Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
File:                     Wl5msnWeULtpuwpECe6zukjEbFY.mft (raw, json)
Hash identifier:          cIZm28tQ8PMbWhhaSotYkbRKikykaYSvwDAUMvovcWo=
Subject key identifier:   90:2C:0A:6C:06:3D:E4:D8:79:29:AF:A4:56:3F:75:E5:87:C4:19:2C
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Certificate issuer:       /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial:       01962DF440004B450EE4AB8E682E30D5D00A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
Manifest number:          08D2
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 7frYRaPWiUBQtdiw3rIrrhQhjyQ.roa (hash: HXRVWZcU5xbezLat9MNaXuodNGFiZBK+jua9+ZXWRsw=)
                          2: Wl5msnWeULtpuwpECe6zukjEbFY.crl (hash: Hc1Vb7c3SLr80s2g3C5Qgws0DNpr4ovx6G08uD/M8mE=)
                          3: dCxXanqYo2BAfARwyH_-JPoYvgo.roa (hash: v12nw6HCaY7DPyuKw9bgY2SCEviVsH9TJx3km0XK9nE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:40:00:4b:45:0e:e4:ab:8e:68:2e:30:d5:d0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=902c0a6c063de4d87929afa4563f75e587c4192c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:e1:fc:bc:aa:4c:ef:01:e9:16:88:94:bd:
                    ff:9d:33:db:2f:bd:1a:12:52:fe:1b:89:c0:b9:b3:
                    a4:ec:8b:65:20:f3:f3:9c:dc:b5:6f:9a:fb:57:40:
                    80:d1:8e:b1:44:69:19:21:f7:a7:9a:5d:09:36:29:
                    50:6b:fe:aa:ce:22:4e:69:74:ab:32:46:0b:44:fd:
                    32:3d:cd:e2:d9:ab:39:fd:bf:6c:7a:ed:33:25:6e:
                    06:6e:54:90:56:cb:1b:5c:3e:43:e1:07:33:1f:2e:
                    86:21:89:e8:d2:ab:72:5a:4d:b5:9d:99:1a:1a:68:
                    1c:a6:59:2c:32:e7:8e:67:ad:67:72:c6:64:73:28:
                    d2:dd:6d:21:8d:c3:05:3f:b9:96:6c:0f:dd:b9:27:
                    6a:61:f3:b2:a1:51:22:1c:4b:93:64:7a:6f:59:56:
                    3a:c8:15:74:33:27:ed:c6:46:c5:4d:42:f0:98:8f:
                    e6:fa:4c:a8:f2:1a:6c:f6:93:fc:74:2e:84:5e:6d:
                    84:7e:51:bc:85:e5:40:6f:5f:95:c7:95:23:eb:bd:
                    c7:6e:29:94:6d:b7:ff:05:94:7b:11:46:a0:1a:0c:
                    f4:5e:b0:67:65:ea:a5:8d:bd:92:a4:c0:d5:2f:69:
                    5a:49:24:ec:d8:fd:2b:e7:0f:13:20:1f:b3:b2:54:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2C:0A:6C:06:3D:E4:D8:79:29:AF:A4:56:3F:75:E5:87:C4:19:2C
            X509v3 Authority Key Identifier:
                keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:56:38:85:f4:da:c5:7d:c7:22:bb:e5:94:9a:20:27:d4:d0:
         b7:dc:00:bb:b5:af:06:05:8b:f6:f0:26:68:58:c2:2b:aa:f6:
         df:fe:f7:10:41:f1:8a:67:05:1b:4a:5a:e9:51:34:74:32:30:
         76:bf:ae:a1:b4:31:54:ca:35:8d:c1:ea:a8:6a:d3:d6:4b:a2:
         ac:12:8d:97:d9:98:d3:e4:21:7c:ae:d5:23:1c:be:46:fd:2a:
         fe:6b:c0:5f:11:ac:c9:94:c7:a1:c7:bc:51:b5:e7:4b:26:94:
         06:ee:2c:a7:3a:0e:9e:86:6b:ff:52:03:63:0f:82:e1:5d:b1:
         3b:00:ae:44:84:c4:b6:aa:2b:0e:f7:3d:f2:87:55:ae:2f:c6:
         97:64:43:e2:8e:72:e6:c9:19:67:59:fd:26:f9:0f:b5:ec:a7:
         1a:ef:25:b0:a6:34:63:c7:73:50:ea:3d:2e:24:43:26:62:ca:
         d9:94:0d:8c:80:a8:fb:f8:5a:bb:b3:97:3f:27:ff:31:ac:40:
         71:e3:ec:41:7a:22:47:39:01:02:34:e5:42:74:75:a9:58:91:
         d8:71:12:42:b8:d3:71:bc:d4:72:66:35:46:02:b7:e6:af:7f:
         cd:2f:e8:12:49:1b:65:53:52:6a:74:19:a5:e5:67:a1:a6:6d:
         0d:c3:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----