Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File:                     WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier:          ywqRVgoq7kIWMc2hlAnBJnge9lFMNfuOMXW4RNm0sOY=
Subject key identifier:   E6:31:B3:E8:88:7A:3A:18:10:70:02:47:B1:05:53:30:24:88:55:A5
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer:       /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial:       01962E2AF13D2BF538149CC4F3A4A00256A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number:          0E36
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: wC628W3RzKd/3vjOmnim8VYG1IzYCD6hzGLQJE0wTtE=)
                          2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f1:3d:2b:f5:38:14:9c:c4:f3:a4:a0:02:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=e631b3e8887a3a1810700247b1055330248855a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e4:b6:2a:6d:b6:89:35:72:e4:f3:97:f4:5b:
                    28:d1:65:41:eb:66:5e:24:2b:2c:fd:20:1b:ce:9d:
                    c4:cc:65:d4:8e:53:02:ed:6f:30:1d:02:02:78:96:
                    c5:13:4f:33:9b:d7:fe:42:02:d0:b0:7e:53:16:6a:
                    d1:c6:17:8a:8a:7a:39:88:a2:4e:5f:99:53:1b:b1:
                    85:22:13:6b:8d:db:3e:c6:4b:e2:f9:1a:b1:b0:94:
                    23:1d:a0:78:9a:f5:e4:c5:bd:d6:ce:38:6a:11:1b:
                    89:28:c8:28:5e:08:fd:27:72:39:a8:4c:3f:63:bd:
                    47:61:d0:eb:33:59:41:b5:f0:dd:07:ff:54:fd:fc:
                    71:99:98:d6:f4:ec:5e:fa:a1:6e:22:7d:e6:1b:66:
                    88:b3:0d:8c:8b:15:8b:8e:19:3b:07:13:98:74:91:
                    6b:b7:a7:7c:87:5b:9c:df:0c:26:16:d9:99:6b:50:
                    70:81:60:de:96:4d:e8:a4:27:88:90:34:fc:9b:9b:
                    30:a8:2c:39:91:4a:ad:0c:85:89:4c:03:86:5a:6a:
                    5f:05:fd:60:d1:9f:13:57:ef:16:46:9f:a1:02:1e:
                    b8:2a:59:8f:1f:29:b5:9d:28:8a:df:20:bc:69:ee:
                    82:08:ae:d8:96:2d:87:8b:69:84:9d:cb:46:fe:1c:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:31:B3:E8:88:7A:3A:18:10:70:02:47:B1:05:53:30:24:88:55:A5
            X509v3 Authority Key Identifier:
                keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:11:2a:f7:af:78:54:ee:70:91:0a:1a:32:eb:c3:e7:bb:5f:
         f7:43:f0:ee:fb:08:a6:a4:20:56:6c:cb:4d:4a:33:c6:5d:23:
         0a:a0:83:56:d8:f8:16:54:99:2c:c5:6a:a4:90:bd:d1:4d:f8:
         95:ec:73:d8:d1:af:eb:d4:e5:28:d0:7e:b9:12:1a:8e:e8:3e:
         b9:2a:70:d0:64:ab:04:3f:9c:4b:14:4d:59:59:20:9e:77:11:
         6d:10:0d:fd:df:a4:e9:36:b3:95:1f:5f:58:ec:bb:59:dd:9a:
         f1:29:69:27:4e:95:33:aa:ea:ef:a4:e1:47:c6:c3:dc:e4:f5:
         7a:70:74:56:f3:69:ae:bd:65:c5:1c:08:ae:03:50:bf:92:e0:
         23:db:31:98:97:24:67:71:e7:18:4b:2c:e8:5c:31:2b:e0:a0:
         90:87:84:37:d1:e9:df:2a:a4:82:0d:b2:66:58:a1:fb:b7:b0:
         46:86:75:74:3c:76:1e:e0:f7:10:b2:0c:f1:0f:13:2d:c5:27:
         50:13:b5:7b:b4:6a:da:c8:cc:b1:91:7b:eb:44:fa:a5:a2:ed:
         a4:67:58:92:46:7c:38:fc:8c:62:b8:7f:ee:09:3e:9d:27:d2:
         1a:50:b3:c2:56:2c:51:59:ab:b3:0f:a7:39:28:83:61:fa:67:
         4c:19:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----