Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File:                     wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier:          E4b7f/tnTV3TVF18k+ZLuXk52i8ZrQEkXWQqYaYxP2w=
Subject key identifier:   FB:4C:E0:00:67:8F:AA:DE:92:DF:D1:36:F7:CF:2F:7F:AD:DF:B6:DE
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer:       /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial:       01962E991EAF02C54AE7A4ED05D7AC391C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=)
                          2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: g1hTxyIE4O0h2LaWDWffWh8oEMqG94UMvK/VUcHlEeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1e:af:02:c5:4a:e7:a4:ed:05:d7:ac:39:1c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=fb4ce000678faade92dfd136f7cf2f7faddfb6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:61:23:d8:f2:8a:ef:ac:e1:8e:9f:25:d1:
                    67:9d:e9:6e:d4:6c:2c:9e:39:cd:80:79:06:fa:e3:
                    15:32:cd:91:75:a3:d4:35:35:82:b6:7e:02:71:f7:
                    26:2b:76:de:8e:b9:de:4a:8d:6f:f2:6c:c8:d8:ac:
                    f2:e4:43:5e:85:b0:60:6a:a0:35:25:ee:94:27:75:
                    5f:d1:6c:03:dd:24:cd:55:68:c9:c3:28:cb:5d:04:
                    b7:9e:37:0b:f7:2f:36:35:4e:1d:81:55:16:f4:4f:
                    95:d3:a9:96:a7:bb:66:c4:31:ab:fb:fd:0f:9e:0d:
                    fa:ed:80:75:97:65:fb:57:c0:48:ff:32:a3:94:a9:
                    92:ba:43:97:b5:f2:d6:b9:8e:7a:70:05:c6:fc:57:
                    a0:db:09:77:a6:b4:23:d7:0b:e1:04:a2:b1:83:04:
                    1e:c4:1e:98:8d:e1:e4:fa:b1:d6:10:ca:87:58:1b:
                    5f:dd:9f:00:c0:fc:9f:fb:b2:9b:13:4e:92:10:e3:
                    0a:ca:35:66:c7:8b:19:e3:68:94:44:ce:1a:ba:38:
                    e6:67:cf:6f:21:06:64:a4:7b:6a:27:f9:bc:6c:11:
                    e6:82:45:70:6d:46:6c:3a:fa:a7:45:5a:e4:53:49:
                    c9:55:44:18:94:01:e3:b0:27:6b:ac:b7:bf:38:00:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4C:E0:00:67:8F:AA:DE:92:DF:D1:36:F7:CF:2F:7F:AD:DF:B6:DE
            X509v3 Authority Key Identifier:
                keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e1:ac:a1:3f:73:09:f5:53:9f:19:77:0b:23:1b:6a:bf:1d:
         25:53:31:a7:12:22:10:f0:0a:d9:91:db:15:fa:ea:c4:df:e9:
         5b:f6:f0:3f:10:27:ee:35:2c:7f:ac:b8:fb:5d:d9:fb:78:e5:
         96:08:37:8f:03:a0:65:d4:86:67:fd:1a:0b:c5:c8:38:2c:00:
         18:14:c6:78:1d:a2:e6:c2:c4:51:b5:43:89:db:9a:b1:c9:4a:
         27:74:f4:e1:52:b5:73:90:74:cb:3c:30:b3:18:0b:0b:95:d6:
         59:6e:9e:c9:59:72:40:90:da:0b:30:40:79:46:27:dc:38:2a:
         7d:58:93:a6:97:a4:2c:76:07:43:2e:e1:2b:45:7a:8a:2a:89:
         e9:25:26:df:92:ce:77:e7:87:7d:95:12:41:07:4d:5e:31:45:
         8f:5d:e4:ce:3c:0e:7d:66:d0:b1:e0:ca:22:f6:26:cd:b2:98:
         f5:9d:31:39:a0:09:bc:8e:7e:e9:b0:ff:9d:52:c9:00:28:74:
         ad:3c:48:e9:86:ec:ad:b5:43:a7:1b:f4:02:15:8b:4d:c5:43:
         c9:0e:9a:a9:b0:5e:7c:06:e2:b1:4c:da:7a:1d:43:6a:ad:d2:
         a3:44:0a:0c:4c:f6:fe:9c:26:e9:4f:d5:fa:7e:0b:04:ac:5d:
         aa:74:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----