Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
File:                     1-WoJAryYU7de0tsZaD7i86ImFUA.mft (raw, json)
Hash identifier:          sdnJYLDmoLTVeAHLOPjr1TZCyCTGFoJk5XgmwfVjNUs=
Subject key identifier:   DE:7B:DB:22:11:80:92:BF:BD:0B:4F:B0:6D:9B:1B:00:BB:4D:00:FB
Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
Certificate issuer:       /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Certificate serial:       01962E996B74172071BBFD98CC4B5D275E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
Manifest number:          0564
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: 1-WoJAryYU7de0tsZaD7i86ImFUA.crl (hash: BkwNyghMbgTMdSq06mLDUJyb4QhAMhY2WjtvaD2elyo=)
                          2: WL1jNaK3dDMzba-WiCjfnQ1rlls.roa (hash: Qx3rI/5XR6VPAcxanE1apP2pTmDJQZpuNJ+aqY3ExZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6b:74:17:20:71:bb:fd:98:cc:4b:5d:27:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=de7bdb22118092bfbd0b4fb06d9b1b00bb4d00fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:1a:12:20:12:f5:2a:8e:e9:5e:0b:0b:51:
                    42:5a:b3:b6:97:10:9d:ca:c1:3f:57:12:d4:83:b4:
                    e6:7d:3c:e8:8d:71:41:fd:16:a6:d0:80:e3:c1:41:
                    6a:e5:74:c3:77:67:38:d2:99:03:ce:7e:65:e0:8c:
                    42:b4:1a:7f:66:e0:56:a4:11:3e:59:23:81:88:a1:
                    27:25:d7:e3:9d:ad:fc:de:c8:25:61:2d:9c:73:aa:
                    2b:36:a5:1a:1c:08:ad:cf:6d:2b:b8:6f:bc:18:84:
                    65:b5:f9:6b:50:f2:18:42:d6:33:c9:0a:2b:9b:9d:
                    50:77:a9:06:f9:1a:2a:0b:84:a7:83:57:da:04:11:
                    8d:dd:36:0c:0d:2b:0b:3f:5d:da:06:a0:69:de:fc:
                    14:2c:c9:a2:e8:63:91:9f:87:04:3c:20:16:ab:e0:
                    d2:85:13:06:79:41:35:aa:2f:55:bc:71:5d:2d:c2:
                    ec:f8:43:c7:a8:67:26:36:e1:1a:60:83:cc:56:37:
                    fd:35:53:ce:89:87:d9:8c:21:a1:79:7a:a7:f0:8f:
                    99:64:8f:7b:cf:62:66:42:ec:b9:87:cf:1c:fc:31:
                    6e:8f:23:11:29:da:9f:0a:11:68:a1:db:57:2a:46:
                    94:70:cc:2f:37:1f:9f:7b:97:67:7a:ae:2d:5b:ee:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7B:DB:22:11:80:92:BF:BD:0B:4F:B0:6D:9B:1B:00:BB:4D:00:FB
            X509v3 Authority Key Identifier:
                keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d6:b3:87:a2:ff:6e:db:c3:fa:1d:fe:ed:7d:56:9a:1a:60:
         24:66:ce:12:0e:2e:c1:77:b9:f1:18:37:38:4d:a4:2c:3e:60:
         67:41:c6:85:0e:dc:f8:77:81:6d:ab:7d:cd:ef:8a:45:e0:97:
         b7:4a:09:60:54:92:e6:8b:f7:b7:b3:59:aa:85:89:37:e9:5e:
         0b:92:67:0c:89:d8:e7:df:04:39:f9:40:88:0d:4a:b6:7c:68:
         60:da:cc:b1:5b:d5:d5:aa:2b:d4:89:11:0a:9e:88:29:3e:31:
         d3:1a:1b:a8:e7:33:83:95:42:ba:49:1d:87:a6:35:7e:db:cb:
         04:d7:95:f8:e5:6b:e3:bc:ba:86:a9:2a:c6:5b:d6:9a:b2:5b:
         f7:13:e9:21:d8:57:8b:2b:43:17:db:12:1d:8d:17:c2:ec:98:
         b9:5b:fc:81:9d:42:d6:47:9c:eb:52:8b:f4:05:4a:94:26:82:
         f8:6a:3a:88:8d:b4:16:5e:36:85:b2:eb:59:70:b3:b2:2e:74:
         b5:8a:07:d4:98:00:ca:9f:6d:05:0f:1e:2c:a6:54:d7:75:71:
         54:6d:48:39:3d:ea:9d:3b:5c:9f:41:9b:83:65:83:d8:45:2d:
         86:4d:f9:b4:54:fd:1a:ef:72:18:88:ef:ee:6f:07:79:9c:cd:
         1d:7b:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----