Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File:                     wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier:          J9ElK0N+MAJXVLZhpctEPpfRdhImoVd9WAkSs6flyJQ=
Subject key identifier:   CA:3D:89:EC:B9:F5:F6:6F:05:32:43:C5:3E:B5:55:BE:E7:75:3D:DA
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer:       /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial:       01962DF3E4C4F509E167C3C79AC11C6DF278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number:          0724
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=)
                          2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: Jgpob/o+YAR2Kkvnii/jgEYXgOp1IV3k4+tU4gkvwFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e4:c4:f5:09:e1:67:c3:c7:9a:c1:1c:6d:f2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=ca3d89ecb9f5f66f053243c53eb555bee7753dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ba:3e:05:1b:3d:6e:9d:22:58:cb:f2:12:87:
                    8f:92:8a:c5:90:ee:03:aa:62:3f:95:fb:33:e7:02:
                    46:de:52:c5:03:c1:c5:cb:61:16:da:06:b9:55:fb:
                    40:0c:da:55:83:d0:62:cd:24:93:f5:e6:62:d4:39:
                    bf:b4:21:64:d9:e4:21:64:93:14:b1:01:c0:12:18:
                    40:10:87:cf:29:38:11:c1:e2:06:05:c4:19:1f:bb:
                    73:a7:7e:67:12:61:d9:97:c9:96:4f:8f:cb:d9:4b:
                    76:bc:f0:47:00:cd:6d:86:1b:e7:f4:ae:cd:5d:b5:
                    c0:a2:93:4d:54:72:ad:0f:76:f5:98:1e:ef:ba:db:
                    ff:06:84:0c:6d:49:69:75:58:fc:df:81:54:fd:9c:
                    de:82:2e:89:c5:c4:e2:a5:83:90:ad:34:46:6c:ee:
                    85:51:17:45:46:3d:d5:7f:68:f3:e5:29:bf:20:bd:
                    16:54:2d:c0:42:a5:c8:27:27:83:c4:11:57:0b:b9:
                    f6:99:a4:51:92:71:34:24:d2:e7:b1:8f:05:90:45:
                    b5:89:f0:99:b8:f9:a4:06:44:ed:ee:1f:e6:f1:72:
                    82:9c:7d:44:b7:5a:13:40:80:09:d5:7c:17:e1:bf:
                    44:e6:04:7d:c9:c5:39:97:29:25:b5:20:d9:05:96:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3D:89:EC:B9:F5:F6:6F:05:32:43:C5:3E:B5:55:BE:E7:75:3D:DA
            X509v3 Authority Key Identifier:
                keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:58:6e:02:ec:33:83:5d:07:5c:15:31:b2:b9:2e:56:9d:0b:
         81:5a:2b:41:0a:a9:d3:e2:f3:bf:55:4f:eb:c2:bf:cd:18:53:
         14:2f:54:d4:65:75:5b:df:f4:ae:9f:f5:b9:ca:45:45:f2:61:
         a7:9c:eb:07:f3:58:18:33:07:44:6b:c7:af:34:31:93:77:73:
         70:b8:73:60:64:dd:47:92:9a:47:be:ca:3e:0a:bf:50:45:4c:
         e9:8b:0d:8f:6a:de:d6:af:63:a9:5a:2a:98:56:c8:3f:0c:21:
         5f:a7:69:60:43:01:7a:05:e6:97:6f:03:0d:cd:59:50:7f:8d:
         5b:f3:72:7b:c0:76:89:f3:8a:d0:09:60:d9:79:53:52:cf:e8:
         a0:52:3a:c1:b0:a8:b3:5d:26:d0:2a:b0:75:64:63:12:8b:81:
         77:fe:19:70:c1:73:32:72:86:ab:cc:f8:8d:9f:6a:9b:81:74:
         5a:b9:3e:55:33:7d:d8:ec:82:ff:27:c7:91:62:89:2c:68:de:
         1b:9d:a4:a1:81:9a:16:76:09:f8:ba:6c:c5:ee:26:e9:43:33:
         51:4a:e2:04:13:eb:de:5b:cd:7b:87:46:0a:19:bd:7f:9c:86:
         88:42:c1:ce:1a:e0:e1:c3:38:77:5d:61:93:10:97:f6:d1:61:
         3f:8f:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----