Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
File:                     wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json)
Hash identifier:          SuLX6wzgPrABanJxHbH199gx3RhEr2wyy5H61O+I+hM=
Subject key identifier:   5E:1E:49:38:08:F5:24:A0:A9:16:A7:BE:E6:46:AC:80:57:12:4F:36
Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Certificate issuer:       /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Certificate serial:       01962F3D736DF6407329A6E2A8A96F62A45C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: WpUhoumLDTywn-hlHQU-VDabUzs.roa (hash: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=)
                          2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: x2RGPcsV6Xtr30yj4xi5yYvEPJw/peVXOJu1DqLl5Fw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:73:6d:f6:40:73:29:a6:e2:a8:a9:6f:62:a4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=5e1e493808f524a0a916a7bee646ac8057124f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:79:57:ee:aa:0c:ad:4a:6b:90:94:f3:fd:
                    9b:bb:73:14:6f:96:46:5d:14:bf:ba:50:0c:a0:10:
                    89:ba:4b:02:78:7d:32:db:e8:3f:44:e6:e7:ab:b4:
                    15:6f:74:bb:21:d4:14:b3:3f:7b:20:59:24:7e:be:
                    19:74:5e:74:cf:56:17:25:aa:6c:66:20:ed:a5:aa:
                    41:82:27:97:a9:99:c7:07:d3:f7:50:98:05:ff:5a:
                    82:47:ef:ae:55:ac:df:ba:d8:b2:71:2a:4b:8d:8b:
                    4b:98:67:3c:e5:5b:5d:df:8a:46:31:82:23:ca:d1:
                    0d:92:0d:68:17:55:b1:34:3d:61:cc:4f:27:7a:c5:
                    9c:fc:36:9b:00:28:fd:0b:2a:46:ee:97:37:b7:e5:
                    34:17:7f:12:88:e5:27:f8:28:4a:d9:05:4d:07:58:
                    c4:39:34:82:5d:15:ba:66:1e:06:e4:e5:37:6a:76:
                    8d:2b:c4:a6:1b:6f:57:3b:ce:1e:11:ba:30:4f:65:
                    b8:80:0f:4d:88:0f:73:7f:e5:e8:70:e4:ed:ff:bd:
                    ed:51:e1:3d:ac:23:37:7d:30:ee:e9:1e:97:58:df:
                    94:25:60:56:fb:4e:03:a4:d3:3b:f5:dd:a1:5c:7d:
                    3c:84:7a:d5:74:d9:09:82:98:44:6b:a6:22:b3:42:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1E:49:38:08:F5:24:A0:A9:16:A7:BE:E6:46:AC:80:57:12:4F:36
            X509v3 Authority Key Identifier:
                keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f4:e4:7f:ac:e4:88:8e:39:f2:d5:ea:c0:6e:bf:6c:b8:7e:
         e7:3a:1d:a7:5c:79:84:c1:45:41:8b:9c:06:40:1b:38:c1:08:
         24:69:3e:95:37:8e:71:eb:15:0c:f3:d6:97:96:e0:f9:5c:ad:
         cd:2c:5f:03:68:e7:a6:e3:61:92:ac:f8:34:ea:30:46:bc:3e:
         ce:7a:1d:d8:b4:21:0d:0e:15:0b:41:00:2e:30:e8:55:74:56:
         4e:06:b2:c6:62:e3:04:d2:c6:e4:c8:7e:ab:73:9b:bb:e0:63:
         de:ca:66:77:77:2a:02:3d:ff:27:0f:0c:13:fa:c1:88:78:dc:
         2a:73:2f:7b:b1:5a:54:d5:b7:4d:99:90:dd:6a:50:68:85:c8:
         71:45:f3:45:26:64:2b:94:35:b3:97:84:bd:ee:c7:bd:53:ec:
         b5:c3:76:f9:92:43:3f:24:07:8e:20:b2:56:e7:04:c9:f1:75:
         fb:99:56:8b:e9:71:35:4d:92:10:38:f0:0d:07:de:97:92:26:
         24:02:2f:f8:cf:a1:c5:49:13:72:b6:ca:18:21:37:bc:76:c4:
         59:d1:7d:70:7b:51:72:75:38:8f:f2:2c:ea:5c:54:a8:a3:92:
         be:7d:78:89:ad:52:9a:fd:89:42:0f:43:4e:e3:e3:de:27:79:
         3f:3b:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----