Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
File:                     WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft (raw, json)
Hash identifier:          AXCcBy/1sJLmFAki9vFecwtIOCX+M1o3L+/zny0meh0=
Subject key identifier:   38:35:1E:06:8B:64:C5:4D:5D:2C:57:8D:0C:E0:C1:CD:27:0F:E3:0D
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Certificate issuer:       /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial:       01962E99AA6FADE74CE63A49C40744376E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: 9fwoj_X2tHpCghfejRb6ra1gTZc.roa (hash: VcsRDD+GofeQD9oKWI4zahEGiyHHMwhCi+kgIO2Xtcs=)
                          2: R-1q52axanYiR_uRw04t04Z8LDo.roa (hash: v5CC/At/0UFJJZBjnOeP3jsuRpec8w6C2aXVgu/IhIo=)
                          3: WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl (hash: /QtyBbqIc+X03bUgAB0OTymZ9aIJ6XT6b1CV3P4omPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:aa:6f:ad:e7:4c:e6:3a:49:c4:07:44:37:6e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=38351e068b64c54d5d2c578d0ce0c1cd270fe30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:fc:cd:fd:b1:35:86:44:22:77:b3:91:02:
                    df:b7:59:47:d9:a7:55:46:1a:cb:ef:9a:45:8d:dd:
                    e4:7e:46:7e:8c:e9:b6:36:fb:1f:7f:ed:b3:e0:7e:
                    be:55:e0:b9:ce:ce:83:15:22:15:50:b7:ff:50:d4:
                    6c:e6:a4:b2:18:e9:44:40:b7:d0:16:da:96:56:de:
                    0f:ac:f2:3b:66:37:28:93:b3:2f:68:fa:c5:7d:0a:
                    7e:81:45:3b:2c:49:57:f9:71:fe:f0:ee:56:cc:bc:
                    56:c7:2f:a0:f2:97:7d:c8:3f:0c:42:e5:e7:2a:c4:
                    ec:ef:b4:82:fc:f0:a5:f2:c3:24:39:13:9d:6d:35:
                    ed:4b:b4:b5:5f:f0:d7:df:71:99:bf:35:bf:94:7e:
                    47:c2:d6:42:ed:fe:11:82:34:a7:63:a4:11:1b:12:
                    0e:05:88:40:d5:53:8d:2e:1b:ec:90:af:32:24:2a:
                    4b:27:5a:6d:bd:33:38:62:81:72:76:6d:ff:d6:c9:
                    09:62:2f:b1:e7:fa:9e:14:8b:3e:93:0b:ed:52:92:
                    74:bf:4a:55:90:16:e3:ec:12:f4:26:7d:d5:4e:2b:
                    f6:33:b6:03:bf:54:fa:70:5a:d4:53:ff:3b:14:88:
                    9c:a3:32:68:9b:fa:a8:df:b5:b8:74:c2:69:d7:ea:
                    84:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:35:1E:06:8B:64:C5:4D:5D:2C:57:8D:0C:E0:C1:CD:27:0F:E3:0D
            X509v3 Authority Key Identifier:
                keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ab:72:78:0d:b9:df:e1:12:ef:3a:b6:5a:b9:26:83:0e:a8:
         39:ec:9a:04:bf:66:f4:d8:9e:d0:79:45:78:fa:6e:ae:ba:40:
         83:ad:c2:f6:a9:6b:27:5f:34:af:a7:20:89:4a:8d:8e:6d:58:
         df:9d:f1:60:86:fe:a5:bb:0e:36:71:57:90:8d:02:8c:64:9b:
         0e:7d:87:52:e8:98:e1:c8:c3:bc:1e:e6:47:d4:ee:7a:d4:24:
         1f:53:fa:70:d3:b0:84:2e:78:e3:0a:27:b9:c6:53:3c:66:70:
         66:55:c8:44:06:8e:96:55:6b:fe:f1:d4:c9:07:ca:08:8c:9a:
         75:03:73:82:51:8a:37:2e:fc:75:19:3c:53:2d:4f:fd:a3:52:
         af:91:3b:78:d5:2a:b3:a5:1f:bb:b3:f3:6a:8c:0e:ee:cf:b7:
         a8:f8:37:d3:3e:f1:7d:48:2f:2c:27:5c:06:96:b8:0f:ff:33:
         f3:34:59:06:9d:be:b6:90:25:c7:cc:1b:37:ea:ba:57:df:9f:
         81:a3:f8:29:18:95:38:72:46:d8:19:30:e5:2c:b5:af:1b:83:
         58:31:49:0d:36:16:54:d1:26:38:2d:08:04:1a:32:ce:95:16:
         4c:de:cd:c5:7b:c2:b1:e6:07:f7:36:f7:cb:cf:c4:36:cf:a6:
         c0:1b:f5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----