Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File:                     WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier:          u8u0qDeRNnMGlCM+NN+swLE9n4wugeb4Sioh36+ICJE=
Subject key identifier:   68:BF:83:C0:1B:AF:AD:62:BF:72:50:3D:DD:0B:D1:5D:E8:81:4D:34
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer:       /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial:       01962E98E40E35B617650B043EAAB633FB3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number:          1264
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: 0G2sdhjp5lZnzYHlHNnybNAXWaA.roa (hash: uK859gUUbnU60gGhJvTBc709jYBTwYoz8yDVwe5ASzQ=)
                          2: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: cU0n/j5kqnQEl3tQGyBRkSHyp3i4O3M7usKU3lYV7wU=)
                          3: YgQwuXy4fXHjt8yt23lzdNRUNeE.roa (hash: JYij/MqawhcXCZJhGzOCCeBPBmK0ZpHAFOooBbBrHTk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e4:0e:35:b6:17:65:0b:04:3e:aa:b6:33:fb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=68bf83c01bafad62bf72503ddd0bd15de8814d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:99:d3:cc:a0:45:b6:74:ed:a6:bf:2f:fe:
                    87:bc:ad:94:8d:33:cc:9a:3e:c4:43:57:80:18:37:
                    50:b2:95:34:c5:0a:ea:b7:72:0b:14:b8:ac:78:0b:
                    2f:22:e2:e5:e4:81:ba:4e:19:c6:da:f2:3f:02:c7:
                    7d:8b:30:4c:cd:1d:e4:1b:70:bc:0a:ea:fb:1a:9b:
                    3f:25:72:72:c7:d3:68:f2:66:da:bc:b1:5d:0f:c7:
                    53:93:f6:d6:fd:30:1f:6c:4d:73:48:43:28:f5:5a:
                    44:c9:70:4c:34:60:97:a9:37:21:87:d3:3f:97:cb:
                    b1:39:b5:89:27:4a:71:2b:1c:42:ef:15:5f:41:02:
                    f2:f0:14:69:ba:69:08:0e:6d:34:f1:4f:d0:db:f5:
                    41:a7:f0:77:e0:ec:09:ac:cd:d2:aa:3b:56:0e:d6:
                    0f:4b:93:48:fe:75:59:5d:ea:6c:10:32:de:3c:c1:
                    e0:20:a5:05:2b:71:a1:8d:67:51:5d:33:c6:01:a6:
                    14:01:60:a8:76:13:97:77:ff:2e:a1:49:31:32:21:
                    45:bc:dd:e9:3c:bb:eb:55:3b:fd:a4:a4:40:7b:70:
                    9d:d7:b4:48:12:9e:5c:ad:9e:77:dc:6f:55:60:17:
                    b2:3e:17:b2:8b:2f:9f:a3:c1:86:d2:b9:35:8c:a9:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BF:83:C0:1B:AF:AD:62:BF:72:50:3D:DD:0B:D1:5D:E8:81:4D:34
            X509v3 Authority Key Identifier:
                keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4c:ce:4e:98:54:f1:af:11:23:06:55:7c:ff:f0:b2:9c:d8:
         bf:c6:a8:44:44:8e:07:bd:ee:f6:15:c6:44:6d:df:17:0f:bf:
         47:46:0f:96:07:1f:17:2d:20:61:6b:ea:64:a2:ec:2f:99:af:
         6f:20:08:dd:b5:51:5e:ba:15:f7:58:86:03:88:2a:80:ba:4c:
         7c:8c:c2:e0:86:6b:ca:b7:ea:dc:f4:c9:28:5d:b5:42:94:0b:
         08:2d:7e:6b:b6:7f:56:77:b0:0d:49:ad:83:00:fb:66:b9:94:
         47:ae:21:a3:2e:29:90:c4:ac:44:f6:e1:f2:6a:26:85:d6:62:
         99:ac:15:68:1a:89:59:73:9b:2a:7c:5c:21:aa:ab:1d:b5:54:
         cb:e3:e4:9f:ec:8a:7c:24:86:37:68:97:cd:61:1f:c2:dd:f7:
         08:b1:13:27:bb:ac:4d:32:11:cf:c3:34:5d:9f:29:9b:cf:c2:
         da:1d:d0:77:2f:66:4f:52:f5:64:69:55:2a:d5:77:5f:33:41:
         a5:06:58:2c:36:0d:7f:67:55:f8:b5:e5:b5:27:3b:6a:70:87:
         7b:da:01:05:08:65:f0:54:b8:47:30:c3:e3:05:d0:93:24:30:
         99:4c:f4:85:12:d1:ba:dc:d1:46:23:1b:53:ef:1c:9f:aa:06:
         35:3a:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----