Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
File:                     wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft (raw, json)
Hash identifier:          bIQ/uTpr+YrOlfvLjDLa2wO4y5+ie5nv/69ntWLrfFI=
Subject key identifier:   70:FA:45:C0:07:5A:32:4D:17:77:3E:F0:00:9E:B0:D3:3E:C7:14:F4
Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
Certificate issuer:       /CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Certificate serial:       01962DF3BB25819F5013008EAC26AAFF075F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
Manifest number:          09F3
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: X7sxw7uNpouw4ILJQaZasQ1FOVw.roa (hash: 7K5qnvzu1jh/3cj6mY1PwjKcxXcNjjVrkTNjEwE3NGw=)
                          2: wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl (hash: ziVJDMg1u9g/Rqp0JaJ6pKIwbfx8rpGyGZLFfVKYh1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bb:25:81:9f:50:13:00:8e:ac:26:aa:ff:07:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=70fa45c0075a324d17773ef0009eb0d33ec714f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:23:ca:f6:59:bc:15:b3:a3:99:ce:4e:4c:
                    2f:c0:25:f1:f1:b1:ab:09:30:a4:8e:4e:dd:e4:9f:
                    31:54:b0:24:4f:fd:24:f2:50:0e:cf:ec:d4:85:c6:
                    28:50:1d:2d:44:45:9e:5e:d6:ea:53:ca:13:fe:20:
                    7c:93:1b:ac:be:27:24:32:2d:5e:7b:4a:58:d8:c2:
                    2c:5f:03:3f:dc:12:0f:c6:69:67:56:8d:9c:b2:cd:
                    ac:5b:ef:bb:e6:05:1a:a8:59:c3:5b:51:64:da:3a:
                    3d:c1:17:9c:04:d6:92:e7:8c:ac:d8:55:65:7c:3f:
                    10:12:63:6b:73:c5:fd:e0:84:88:09:e4:90:4e:cd:
                    a9:aa:94:c8:f0:c7:54:f9:8a:a2:ee:41:a0:a3:7e:
                    84:98:65:62:93:57:74:a5:76:aa:a0:2c:47:e3:ae:
                    c1:f6:bf:6b:3d:22:90:12:b0:f1:19:29:21:b6:df:
                    1f:45:ce:56:6c:59:e4:03:96:03:b3:e3:5e:f2:3a:
                    b2:33:47:ac:8a:29:5d:e9:7c:a2:50:e4:0e:e2:2d:
                    11:a5:7b:19:13:7d:e2:0b:b1:98:45:63:4b:ae:2c:
                    b7:66:87:40:a2:aa:f2:79:54:f2:fd:f6:9b:34:56:
                    54:74:7e:fa:7c:b0:ea:47:2f:e4:09:74:0d:2f:32:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FA:45:C0:07:5A:32:4D:17:77:3E:F0:00:9E:B0:D3:3E:C7:14:F4
            X509v3 Authority Key Identifier:
                keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:72:01:20:1c:22:77:82:08:4b:c8:4e:30:8a:0d:cf:a4:
         29:d4:47:10:50:4c:e0:ac:93:07:da:9c:2d:92:23:2b:e7:13:
         17:c0:e9:82:9a:8b:33:18:66:40:15:9b:f3:9d:cc:53:b0:c9:
         6e:35:62:d5:4a:77:4d:bc:ae:9a:43:ba:0c:89:98:20:4b:b1:
         b5:23:68:47:1c:12:6e:3b:8f:db:db:55:7e:73:14:14:b0:c9:
         05:ee:bc:23:f4:d6:cb:14:ef:c9:90:f2:37:6b:65:3c:71:8b:
         87:2a:84:fc:21:ab:bd:c7:67:9e:80:bc:56:d3:9e:5a:36:2f:
         96:c9:8c:ec:36:0c:73:63:59:fe:05:fa:c8:05:d4:35:ce:90:
         17:d4:60:5d:ee:e5:5f:e8:6b:4a:b3:f5:89:fc:59:be:8c:db:
         a3:24:87:c9:03:44:13:ac:4d:db:72:c2:66:c7:ce:c7:47:9e:
         43:4b:6a:fc:f0:bd:8d:f7:d3:a3:dd:61:f0:d4:34:9a:ed:06:
         ba:21:fa:64:5c:93:46:bd:0d:c0:9b:cc:19:29:e6:e1:80:83:
         2e:96:07:e5:32:e3:38:8f:af:57:c3:7b:69:5a:95:23:b2:54:
         7d:40:79:ef:4d:84:c1:8a:a1:41:c2:ea:37:f7:e2:82:f3:2c:
         28:76:91:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----