:0E:B7:85:75:C8:6A:F0:0E:9C:54:42:32:80:45:ED:8A:AB:AC
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer:       /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial:       01962ECF6032F1FD0AB89423F416635B32AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number:          0B2F
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (hash: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=)
                          2: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (hash: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=)
                          3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: HWh7nE9An6mtrFK7WPgSUkJbeSA9yQP7fS/ss1alhPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:60:32:f1:fd:0a:b8:94:23:f4:16:63:5b:32:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=e8060eb78575c86af00e9c5442328045ed8aabac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:64:43:fb:1b:ee:81:46:f8:a7:66:4d:73:
                    c1:82:3f:40:55:f7:b3:ee:b7:bd:b1:2f:73:6a:2a:
                    37:ab:dc:3c:f7:b7:8d:a5:ec:31:93:93:92:5d:d8:
                    32:de:6e:77:ec:f6:19:a2:4b:e5:eb:c5:6c:b6:d2:
                    3a:97:20:4b:b5:79:6b:80:97:fe:03:b7:10:2c:7b:
                    e4:b7:11:50:95:7c:e8:92:26:4d:67:1c:29:40:0d:
                    2b:68:44:3c:5d:65:4b:f9:9d:27:05:1b:82:61:9a:
                    ed:bd:4a:65:41:10:61:5d:9c:80:ef:cc:a1:25:bc:
                    44:a2:99:52:c2:ce:47:84:8d:87:d0:1d:69:1e:df:
                    0f:0d:ee:23:3f:83:02:e2:c8:dc:c6:05:0e:2a:e1:
                    1e:b6:d2:04:11:a9:9b:3f:5a:f6:f3:83:3c:db:0d:
                    0d:62:69:25:2f:6a:26:90:aa:41:4e:3c:76:9f:ee:
                    21:c0:54:da:6b:a6:94:5f:0d:82:48:4f:98:e5:30:
                    3e:82:63:1f:e0:be:81:c2:4a:1c:0f:68:1b:85:97:
                    78:d3:7f:e3:5b:07:20:1d:8b:f5:3d:39:0b:83:6d:
                    29:42:a1:89:ba:6b:87:cf:bc:9f:1e:a4:73:cf:b2:
                    e9:dd:f3:2e:52:97:97:14:73:33:d5:9f:5b:db:21:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:06:0E:B7:85:75:C8:6A:F0:0E:9C:54:42:32:80:45:ED:8A:AB:AC
            X509v3 Authority Key Identifier:
                keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8d:f4:2f:d4:a8:5f:5f:40:ad:9f:bf:e0:39:db:b0:39:cf:
         47:fe:e6:e9:e4:81:28:31:7b:02:42:21:9d:dc:71:d9:b6:52:
         ba:12:9d:de:da:03:67:3c:dd:0f:f9:42:2f:71:3e:b1:c7:69:
         38:b9:e0:a0:ab:88:2c:85:d0:12:af:ee:27:01:05:17:97:17:
         f1:f3:bb:6a:4a:35:b0:a5:66:55:5b:77:05:f3:d2:c5:77:a4:
         83:0e:79:fd:15:dd:85:b8:d9:53:cf:4b:43:33:27:30:ac:01:
         ef:f6:34:60:25:cd:66:f5:ab:6a:20:8b:fc:a8:d4:f3:e3:3d:
         5d:c7:0a:85:14:59:15:61:a7:58:f3:71:55:b7:04:b2:79:80:
         14:67:2d:b2:f3:9c:64:9a:cc:39:68:6b:ce:16:25:26:16:3b:
         6d:f3:62:c8:18:02:69:32:1a:ae:26:eb:1a:a2:01:d7:26:34:
         95:d9:7c:9d:9e:a0:98:35:6e:08:31:21:d6:f0:d3:10:8e:79:
         25:9d:99:d0:6e:bd:b2:28:02:fa:c1:d3:a4:fe:b1:53:e5:a6:
         93:a4:7f:dd:fb:ac:ba:6b:28:86:3a:69:6d:5e:06:f6:e1:b0:
         40:3a:c9:d7:f9:c5:b9:e6:0e:8b:d9:f0:23:b7:e0:59:7c:63:
         5b:bd:ab:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----