Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File:                     WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier:          0zv8gQdOMxXD94GN5vykl9UXzlh1SIvpj3n04hyzt5g=
Subject key identifier:   3A:D6:B2:A7:7C:31:4D:CD:E9:3B:BF:4F:69:61:FD:B0:1C:7D:B3:8F
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer:       /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial:       01962FAB84597A441AC91A1579B1E860C2A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: udB5HeUZcmTCH6+2rR2CqJaih2A88kRHFqldA18FtyQ=)
                          2: vt15ABy3zJP47x5DikC4lY7LNe4.roa (hash: IdpTO09MEQGHcGdgBzndMJHenkqW9uYtr/gnL2zPkrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:84:59:7a:44:1a:c9:1a:15:79:b1:e8:60:c2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=3ad6b2a77c314dcde93bbf4f6961fdb01c7db38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:c2:e8:25:c8:ec:49:94:83:18:8e:a4:16:
                    c7:4d:19:af:69:1c:6b:b3:c4:33:d3:62:16:a2:55:
                    f2:e0:f2:49:13:f0:52:05:b8:3c:27:2d:dc:16:38:
                    99:d2:79:dd:5d:4f:74:55:e7:16:06:4b:a9:04:0b:
                    3f:0e:1a:f9:69:d6:e9:37:fc:c7:8e:be:93:5e:bd:
                    aa:7a:a3:ed:c4:4f:0a:e6:04:0b:d4:f6:82:1d:eb:
                    8e:42:11:83:89:1d:5a:50:d2:51:39:78:bf:f3:ed:
                    b4:a8:e2:ca:0c:e7:41:08:96:dd:6f:b5:fc:34:4a:
                    16:30:7b:bb:64:b7:48:19:a0:c4:fc:37:42:65:1b:
                    c7:ab:ca:0e:db:e5:34:c7:fa:e5:ea:fb:2b:c3:26:
                    a6:86:29:b0:12:a5:11:8c:37:1e:29:1a:02:5f:c4:
                    09:72:7b:92:a9:e0:c2:bf:ae:51:5f:ee:7f:66:73:
                    ab:2d:69:83:0a:42:94:c1:dc:38:fb:a4:19:8e:c3:
                    31:32:56:64:96:b0:01:2d:bd:e1:7c:0b:a3:cb:f2:
                    c3:e2:b0:dd:ff:5b:16:1f:f1:d7:07:c7:2f:83:4a:
                    4b:2e:b9:80:48:6c:f8:74:74:8c:6e:37:01:94:09:
                    e8:b6:f8:5c:bf:76:98:89:5b:34:6f:3a:ab:f4:3d:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D6:B2:A7:7C:31:4D:CD:E9:3B:BF:4F:69:61:FD:B0:1C:7D:B3:8F
            X509v3 Authority Key Identifier:
                keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:45:30:49:c7:7a:66:85:67:e6:9f:a2:0b:69:de:b6:07:b6:
         49:3e:4b:4d:2a:cf:f0:58:d1:a7:63:ea:41:7e:fc:bd:4f:12:
         15:4c:c3:0c:fa:68:8f:c7:44:a3:b5:7e:e2:6d:25:51:a4:62:
         8e:e7:99:72:41:0d:aa:8f:b6:b8:79:ef:05:2d:14:3e:85:40:
         3b:b7:cf:3f:9f:bf:1e:95:4b:d9:19:e5:dc:e3:4e:2e:fb:9c:
         9d:1f:5d:2d:4b:b5:68:49:1f:02:6b:2c:8c:ee:3e:2a:bf:dd:
         1d:ed:8a:8d:58:94:91:21:59:f7:1d:74:aa:d4:90:54:11:fe:
         ae:47:c3:e9:7a:c8:9e:de:84:b1:5b:06:ff:cb:62:1a:7a:62:
         1d:2b:2f:e3:59:80:1a:92:05:d7:df:76:bf:e8:4b:17:68:a6:
         4a:73:b3:f3:93:f1:a8:8c:52:7f:99:3d:86:4a:fd:14:e7:27:
         cc:5c:10:81:3c:7c:52:97:ae:28:0e:41:35:a4:77:8e:6d:45:
         dd:b8:7a:6b:a7:c0:60:f6:0f:83:56:87:6e:da:c5:8d:e6:57:
         74:f4:03:46:7f:1a:b0:28:6f:23:3b:26:45:00:77:78:0e:ea:
         05:49:e8:a7:e4:1c:bf:d5:c3:d0:23:ce:04:08:3b:9b:9e:d7:
         16:75:39:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----