Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File:                     wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier:          FTkqAhIv2+ii5tJ9x7AlIGnIR+Oh1YcKzMTKTgwfprg=
Subject key identifier:   74:0C:73:8D:9D:63:B5:14:9F:5D:69:9A:79:CD:99:DB:BB:D6:66:3A
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer:       /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial:       01962F74407BCA278C46126765AAA8D0D9C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number:          07B6
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=)
                          2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: PkCVVs1vERy3Uf07D7IMSENRCCGumLgribbrciLxsJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:40:7b:ca:27:8c:46:12:67:65:aa:a8:d0:d9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=740c738d9d63b5149f5d699a79cd99dbbbd6663a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:b6:4b:35:ef:a0:73:43:d6:71:0e:c2:8b:
                    05:fd:bf:bb:b8:39:81:bb:3a:28:64:8f:e1:80:89:
                    68:c1:f0:d7:9e:36:a8:2e:47:bc:e1:c3:77:2c:ca:
                    ab:3d:da:df:f4:70:75:29:ae:f0:0a:72:e1:1d:10:
                    fc:88:38:93:bf:83:2b:b4:7f:3c:49:f8:1f:cb:1f:
                    c7:66:00:ed:f7:a7:1c:01:15:ea:69:bb:b6:5b:57:
                    d4:c9:21:76:9a:07:a0:47:32:94:81:e1:36:3d:78:
                    08:91:e5:5f:fb:7a:1c:10:b6:b6:e7:16:5b:33:25:
                    11:eb:3c:05:ee:f7:22:bb:9a:74:a2:aa:17:c9:10:
                    c5:31:d1:96:e0:38:da:4c:4a:e2:7d:04:78:c3:72:
                    85:6e:42:00:0e:82:de:7e:7c:01:81:02:92:70:11:
                    36:24:75:a4:7c:58:fb:b0:c6:32:77:18:68:ec:48:
                    da:93:d3:d2:f2:34:ec:1b:8a:2c:af:e5:21:ac:89:
                    d4:46:27:23:13:69:d4:1f:fc:e7:20:dc:58:a4:c5:
                    83:e9:32:a6:15:3e:64:a7:f1:a6:a2:70:78:56:72:
                    be:72:00:f2:57:db:9e:ed:e5:7c:86:b3:2e:51:7a:
                    34:a4:61:79:5f:96:eb:71:e0:df:15:3d:ab:88:72:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0C:73:8D:9D:63:B5:14:9F:5D:69:9A:79:CD:99:DB:BB:D6:66:3A
            X509v3 Authority Key Identifier:
                keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6c:9c:76:69:4c:46:ad:13:04:9b:40:0b:26:aa:9a:cc:c4:
         38:c0:ae:a1:8f:71:f3:1c:51:f3:53:b2:35:c0:aa:e9:d3:c2:
         c7:33:59:97:50:d3:2c:60:e2:b6:07:2e:bb:60:8b:02:ff:ad:
         eb:5d:ce:5c:72:bf:b3:fc:85:cf:66:52:39:c4:11:71:9e:b6:
         0b:cb:e7:10:2e:a3:ab:e9:01:35:ba:d7:92:03:6f:2f:a1:aa:
         72:78:d8:6c:c1:37:c8:ad:d6:84:07:b8:51:54:8c:40:b5:93:
         a9:d6:83:5c:bc:00:94:e9:d4:1b:57:78:83:80:0e:02:e2:29:
         36:60:ee:72:7c:48:bd:b9:c2:a7:cb:65:80:78:cc:d9:a6:fe:
         7b:7b:71:e6:68:b1:c4:c8:4e:a6:9f:1b:58:90:88:3c:63:a3:
         89:0f:cf:67:5e:9a:17:e8:03:71:c2:18:6f:ff:ec:55:ab:35:
         4e:65:cc:50:52:ab:5a:5d:85:f3:d1:f5:40:6b:5f:ca:37:9a:
         6f:0c:16:db:42:5f:84:49:33:82:ac:4d:a6:40:ae:e2:e9:db:
         6e:18:7f:77:af:e4:27:ee:cb:57:e2:81:2f:65:0c:4e:0e:71:
         a7:d5:83:15:4c:99:9d:2e:02:55:b3:eb:12:30:95:54:95:6c:
         37:4c:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----