Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
File:                     WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json)
Hash identifier:          viZSy/IWlKtn0+rFLTpwQRzpGE6YGZy0a22taeJAjy0=
Subject key identifier:   A6:EC:6A:A3:4D:F6:C1:1F:B8:5F:CA:E5:15:D6:44:FB:60:72:97:B2
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Certificate issuer:       /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial:       01962F74A5D5F9A1EF6E8ED20008F2FCB7B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
Manifest number:          1465
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: 2580DhDO7oRxSgRoTYqJtzmDRZ8.roa (hash: 4RUkkYY+CZ3xO00bJ4wL39GFuDvJP7M2BRc09JQ7DH4=)
                          2: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: z44LbhC3x5v+hycG2xY05Y5ifVqNyGXI85rSyvdqFX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a5:d5:f9:a1:ef:6e:8e:d2:00:08:f2:fc:b7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595b243a7233e571c3c173eb8249111906326019
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=a6ec6aa34df6c11fb85fcae515d644fb607297b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:52:ab:97:8a:fb:b2:05:86:b8:d5:34:b3:33:
                    96:62:aa:ac:e7:cf:a5:c7:f8:09:e5:45:db:06:3a:
                    45:0c:82:9c:1a:fc:61:b3:3c:9e:d0:70:ea:3a:f4:
                    bd:e6:e5:f6:6e:14:85:2e:71:f0:bc:ab:68:20:59:
                    94:99:77:94:85:9e:ae:0e:60:c8:d9:ed:a6:48:dd:
                    b8:95:48:79:f5:a5:e3:e1:33:48:b0:4c:4f:60:50:
                    b2:a0:ed:47:ca:be:57:a8:4f:c3:37:d8:70:c5:a1:
                    56:d2:c9:2e:5b:7d:e6:2b:dd:95:a7:8c:ae:b1:a2:
                    4b:db:5d:f6:ac:32:6b:32:60:43:8d:2c:28:a5:86:
                    db:aa:42:6b:c3:5b:f9:ce:52:55:de:31:82:84:e7:
                    13:b7:37:c2:cd:92:b9:c8:5a:df:cd:48:0b:ab:d6:
                    bd:39:b7:23:4f:14:69:4c:e9:3f:be:90:72:33:5f:
                    6a:f2:69:b0:69:1a:ad:f3:d7:bf:7f:57:77:2f:7b:
                    8a:98:7f:58:52:bb:0c:22:06:bc:33:32:40:57:c2:
                    61:d2:70:26:b8:ad:15:77:72:32:e9:14:a9:0d:8a:
                    c6:cf:97:2b:81:10:1c:db:44:ce:df:96:37:15:3b:
                    f4:81:7e:a6:48:21:25:f6:46:3a:7e:b1:9f:73:64:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EC:6A:A3:4D:F6:C1:1F:B8:5F:CA:E5:15:D6:44:FB:60:72:97:B2
            X509v3 Authority Key Identifier:
                keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:22:13:0d:73:f1:d0:2c:4f:1c:6e:f0:b8:2c:4d:e6:a3:30:
         bd:fd:87:70:a8:21:35:66:54:36:25:74:66:73:b8:9e:1d:ad:
         31:57:00:a2:ec:c7:71:fb:f8:71:64:9c:e5:99:ea:e9:eb:7a:
         aa:2b:6c:c9:01:0d:91:50:ff:c6:4d:ca:13:1c:74:c2:79:ec:
         1b:74:2e:55:46:e2:c5:cb:94:21:f4:4f:a5:a6:50:f7:13:05:
         5c:bb:83:47:87:b0:b2:4c:21:9a:10:d8:38:c2:74:8a:38:30:
         41:f9:7d:38:cd:5d:30:72:2d:8a:6d:ae:71:ab:ea:1c:a4:73:
         3a:e1:80:fe:ea:01:92:a3:89:b0:72:6f:d4:a0:e8:67:14:08:
         6a:d7:21:5e:d4:4a:9f:24:9f:3d:2e:dc:9f:02:b5:2b:19:f8:
         8a:db:59:55:a8:3a:f2:56:bc:fb:a9:c3:df:f6:d7:f4:53:9c:
         ae:5a:54:e7:b8:ad:78:85:6e:c1:44:41:37:4c:9c:18:6d:a3:
         98:95:64:43:b2:26:92:08:82:9a:6c:cf:d9:28:f7:b1:4b:13:
         36:e2:8c:16:ee:a3:b7:1f:d9:13:3f:62:3d:34:74:8a:8a:80:
         95:b7:70:58:09:fa:4d:48:21:ae:fb:84:41:b1:56:e5:fa:cb:
         43:db:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----