Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
File:                     wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json)
Hash identifier:          ishB1gY4ZuOsOX5wDdpfxC+ATy/PrTkk5QgIIrWRV/k=
Subject key identifier:   83:E8:B8:66:42:9E:BA:A6:10:8D:99:C0:A9:FC:AE:55:AB:98:1C:BA
Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
Certificate issuer:       /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Certificate serial:       01962F3D76D0B7B3C5CBD9533FAB60B60384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
Manifest number:          B1
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: shq45UEehLHlmhOeyI4UV2c2u0c.roa (hash: m82S0LKa4u++R6z0pfw1er3BwvIyylTnAWkb4EmiNoE=)
                          2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: 5pCcWK2b3rZazM3/87XHXIosEApuCkDcMmTr/wcfX4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:76:d0:b7:b3:c5:cb:d9:53:3f:ab:60:b6:03:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=83e8b866429ebaa6108d99c0a9fcae55ab981cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:b7:a5:ca:70:c2:ef:ba:ee:82:04:be:8a:
                    e7:4d:f5:a5:6b:ec:da:ac:7a:80:bb:46:e0:b4:65:
                    28:05:a8:be:8d:8f:5c:26:8a:ab:1e:2f:98:c8:12:
                    dc:ec:a5:43:c1:4f:30:94:3e:9d:0b:10:e0:dc:33:
                    05:8c:37:fc:53:84:26:a0:46:32:1e:0d:50:da:9c:
                    83:f4:ba:c4:0e:61:26:c0:54:c5:6a:e1:ed:d9:02:
                    8b:58:8d:66:12:e3:39:99:a1:44:cd:aa:91:a7:23:
                    b6:ba:7f:4e:f7:e0:e4:ad:ff:6c:8f:69:c9:bb:d6:
                    14:ec:64:e6:38:a0:82:01:a5:57:67:8d:06:d2:b3:
                    6f:6a:31:20:57:35:01:9d:d9:06:4c:94:af:74:05:
                    27:24:59:b0:9d:e3:5b:1e:a0:d7:d9:e1:5a:f5:76:
                    4d:76:0f:b6:ae:4d:a4:f7:9d:48:cb:3f:e0:6c:52:
                    8f:53:de:02:1e:2d:47:1d:9f:8d:80:1b:2e:ec:c3:
                    36:60:14:b2:93:9c:94:70:7f:f4:0e:93:4a:70:90:
                    5e:c8:72:a6:ed:20:48:90:bb:69:37:a2:1f:ff:80:
                    99:ab:b9:18:a7:44:89:98:f3:20:21:b8:fb:c5:80:
                    98:a8:4e:98:68:d0:ce:f5:bd:ee:34:a4:30:37:98:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:B8:66:42:9E:BA:A6:10:8D:99:C0:A9:FC:AE:55:AB:98:1C:BA
            X509v3 Authority Key Identifier:
                keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:5a:03:74:d0:4d:14:7b:2c:82:69:7a:a8:34:7e:ee:40:f4:
         92:5a:7d:ac:ab:86:12:f0:4a:8e:71:30:c4:3f:44:5f:64:5f:
         c9:50:58:95:76:64:14:f1:bc:45:3a:73:97:3a:74:8e:ac:66:
         fc:4e:2a:06:67:b7:10:1c:59:26:ee:3a:ca:cb:56:f6:f5:1b:
         90:be:b2:7c:af:f9:97:28:4d:89:78:57:e6:82:88:ec:4b:0d:
         e1:a1:26:88:0f:36:fa:4b:83:2d:ee:1f:b4:6e:3d:d9:f5:37:
         06:70:4b:35:13:80:ad:77:1d:3f:4a:11:d6:69:f7:8b:1b:0f:
         4f:59:92:30:d2:8b:ec:8a:3a:cf:73:99:1a:24:c5:bd:04:ee:
         20:c6:1b:51:22:a9:00:c5:80:cd:4c:65:93:81:84:2b:83:93:
         6b:d0:1f:85:26:29:48:00:66:04:ca:3d:41:c0:91:8a:3f:4f:
         fb:9a:d1:de:09:dd:99:7b:d5:a6:72:91:d0:1e:a6:8d:7e:d7:
         2b:e4:4d:0b:bf:64:e3:70:2e:4c:00:40:d2:c6:23:fa:9b:e0:
         98:8a:b3:cd:fa:46:66:97:b9:53:fb:a7:92:92:d8:5c:94:b1:
         06:6b:41:71:dc:2b:ff:30:be:0c:d2:d2:4a:3a:76:5d:b7:90:
         12:cd:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----