Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File:                     wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier:          i+2KzNfcfzc1MqVeuzDL4QAZqsNtErZhEiqTsLYjPco=
Subject key identifier:   7A:24:2E:65:68:0D:CA:EF:95:53:E1:73:94:FE:1C:56:E1:BE:DF:0F
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer:       /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial:       01962DF3CAA462442A6A3FF8A052E9F952B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
                          2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: KV5U1Y0DzUMGD/qKHY4t2LqdQf7GyAmd8AyX/JCsQ3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ca:a4:62:44:2a:6a:3f:f8:a0:52:e9:f9:52:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=7a242e65680dcaef9553e17394fe1c56e1bedf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:07:c8:54:de:d4:02:bc:44:7b:2e:f9:e1:
                    b5:07:49:58:5e:77:0f:7d:79:8a:83:b3:00:e6:66:
                    dc:a5:67:ed:c2:11:cf:af:fe:2b:a8:80:b9:58:e1:
                    b1:7d:24:41:0c:41:ea:b6:cd:29:eb:90:3c:8e:37:
                    f9:f7:13:9a:dd:1a:98:7c:66:c5:1c:10:4d:c6:93:
                    2d:cc:9e:f5:72:11:f4:5c:a7:cb:43:27:ed:fb:cb:
                    fd:4b:f6:43:51:76:2d:e3:de:0f:d5:dd:79:ef:ab:
                    20:ef:ac:44:83:ca:31:0d:44:ed:b7:fe:95:f0:2b:
                    55:17:47:5c:58:a1:66:3a:66:b7:ae:40:95:59:64:
                    73:ae:ba:5f:87:48:f4:1b:9c:27:b2:f6:9c:f4:bb:
                    27:50:93:38:de:c2:ef:ff:fe:19:08:4a:0e:82:9a:
                    5e:c6:97:61:db:00:13:ea:b9:bc:47:32:b6:18:e0:
                    c9:8a:ee:b2:8d:ce:34:43:0f:5b:2d:7a:6d:0d:03:
                    7b:a7:17:39:f0:3f:20:58:d2:54:e0:d4:14:0b:6f:
                    0d:f5:26:bc:a4:43:a2:5a:bf:74:3d:06:d7:64:2a:
                    e3:20:b4:cc:bf:15:72:de:46:20:e4:bb:ec:fb:ee:
                    37:58:29:ec:dd:e2:8a:96:d0:dd:c3:d9:f3:32:80:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:24:2E:65:68:0D:CA:EF:95:53:E1:73:94:FE:1C:56:E1:BE:DF:0F
            X509v3 Authority Key Identifier:
                keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:73:0c:46:54:5e:07:7c:9b:e7:a5:47:19:c6:88:38:7c:03:
         94:b1:60:b2:0f:f0:c9:09:53:7c:eb:a2:71:3e:95:34:e7:98:
         4f:a0:26:0c:c9:98:69:a7:a5:65:ec:fd:84:b6:0d:f5:4d:c6:
         b1:93:69:e3:b4:72:52:a3:4a:85:c0:75:13:5f:3f:a0:ec:6f:
         0b:c2:5b:57:3d:f1:ef:bb:5c:ec:c6:07:60:a9:40:34:0e:bf:
         f1:2b:73:5f:79:77:62:20:4b:e7:21:5c:5b:f9:2d:f7:c5:ff:
         08:d1:cb:02:97:7b:bc:72:c9:cc:64:00:ca:87:91:be:a4:75:
         5d:8e:27:54:37:de:fd:69:a5:e9:4e:01:17:2d:e4:ad:fd:86:
         d8:5c:79:cb:f0:36:9b:7b:5b:e7:52:c5:94:f1:f7:a8:8e:6b:
         12:b1:65:04:f4:03:a3:10:90:36:6d:ab:b1:2a:a5:36:81:83:
         85:9a:34:53:25:67:52:e1:6e:fc:84:f7:1f:36:b9:98:2e:f4:
         5d:d5:db:0f:fe:a5:f4:f7:bd:81:36:67:43:7d:f0:a5:9c:b3:
         71:0e:19:6e:d0:4f:4f:3b:66:de:cc:14:5a:61:cc:79:0e:a5:
         06:fa:71:f5:8c:30:a9:54:ae:d0:82:24:c1:af:71:ab:bb:0e:
         07:ee:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----