Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File:                     WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier:          SZ9A2s1Z+tUZI6YDTyNp4TQcXWp73rLfYQF+t+zMExo=
Subject key identifier:   99:D5:08:F7:86:C0:B3:13:9F:37:61:E4:37:9D:5A:6B:4C:25:79:DB
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer:       /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial:       01962F746018F5FF34805017677422CD9E36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number:          1499
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: 1NNBnCQ9zO80aBzmVHyt4x1zu83VklQ9LVCT/N8Mbfs=)
                          2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:60:18:f5:ff:34:80:50:17:67:74:22:cd:9e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=99d508f786c0b3139f3761e4379d5a6b4c2579db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:de:8d:c8:d8:78:d5:93:ab:70:1f:8b:b0:
                    96:bb:49:66:de:1e:35:bd:a7:bc:49:a0:b4:d1:a6:
                    e3:60:0e:fd:e5:d9:71:43:f5:a1:33:ba:e9:a4:1b:
                    71:09:1d:fc:a3:b1:7d:5a:60:2f:cb:52:4d:5b:33:
                    b6:1c:f6:31:09:ee:b5:c7:bb:67:42:e2:72:98:7d:
                    7b:77:b9:db:02:fb:91:6b:bc:6c:dd:1f:61:a2:39:
                    86:b4:31:7b:a4:7f:4c:2b:e9:2c:6d:71:4b:04:5b:
                    57:a4:d5:74:ae:b5:c6:66:03:ef:3f:0c:26:1e:1b:
                    a9:d1:ce:6f:23:97:a2:8e:f9:e9:75:0e:c5:7d:9f:
                    5a:94:a4:91:bf:39:e4:33:72:20:2a:41:63:69:40:
                    7a:c5:c0:a0:db:9f:d3:a4:76:d3:52:8d:0d:1a:ef:
                    d8:71:15:23:39:d0:ca:41:ae:dc:07:ee:cc:19:d0:
                    6b:04:b0:ab:be:26:1f:31:c0:f9:cc:5c:f7:5f:6c:
                    31:69:f6:f2:88:8c:3a:63:08:9b:36:50:db:fd:30:
                    03:04:ec:18:b1:52:56:61:f6:a0:31:d1:7c:a2:f3:
                    98:32:b9:32:b7:1a:c9:94:e1:f6:b8:32:26:b6:2b:
                    0f:51:02:17:b7:b5:e9:ec:87:e9:7c:a3:86:9b:bd:
                    c2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D5:08:F7:86:C0:B3:13:9F:37:61:E4:37:9D:5A:6B:4C:25:79:DB
            X509v3 Authority Key Identifier:
                keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:da:ed:63:31:83:00:e9:ba:cc:22:6a:0c:cb:da:d4:dd:
         4f:b3:de:f5:e2:9f:79:08:1a:70:88:45:0a:9e:8b:5e:c8:4b:
         ec:ee:28:62:c5:6c:6f:c3:86:3f:4c:98:50:c4:40:12:a9:7e:
         32:31:d7:44:2f:33:53:4b:d6:87:85:5b:8b:aa:cd:3a:e5:96:
         bd:ed:39:5c:86:79:4b:fe:0f:59:45:60:a0:06:a7:b2:1c:6c:
         9f:d2:f4:e9:54:5e:ae:d3:54:00:fb:e4:9b:e8:1f:83:60:12:
         f6:64:c2:23:c2:9e:f0:2a:fc:13:d4:fb:e3:40:cc:62:65:8a:
         2d:fd:07:d9:44:ff:ee:eb:d2:a3:1e:03:8b:d5:59:1d:73:a4:
         2c:38:69:2c:e5:6a:f3:14:20:60:80:55:43:8a:08:6e:d0:fe:
         04:6a:0b:18:ca:27:7d:6e:30:80:7e:d9:a0:fb:a3:85:f6:a8:
         dc:eb:07:91:c7:92:a5:7d:ca:a8:be:69:2a:36:dd:2d:d9:3f:
         6e:47:40:ab:90:aa:0f:8a:9b:43:8c:77:62:f1:e9:ee:1c:42:
         8c:51:e9:e6:8e:5e:f5:c3:9a:6b:31:66:c6:e8:f5:ba:c7:02:
         e6:50:86:5a:0f:bd:c2:ca:5b:e1:4b:45:05:9b:42:c4:21:69:
         ea:3e:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----