Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File:                     WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier:          51gz2vpW9gdFzTkAMOExXBH6uiiVX87na83+qetOsmM=
Subject key identifier:   1A:8C:BC:11:FE:76:8C:DC:A8:06:1A:10:31:85:EF:05:41:B6:F9:13
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer:       /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial:       01962E2AD8845C2CD7213D7D5BBA47819CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number:          1244
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: 0D01ZS927DpHThbFhFQ-_hFWxII.roa (hash: W9Yn7dxHb0Wn1s2QKfIJNqloaSt38wuy4qDOcPmUhfU=)
                          2: 42BmTsViJXz2WqlV4_io6K3VIjk.roa (hash: 2MyAlESNR6eqmGKBHGCnds8446wWXVt2CWU4C9xt8MM=)
                          3: KZZiPS9ZeOzzb7Ol0GU3vdesmec.roa (hash: vFZw/xYafILFh9yVo7+bAnIUSWqHvFS5F2SG90lZkR0=)
                          4: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: l18BluKwm2VSFY89zd7MU2kAXxp73dOQR7fHgVwY2NY=)
                          5: Xo3ldLDsIsZwGbJ3VdetX-GULwc.roa (hash: 81La9U37EUF9V2tnd1e+qs0cFhZ17T44E32Wc8vicAU=)
                          6: _WlES2eSPPAcdb99IjbgTsc5Xro.roa (hash: EOl3gK+o3EL4dSF6oUVZ6VSDAeYTaurQvmfArpGviOI=)
                          7: sBlJ4mJbmZ7QPuvf5LufFr5BMyU.roa (hash: i/AotRsBPnt5Nf8geU1CUYhpvrjw/c5dfcC4n774/K4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d8:84:5c:2c:d7:21:3d:7d:5b:ba:47:81:9c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597a01de87e011803f890ae17749020f995f140c
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=1a8cbc11fe768cdca8061a103185ef0541b6f913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:0e:d7:57:bc:ee:e1:50:c9:41:8e:1f:18:
                    97:de:5e:9e:e3:30:70:e5:b4:ac:cc:92:c2:3e:e2:
                    f4:10:ce:e3:a0:5f:e7:b3:17:1a:44:93:30:53:03:
                    8f:7d:d7:5d:b9:bb:d3:b0:9d:97:db:13:a0:a7:43:
                    5e:3d:3a:0f:fb:77:68:71:1f:ca:6e:77:43:8b:17:
                    a2:16:b3:ea:83:5b:8b:1f:c0:93:64:dd:48:38:8d:
                    93:24:a6:46:65:16:f3:e9:df:62:60:3c:32:26:5a:
                    b2:e6:56:0b:28:4b:9a:9a:27:b3:c2:11:8a:aa:da:
                    6b:12:4a:0d:69:0d:db:7b:40:b3:a7:23:22:68:9f:
                    db:1b:aa:3a:23:85:05:38:a6:92:b9:51:31:8d:c0:
                    81:50:e2:69:30:58:92:f4:78:0c:62:3c:77:d7:68:
                    33:e4:12:61:e3:3b:ee:33:5b:01:93:56:de:9e:dd:
                    67:ad:f1:3f:b9:5a:7e:e3:88:68:76:f3:b5:31:bd:
                    06:d0:4f:3c:2d:9c:b0:80:ed:af:e7:14:27:a6:6d:
                    1c:e0:94:a9:f6:09:0d:79:c8:89:22:a0:bd:d9:7a:
                    80:e1:d2:b2:e8:b0:8b:b4:01:e0:9c:01:ba:f2:1b:
                    a6:64:88:56:b0:f1:42:28:45:5b:08:3d:9a:c7:c4:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8C:BC:11:FE:76:8C:DC:A8:06:1A:10:31:85:EF:05:41:B6:F9:13
            X509v3 Authority Key Identifier:
                keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:32:94:d9:47:54:43:46:45:f0:ba:f1:5b:51:9b:27:20:9d:
         a9:eb:5a:1a:96:4d:a9:a1:35:64:05:74:c9:d7:a7:e7:b3:8f:
         03:04:3c:57:89:24:f0:e1:b6:0f:c9:1f:3d:9f:fb:57:c3:e0:
         e6:33:32:13:8e:ff:30:80:e2:68:4b:78:51:a0:8c:e5:fe:cf:
         07:03:c1:13:ce:59:36:28:88:4e:70:f1:09:ec:61:c8:41:8f:
         a8:8c:8d:a1:7c:18:ba:53:0b:17:bd:a7:14:28:c5:0c:ab:7b:
         38:84:7e:79:09:72:74:03:41:90:f9:50:df:3f:4e:35:1c:bf:
         9b:27:cb:ba:22:26:41:e7:21:ce:69:e6:54:ba:e1:80:45:6e:
         6e:81:35:cf:4f:93:59:de:66:43:84:54:c2:73:2e:d1:c8:44:
         78:91:88:d6:24:f7:d6:43:69:30:ef:c5:1a:23:59:42:a7:9b:
         42:64:a8:0f:26:fa:bb:2c:f5:92:6f:d1:1e:7b:7c:2b:43:45:
         ef:e1:85:69:2b:2f:6f:c7:5c:30:79:b5:0d:5f:e9:c6:7f:1f:
         7a:15:4e:09:21:71:cb:03:43:df:b5:0b:f0:f2:e7:31:95:85:
         19:c3:47:06:93:d1:3d:db:ee:a9:6a:a3:84:7c:05:c0:59:71:
         65:69:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----