Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File:                     WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier:          MctTCkXVV++xbCnxTkIzSNz9e8nQZKba4+oj2zYQZqU=
Subject key identifier:   C2:C5:FC:1A:C2:D9:BD:E5:3D:D8:20:49:95:5A:71:2E:D7:A4:44:0C
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer:       /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial:       01962E61BC1EEF092A345873452D5F30DC74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number:          12E6
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 1-NHXjtqrvVrRCtlhC4QnYQDdZPQ.roa (hash: 5tQ4LpDD9EcQQczJTsl4dpwzoP4ak/HQs6biLiGOV3E=)
                          2: 2UCbDoS3ycyYJJre1asZT-TvgMA.roa (hash: DT/mBjBdX0oTgiUzQgQuXZrljdo+CoIj0mpOVzjBOfI=)
                          3: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: MU4ORf2VY/lG7gS25nY5/fKWsxAwT0Y2Q4dz2WFZf+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bc:1e:ef:09:2a:34:58:73:45:2d:5f:30:dc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=c2c5fc1ac2d9bde53dd82049955a712ed7a4440c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:31:21:ec:b2:d8:50:e9:a8:c0:ac:05:32:
                    3d:ce:7b:d5:77:70:56:51:c5:c4:da:15:1b:03:19:
                    db:5a:e5:1e:d4:4e:73:d9:c8:df:b7:3b:19:11:c6:
                    d7:e1:e5:08:24:b4:0b:47:de:03:9e:ce:07:74:05:
                    e7:3b:f7:87:19:0f:8e:4a:25:d2:43:5c:54:6e:d5:
                    51:e2:eb:d9:5b:cd:fe:13:99:43:87:f5:0e:f0:f7:
                    97:3e:09:a9:f1:0f:e0:b3:f2:18:59:15:26:91:8f:
                    f3:ec:e2:2c:4e:c6:95:55:f7:0b:8d:bd:cc:0c:da:
                    0a:f3:91:ce:39:35:c1:d8:87:1a:35:86:3f:3a:e9:
                    7d:92:44:a9:c8:3c:2b:7a:49:db:3b:f0:a1:55:5d:
                    b1:35:ed:35:0c:ca:e8:cc:4f:06:b4:6b:e8:fb:65:
                    df:ca:86:e2:e4:fb:c7:fe:50:0d:01:f9:b8:eb:f1:
                    cd:44:4a:24:33:65:c0:0b:c1:e5:66:c5:e0:82:93:
                    81:d1:60:4a:6c:83:79:23:0c:53:f7:4e:d1:3f:a3:
                    8f:87:44:0b:de:4c:4f:7f:b4:1d:32:ad:12:ab:a6:
                    ea:65:6d:fc:fc:0c:0b:16:a9:ca:20:fe:2d:90:b0:
                    3e:02:da:3d:54:b8:8a:80:34:5f:8b:94:6d:d8:62:
                    e6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C5:FC:1A:C2:D9:BD:E5:3D:D8:20:49:95:5A:71:2E:D7:A4:44:0C
            X509v3 Authority Key Identifier:
                keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:64:29:6f:44:1e:10:41:23:b1:11:75:d4:34:83:fa:5c:ca:
         5c:c8:a3:b6:43:4c:51:ac:04:6d:ca:55:ef:9d:a8:83:c9:9a:
         92:75:bc:3f:5d:39:49:24:a0:ab:31:fe:4d:b4:81:5a:03:90:
         da:e0:fd:ab:71:cd:7e:c9:eb:60:1c:e0:e4:19:5d:db:0b:f4:
         5b:30:fc:bb:38:99:45:d0:2e:08:42:30:5d:9e:9a:cf:8b:43:
         62:d5:ba:74:27:69:96:e5:54:33:bc:6f:3c:36:fa:03:8c:88:
         ce:84:df:fd:9d:b3:df:64:fd:27:8f:0b:d0:ee:fa:90:64:83:
         83:bf:0f:67:5d:31:52:f0:13:a9:30:ff:97:80:2f:07:a5:aa:
         0f:61:fa:ab:ba:12:dc:a8:7f:ea:80:c0:54:70:c4:da:47:bc:
         e6:27:b3:63:b8:ab:7e:69:84:a1:c3:0d:af:9b:e6:b0:d6:2f:
         58:7c:a6:bd:1d:e2:0d:6d:cb:15:72:fe:91:c5:33:2e:cf:a7:
         47:b1:7f:0d:65:7e:c2:b7:05:c0:26:73:eb:ea:06:a9:b0:39:
         58:45:7b:95:73:31:c9:9f:e5:6c:fc:8e:2c:27:8f:5f:7b:1d:
         bd:06:4a:42:29:49:6a:85:5c:76:6c:4d:f2:bd:e9:e7:46:e2:
         58:17:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----