Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File:                     Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier:          77jnmBl+/HvgsP9uUFJhQS1P74QOgiLD3Py8XSbMRys=
Subject key identifier:   FF:91:79:D7:70:BC:93:CE:2E:37:04:55:34:85:B5:A5:7D:58:8B:F9
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer:       /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial:       01962DF3DE85C749EA07117EDF234BE74A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number:          0549
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: cnPQFNc3f4yxNKiC7JCfyr7dA1nl5UOuNHlHQOQKymg=)
                          2: zfiw5E-qnyxqvOsxLYX9MrFyy84.roa (hash: 1/skm9ZEWKwE055qHT9FApOuyUCgE73YdLdPkqaA0Cg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:de:85:c7:49:ea:07:11:7e:df:23:4b:e7:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=ff9179d770bc93ce2e3704553485b5a57d588bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:2c:af:58:9e:19:69:5c:07:76:de:32:cf:
                    a6:2d:f3:50:a3:4b:3f:f2:8c:4c:c4:5a:17:86:c4:
                    db:21:cf:07:97:dc:0c:4e:2d:c5:6b:24:05:fe:4e:
                    00:db:81:e4:38:0d:e1:77:d8:92:7d:50:8f:d4:8e:
                    81:08:73:1d:79:b2:52:46:d5:51:e0:dd:5e:d1:34:
                    80:da:fe:75:6d:2b:c3:0d:e8:4a:b7:e5:99:c2:00:
                    94:9d:27:2b:2c:34:54:96:29:c0:45:10:34:d1:39:
                    de:4b:58:8e:45:82:fa:5b:c3:d9:9b:32:4c:28:48:
                    62:b7:3d:52:ed:bc:3c:f4:ae:82:33:65:6d:dc:d7:
                    93:94:03:11:7e:10:33:dc:aa:8d:35:49:9b:08:5f:
                    27:61:71:73:9d:5c:57:77:da:cd:a0:7c:de:40:17:
                    47:a5:12:00:71:3e:18:52:3e:87:4c:f9:d1:e3:2f:
                    6b:c0:32:b3:2c:1b:62:22:fd:e1:bd:49:3c:82:a4:
                    4d:9a:69:2e:f1:e4:ff:e9:b2:09:8d:31:40:fe:2f:
                    ec:84:d8:eb:e9:3e:22:22:47:0f:5e:49:79:6e:2d:
                    19:5b:36:34:84:43:17:12:12:99:b3:9c:f5:a5:79:
                    8f:ca:93:f8:82:54:f4:71:b0:11:b9:4f:83:d8:97:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:91:79:D7:70:BC:93:CE:2E:37:04:55:34:85:B5:A5:7D:58:8B:F9
            X509v3 Authority Key Identifier:
                keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a1:33:d5:54:b9:ac:d7:63:4d:20:62:08:53:71:30:4c:38:
         1a:cd:8b:f0:ba:29:d3:bd:63:2f:11:c6:15:94:bd:e0:bc:22:
         de:36:4f:bd:f7:f2:a6:f9:d9:a8:71:94:08:10:ad:86:41:7d:
         4a:4d:a5:42:18:10:5a:d0:e3:e8:e2:ca:0e:b1:72:83:ac:a4:
         73:f7:bb:cc:5b:ff:15:70:53:8d:af:b3:cb:c2:ae:04:ea:cf:
         d5:57:81:86:48:7c:67:2b:f0:0a:f5:20:cd:ad:42:a8:ef:ce:
         42:81:95:2b:aa:b4:8b:df:53:ce:10:73:b4:b4:cb:db:b9:32:
         73:d7:fc:bd:b2:09:d0:4e:0a:46:6c:d9:8e:06:a1:f7:a8:4f:
         36:d0:ec:50:72:1e:cd:72:2c:26:32:52:05:54:52:54:30:14:
         cb:87:db:7f:c6:f8:4e:1c:95:cc:76:79:01:83:32:ac:f3:1b:
         23:72:e1:9f:69:7f:c0:2c:40:a1:08:92:8c:c6:d3:40:0f:12:
         e9:06:1c:63:b9:f8:90:52:5d:75:93:86:88:45:e1:d3:4d:c4:
         d0:c0:9b:d5:a5:35:7c:bd:ac:53:45:e1:11:29:cc:24:45:6c:
         06:89:f6:3c:45:58:bc:06:29:8d:d7:c5:ee:1e:74:ec:59:dd:
         27:64:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----