Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File:                     WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier:          69EuvFyIgtZEjKGHWV6dr4kyUBH5u4hTSgwefdp7beI=
Subject key identifier:   85:FF:E8:14:2E:D4:07:A3:F2:EA:68:E1:30:79:42:52:43:73:26:9A
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer:       /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial:       01962E617CA9D66D85C5929DC819C6BF51AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: iofqLaL63EX+VhjL0Opbbk5zIqdf2uZ/vO+Sdv+Nzww=)
                          2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7c:a9:d6:6d:85:c5:92:9d:c8:19:c6:bf:51:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=85ffe8142ed407a3f2ea68e1307942524373269a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5c:d5:04:99:0c:29:6d:b9:55:11:87:c7:7b:
                    9c:78:20:b4:91:a2:1f:c1:82:2c:65:f8:34:81:c5:
                    f7:49:50:37:70:ec:49:46:39:a1:72:99:4b:7f:df:
                    57:8a:2c:1b:1a:ac:fb:bf:cd:21:90:7b:94:7a:f5:
                    01:ae:fb:89:93:dd:a0:f5:32:19:2b:c0:f8:35:56:
                    1a:3c:f6:cd:81:c3:71:68:d3:5d:91:b2:b2:5c:18:
                    d8:6c:d1:25:68:80:1f:2f:62:ca:a5:aa:11:47:71:
                    21:62:9b:98:0d:c2:89:b6:93:7d:74:58:7f:c0:6a:
                    23:5d:57:46:2b:5b:03:d0:5a:6f:d9:3e:8d:0c:85:
                    e3:77:32:83:d3:2c:4b:6f:b6:3b:ae:69:a7:fd:44:
                    d7:ae:a4:ba:05:48:44:3d:67:06:93:e1:8d:cc:e0:
                    04:21:63:cc:c7:ba:6a:cd:56:6e:14:1c:a9:af:cd:
                    65:cb:c3:8e:d8:3d:b0:2a:bd:78:5c:38:6f:51:fb:
                    5d:fa:61:9c:ba:5a:2c:c4:fd:c4:86:1a:7f:5e:e0:
                    f1:f2:b3:8d:5a:61:43:eb:30:4e:54:39:fe:2f:8a:
                    dc:09:e3:32:62:92:70:04:8e:64:43:f0:17:45:48:
                    b6:d6:38:41:6f:4d:2d:f0:15:13:af:cf:c1:a2:47:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FF:E8:14:2E:D4:07:A3:F2:EA:68:E1:30:79:42:52:43:73:26:9A
            X509v3 Authority Key Identifier:
                keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:91:68:69:d9:2a:79:fb:4f:9e:d5:df:6a:e8:e0:91:a0:2f:
         e4:53:44:d5:2c:17:88:37:66:54:30:b3:bc:06:66:4a:65:63:
         b7:24:a5:2f:2c:b1:8c:f3:90:6e:07:13:14:fc:d6:81:57:8a:
         04:a0:5d:d0:29:04:e3:9b:25:24:99:61:08:fb:76:8c:9f:bf:
         71:86:90:e8:ac:8f:94:ad:0d:5f:ec:9f:5d:1e:b2:6b:5d:73:
         4e:75:55:7c:12:9d:b3:4e:aa:2c:3e:3a:da:be:b8:77:6d:f4:
         85:e7:23:d4:0d:4f:67:ad:01:ad:59:af:9c:df:cb:23:1e:de:
         24:05:2f:74:8f:7c:47:37:bf:d2:ee:f7:cd:70:7e:bc:6f:e2:
         ea:96:ca:cb:1e:26:b4:d3:ad:0e:a5:c0:8d:c4:03:e7:57:6b:
         e0:3d:f9:2f:5d:cf:37:ea:6f:8a:2a:ac:31:c8:f8:c5:5a:33:
         99:5d:0d:70:56:d5:a9:51:e6:ce:9c:62:ad:78:77:11:b6:bb:
         54:a6:63:7d:09:e4:cf:a4:c9:f8:0c:ef:be:c5:b7:b9:4f:b5:
         17:7f:32:5c:e6:d6:99:63:b3:ab:fb:43:ff:89:96:38:cf:5b:
         69:44:f4:89:4f:77:56:f7:85:27:b0:62:ec:bd:06:89:44:1d:
         18:6a:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----