Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
File:                     Wtn1vraTNIRUHOVigsmJ7W6L26M.mft (raw, json)
Hash identifier:          u5KZsS22GmDbkKxs/Mr7Ph24mREAYvrakBmFvxxGrK0=
Subject key identifier:   D6:29:4C:9D:4A:72:E1:74:B4:14:98:A9:63:30:F3:31:6F:65:1D:21
Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
Certificate issuer:       /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Certificate serial:       01962ECF6E60723EB676D03D7DBB66C72334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
Manifest number:          02AE
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: HZBz5MrqBdAGlLzttgW8k7z_g5Y.roa (hash: vKALeCSvoIMsQY1cUM7A8I/fEETWOT998Li6zTAWX7w=)
                          2: Wtn1vraTNIRUHOVigsmJ7W6L26M.crl (hash: UVDKAcE2mMOyDUyignYTWAmwMtXNdBEP4yz9C3i2D24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6e:60:72:3e:b6:76:d0:3d:7d:bb:66:c7:23:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=d6294c9d4a72e174b41498a96330f3316f651d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:51:54:96:43:a3:3b:71:a2:b9:99:68:1e:
                    6b:63:67:b5:45:82:57:32:de:f0:26:9b:81:c6:88:
                    44:cf:67:a8:86:88:61:bf:45:6e:fc:ab:79:ae:a0:
                    d8:02:f2:a9:e8:f2:bc:5f:6a:fd:67:b7:47:72:a6:
                    48:d6:17:81:3f:24:32:19:28:87:7f:c0:1d:e0:a9:
                    75:6d:e1:4b:a0:ea:7c:a6:3a:b8:f6:7c:d1:c1:92:
                    8d:e1:1f:39:a7:b0:4b:ad:cd:a5:f4:94:f3:ff:7e:
                    dc:99:02:fd:3e:00:64:f7:4a:ea:fc:e1:b4:a7:e7:
                    41:cf:e4:bc:93:44:57:a8:12:3d:89:1d:09:69:c6:
                    24:5d:3a:7b:b1:a5:60:de:11:58:26:00:2e:51:1c:
                    ce:0b:27:c5:80:cf:dc:28:2b:92:90:d5:ec:2c:b8:
                    96:44:33:d2:7a:2e:36:50:b7:51:48:0b:40:80:81:
                    4c:0f:34:ea:cb:66:fa:da:ba:09:25:2e:16:bf:a1:
                    6d:f2:1c:c6:77:8e:5b:e1:16:f6:90:f5:08:ec:cb:
                    36:db:95:72:dd:43:9e:6b:6d:fd:7e:8a:22:7c:c5:
                    7c:58:e9:52:76:7e:9b:e8:ea:00:e0:76:65:c5:00:
                    7e:4b:13:a6:76:d2:1f:d9:6c:ec:ca:f1:17:9d:cd:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:29:4C:9D:4A:72:E1:74:B4:14:98:A9:63:30:F3:31:6F:65:1D:21
            X509v3 Authority Key Identifier:
                keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:f9:85:ab:2e:c2:8c:c3:e9:55:88:56:cc:bb:bf:de:f9:
         02:8a:24:a1:e1:ca:91:c0:9b:ed:9c:ff:e4:0e:8f:f2:ff:83:
         1b:31:ca:a1:87:35:9f:de:1e:4b:e6:48:cd:46:dc:6a:7a:90:
         c3:7a:b9:7b:cf:e0:14:fc:df:73:86:48:36:17:7d:77:74:2b:
         89:60:92:4f:b5:b3:56:8c:4e:9f:a5:cf:d6:ff:8c:a0:11:94:
         58:ee:41:36:26:e4:ac:16:14:04:99:e9:a0:e3:98:bf:46:42:
         36:e9:36:2d:dc:65:ac:76:7d:53:60:77:4d:2f:79:3b:96:8f:
         65:d1:17:00:89:e7:6c:2c:e5:fa:30:4d:c7:74:ec:68:82:17:
         33:8b:0c:28:c5:dc:8c:de:5d:55:36:cf:36:1c:c2:59:c7:3d:
         57:6b:e4:a7:8f:2c:95:d2:54:99:ce:3a:27:6d:5a:b2:21:ac:
         0d:fd:dc:c4:21:88:62:c9:1f:76:46:dc:54:67:58:54:a2:c0:
         2d:68:89:10:46:07:56:e8:a1:4e:a3:10:2a:28:c6:0d:d5:24:
         f8:f6:f5:b6:6e:d9:d6:8b:4d:e8:3d:e7:05:10:2d:04:86:a0:
         e8:53:16:2c:d4:da:fc:f2:8e:4d:8b:04:58:76:a3:c2:77:8c:
         fc:a5:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----