Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File:                     wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier:          UOg2Ebs/DLLnToEkYTDPmKcac6teGLEFrlSkz/bRauc=
Subject key identifier:   B5:7C:38:E8:91:DB:82:26:95:6E:45:C5:33:AC:20:07:C4:C0:92:47
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer:       /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial:       01962F745228AC8C21F1C7B24F8782F1F5B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa (hash: b8veFauUO102FVzcJY91NJg1d1nr7MA++Qf08FQhoiA=)
                          2: UnNAY2Ug9GVCcRKfH683OrLARtI.roa (hash: ZNLzC1DICXd5qw96hU96BotIt+MMzxMspSwOQt7KMEQ=)
                          3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: 2O7To00UQIdGUjt+pq/bLRuIvKBgthoDcRvNa24vViY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:52:28:ac:8c:21:f1:c7:b2:4f:87:82:f1:f5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=b57c38e891db8226956e45c533ac2007c4c09247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:71:c4:4b:82:5f:68:9e:ea:0b:0b:6e:ec:
                    c7:62:34:28:d7:9f:14:ba:24:f4:96:0c:60:6d:6e:
                    d5:ae:e1:f3:40:b4:7a:2e:65:8b:9a:7a:36:52:82:
                    0a:52:06:65:e5:5d:c2:c9:b7:8f:aa:19:27:6d:63:
                    41:44:f5:24:f2:a0:f9:d7:5c:e3:a4:02:48:5f:7c:
                    a3:a7:ce:9e:98:e3:84:89:e1:29:72:0b:92:60:91:
                    da:2d:ac:5d:3c:f0:99:2d:dc:e1:f4:c1:e3:79:2c:
                    b6:07:69:9c:e3:aa:27:16:7f:cf:fa:55:a3:d6:0a:
                    02:a1:d6:21:be:5c:df:b4:de:e1:f0:64:08:20:1b:
                    f7:1e:d5:ed:26:b0:b6:8a:be:6d:b6:7a:a2:65:d7:
                    29:22:74:ea:d4:2c:ce:4d:d3:37:80:d7:97:0f:d6:
                    91:f5:a0:99:ac:4c:bc:df:a1:92:22:a4:42:ca:f2:
                    05:e8:5b:6c:d8:08:77:5e:f4:a3:cf:d9:32:93:23:
                    d1:87:47:95:92:4b:0f:ef:74:ff:86:97:b9:6a:a0:
                    fa:c4:c0:ed:f7:25:42:fc:33:6f:5f:06:66:85:62:
                    0b:dc:a4:43:8f:55:93:a9:93:3c:9d:40:d6:ba:b9:
                    fa:64:bb:7e:ed:54:d2:22:be:8d:58:d3:43:51:f6:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7C:38:E8:91:DB:82:26:95:6E:45:C5:33:AC:20:07:C4:C0:92:47
            X509v3 Authority Key Identifier:
                keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:63:a4:38:5c:b7:87:e0:3b:65:31:32:f7:8e:18:c4:57:0c:
         bd:4f:aa:47:9e:a6:16:73:93:f8:0d:55:b4:4e:9b:91:0f:0d:
         d2:27:84:f3:03:f6:85:2c:35:90:95:71:ea:7b:c6:69:89:4e:
         04:6d:a6:57:2f:f8:2e:7a:82:5a:f0:b4:aa:65:c0:db:71:b0:
         21:fa:9c:d9:cb:6b:17:13:6e:29:83:02:60:51:50:46:e7:ce:
         23:b2:f1:f3:9c:e6:5f:22:f6:2f:90:14:d0:29:d0:91:a2:2a:
         39:58:4e:9d:db:ba:6c:42:de:6a:96:ed:b5:ac:0a:68:de:34:
         e3:bf:be:b1:89:a6:33:c3:69:f1:c9:c1:14:6b:75:e1:0a:16:
         c7:cd:b8:a2:7f:bc:c7:ec:69:00:9c:c2:e2:f1:0c:90:ae:a7:
         95:e2:fd:77:50:53:01:20:7a:5a:20:2c:09:87:f9:34:5f:22:
         ed:9b:71:7c:83:37:7c:cd:68:44:9a:77:c2:6d:7c:b5:f5:f5:
         52:04:d0:6d:2f:53:73:d9:fc:eb:f7:6d:29:86:2c:a6:d1:37:
         a9:bf:82:a1:75:df:c0:16:5b:35:0d:78:1d:7f:3c:bf:18:28:
         77:85:36:fc:93:a7:fc:8e:27:49:db:07:f3:21:14:0e:ba:2e:
         64:23:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----