Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
File:                     WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft (raw, json)
Hash identifier:          6QrKKrha09igaeBWMB47RZlFl0W1UxzJZ047A21jzPU=
Subject key identifier:   FE:5D:94:7B:0A:F1:33:7D:A8:E1:A0:0F:AA:1E:56:56:10:77:58:4A
Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Certificate issuer:       /CN=5871720a8884167fef82a49267661fb346d7561a
Certificate serial:       01962FAB95DBC6C6C2841E74CF8FF8639D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl (hash: vnH+2rGKG3CfPZNfDdIoYkpDCyQ0b9CNfRaO0IFOln8=)
                          2: b-H1HafvFZHqAREOClh3E9AccmU.roa (hash: MvASKCNf0q7mbKy4jwGmZ3TcUV1oDH8tUiKsCWNFvAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:95:db:c6:c6:c2:84:1e:74:cf:8f:f8:63:9d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5871720a8884167fef82a49267661fb346d7561a
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=fe5d947b0af1337da8e1a00faa1e56561077584a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:6c:2f:5d:27:d8:51:14:fc:ca:78:32:8b:
                    f9:27:7c:3c:10:81:1b:a9:cb:1b:b0:18:94:81:e7:
                    68:69:58:d9:da:7d:e3:f0:3e:d2:ea:17:23:36:9c:
                    c8:ce:cf:eb:b5:63:38:4c:d0:3b:31:12:63:4e:cf:
                    14:43:12:b8:fe:d2:3f:2a:78:21:29:c3:be:2d:2e:
                    d8:5f:af:1b:98:0b:48:ce:e9:24:a6:26:bf:73:dd:
                    95:37:a4:48:4e:6f:67:b6:da:fe:33:26:93:fe:9f:
                    2d:8f:82:23:5e:44:40:c3:2a:32:b3:e2:a6:43:7b:
                    e3:02:2b:f7:39:03:88:ec:42:66:b8:40:36:ea:17:
                    ad:6a:aa:33:5c:ed:6b:05:ea:70:c7:a2:e0:bb:85:
                    24:ea:cb:1c:38:c0:7b:6c:d7:51:8a:19:94:15:74:
                    65:4a:6f:98:5c:b9:7f:3b:08:50:b9:83:49:16:71:
                    06:06:58:90:b2:c7:d8:99:ec:25:15:b0:69:af:f1:
                    53:2e:5e:6f:fd:23:a0:7c:6e:ef:1b:18:64:63:49:
                    30:55:ae:57:e9:54:c8:61:e6:79:d9:68:6d:2a:f4:
                    61:4c:81:db:d2:5b:09:f2:f7:0f:b8:1d:38:66:ec:
                    30:46:46:0d:ae:2f:ba:c6:42:e0:6e:ec:b4:13:92:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5D:94:7B:0A:F1:33:7D:A8:E1:A0:0F:AA:1E:56:56:10:77:58:4A
            X509v3 Authority Key Identifier:
                keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:54:28:2f:7d:fe:bd:7b:91:72:e0:11:48:9c:94:53:26:ed:
         fb:3d:b4:b1:ff:7f:94:97:cb:91:b8:d4:d1:c3:70:23:34:07:
         88:58:70:43:9b:b7:c3:62:e6:12:3a:da:3e:e9:4c:bf:84:12:
         f4:05:80:60:69:f4:c3:c6:61:ff:fa:3e:e7:bf:04:7a:a5:db:
         a6:e4:4b:92:a4:b0:35:52:61:17:27:de:50:83:b4:96:12:5f:
         94:1b:2a:8a:40:e2:1d:e1:b8:10:e5:43:bd:24:e3:f1:73:82:
         92:31:58:05:33:1a:b1:c1:3b:a5:5a:45:a6:45:c9:b5:37:76:
         08:eb:e1:05:59:2e:22:fa:1d:a2:67:41:1b:e5:e7:7f:19:03:
         fc:96:52:95:dc:83:8c:7d:9d:58:7f:08:e4:c8:09:90:c0:58:
         29:5b:3d:b2:f3:9e:bb:0c:fc:f6:85:30:00:23:99:2e:ed:c4:
         53:e4:6c:20:56:45:b4:45:28:06:d5:c2:3e:2a:09:c2:31:70:
         ad:a8:f8:f4:9d:9b:7a:64:56:f7:87:46:b6:b6:db:25:d9:51:
         e1:73:6f:a2:a7:d5:db:a2:f8:06:17:c1:72:69:fa:96:e6:76:
         c9:9d:e5:e6:2c:ab:fd:af:81:8e:6a:58:02:3e:ba:63:82:17:
         2b:95:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----