Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
File:                     wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json)
Hash identifier:          GvTTLMeNMucSl4wKc3D1ylnQQD0aswenz1AX9WzJ3Pk=
Subject key identifier:   79:90:77:B7:D1:D1:C4:14:44:91:C8:0E:0A:44:24:AF:DC:76:0D:46
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Certificate issuer:       /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial:       01962F3D68E27931616A8BE93EA1A0749D00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa (hash: kp+3RGyWysprTwe33mB6LBHrd9lT7FkQfMmhfRn83iM=)
                          2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: bniB3HnTDLwsrB5RB4agErvhTEg9j7c2fAKjGX8WNck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:68:e2:79:31:61:6a:8b:e9:3e:a1:a0:74:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=799077b7d1d1c4144491c80e0a4424afdc760d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:97:17:be:48:d3:8f:cb:e3:e9:e6:ef:14:
                    8f:03:9d:50:d9:76:e9:c7:88:13:07:ba:26:16:67:
                    19:00:6c:eb:44:96:e6:e3:6f:b6:a3:6a:10:f9:ce:
                    3a:dc:90:c4:51:e0:6f:26:eb:1d:d7:be:10:70:d4:
                    96:eb:fd:79:ae:14:22:25:61:9a:28:29:be:ca:9c:
                    d8:02:db:63:3a:3c:85:79:97:98:53:75:e7:70:23:
                    e2:87:f8:45:5c:b4:f5:95:af:f0:b7:26:ca:89:91:
                    65:9b:23:65:38:da:82:47:60:d7:4c:82:0d:14:2e:
                    c5:f3:bd:7e:71:a0:aa:bb:ff:cd:82:d1:81:ea:6e:
                    25:d6:29:63:e7:eb:d7:78:b4:44:9f:99:99:6d:91:
                    53:53:9f:19:cb:88:80:c3:be:25:98:0f:49:5d:02:
                    20:93:9d:f5:36:0f:2e:93:d7:6a:74:fd:ca:a7:d4:
                    d0:5f:4e:12:eb:da:9e:b4:6b:96:c5:9d:2e:aa:f1:
                    c5:8b:83:fb:33:17:d8:c7:e9:23:2a:6b:f5:98:aa:
                    f4:4b:7a:32:62:98:72:92:2f:9d:fc:05:1b:c5:1b:
                    03:ec:d9:a5:6e:61:ed:2e:cc:d1:1c:03:a0:06:05:
                    4a:78:15:50:ab:6a:fb:53:0e:65:73:24:a2:ba:ed:
                    0b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:90:77:B7:D1:D1:C4:14:44:91:C8:0E:0A:44:24:AF:DC:76:0D:46
            X509v3 Authority Key Identifier:
                keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f7:e2:ad:81:37:a8:e1:4c:9a:8c:d1:3a:04:25:fa:ef:1f:
         b8:8b:15:b3:a9:7e:4a:01:63:b1:0d:1b:8b:b3:9f:cd:b7:50:
         28:62:ad:4a:77:e8:fb:ef:d5:91:24:0b:57:bc:49:b9:c5:fa:
         f7:4c:9b:ac:9b:48:0f:6d:90:1d:ae:de:30:92:05:8c:bf:00:
         65:35:ac:2b:5b:61:55:f6:7f:56:af:82:a9:c2:58:77:06:78:
         f5:ed:12:57:76:c7:bf:63:9e:64:bf:fc:4b:6a:6d:ea:ad:2d:
         fb:1b:01:7d:57:d4:53:42:ed:3a:9e:0b:21:80:6e:c3:31:74:
         aa:a6:9d:d3:8b:5d:cd:f1:54:b0:09:22:1f:cf:03:a7:e5:b0:
         58:26:06:58:cc:f3:d5:8e:7f:ba:d0:8b:68:e9:d6:99:ed:eb:
         b2:0a:b6:20:c6:81:50:f0:0f:5c:51:41:e4:ee:09:3e:f7:cc:
         33:e6:07:83:43:07:c3:d5:34:ac:b5:ab:b7:30:0a:e2:80:5a:
         f3:3c:9b:aa:ee:81:d9:c1:7c:a5:da:13:99:44:86:bb:c9:1a:
         f7:f7:14:b3:e0:5c:08:67:b5:f8:32:87:cb:4a:9f:8d:d9:55:
         2a:e7:61:46:50:92:98:40:3a:a6:dc:45:08:f2:8c:34:cd:80:
         ac:91:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----