Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
File:                     wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json)
Hash identifier:          1smELLhvG5BDjBvLzITOaSlYWLJzNDXINHWS+6CnbNQ=
Subject key identifier:   01:A3:72:B7:6B:61:85:4A:58:B3:45:B5:02:54:C7:89:3E:AF:EF:C9
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Certificate issuer:       /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial:       01962F74695835BE38F2107B61F4C9E8C0EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: W8B6JpeA62O4LQBxq0BFKb3lCFD2IXhclfavCNn14P0=)
                          2: xBCmHDQdfHeyTzhklHfbHAtEjac.roa (hash: v4hxG9/eDV05pt8qFpOVheOZJs0ehEmajsKsd5Fgmbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:69:58:35:be:38:f2:10:7b:61:f4:c9:e8:c0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=01a372b76b61854a58b345b50254c7893eafefc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:b4:a3:9f:5a:c0:30:f4:de:3d:25:af:c4:
                    e4:d5:04:09:c6:dc:ae:2f:6b:ff:32:8d:2d:67:99:
                    dd:7a:b8:f8:7a:d0:de:bd:9f:41:ef:de:11:97:c8:
                    f0:f0:0a:cc:ee:13:3f:38:33:99:53:7e:09:2f:b7:
                    ce:b2:e3:5f:a1:2e:1c:95:97:c6:7c:3b:56:df:4b:
                    75:1a:44:ee:37:e9:ae:4e:db:2a:d2:c0:57:9d:f6:
                    98:d8:21:86:bd:5b:61:01:f6:24:b3:da:cc:49:24:
                    a2:41:01:df:0c:8c:6a:c7:b7:c3:a6:52:c5:b7:6d:
                    f7:6d:54:e3:df:17:b9:63:ca:12:26:c7:5d:8e:a9:
                    1d:f1:6a:55:ec:95:63:21:39:5e:7a:d2:92:f8:fe:
                    54:3e:f5:83:b7:d6:b2:1d:b9:15:01:f0:8a:98:82:
                    59:e4:27:a7:d9:3d:16:32:95:f0:7f:76:ef:56:03:
                    a7:96:3b:a6:f4:8c:67:e5:01:52:bd:78:49:1d:45:
                    ee:92:8a:c5:fe:ab:00:b4:ca:7b:61:ee:c5:35:ef:
                    5b:1a:f4:b2:5d:5d:52:d7:d2:69:d6:69:f1:3d:79:
                    1c:0f:45:f1:c6:c7:f6:fa:93:80:31:ea:0f:3c:b0:
                    cb:c0:ad:d4:df:e6:b7:39:1f:82:f4:93:08:90:11:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:72:B7:6B:61:85:4A:58:B3:45:B5:02:54:C7:89:3E:AF:EF:C9
            X509v3 Authority Key Identifier:
                keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4f:28:ce:62:b7:b1:59:32:c9:3d:5d:8e:bb:4f:d9:70:f5:
         ff:36:b0:28:5c:89:a6:06:cb:17:0f:67:ff:97:c8:a0:75:8e:
         eb:d4:fe:37:70:69:80:a6:7b:1b:11:72:3a:2b:8f:97:ab:fa:
         f0:2d:19:6b:69:03:f4:ae:95:cc:00:71:18:f7:00:b4:eb:f6:
         79:00:46:18:93:5c:d1:86:0f:60:42:e2:5a:7e:ef:83:f2:39:
         87:52:73:8a:b1:54:2a:6e:9c:19:d8:61:f0:c0:5f:a7:3f:62:
         db:7f:fc:aa:49:36:01:33:4d:f8:ee:0c:7c:74:2c:a0:b8:77:
         2d:60:b4:98:d7:2a:34:b2:af:1e:57:bf:a9:71:1a:4e:51:b0:
         57:4d:dd:ce:7e:55:24:1b:8a:d6:c3:ad:41:cc:0d:57:c3:83:
         78:ce:63:9b:95:e3:16:26:b1:83:0c:4d:a4:58:5c:cb:ec:3b:
         8c:8d:90:da:13:3a:f3:26:83:2f:db:87:72:5d:cc:08:aa:cd:
         4b:52:fb:19:01:fd:51:03:1b:ef:12:98:de:65:db:98:3d:32:
         fe:d4:25:b9:86:3c:08:58:04:df:95:12:87:fd:ac:91:f3:90:
         0c:3a:42:35:c2:74:d2:9c:bd:bb:41:0c:d2:30:85:86:95:8e:
         4e:a2:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----