Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File:                     wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier:          yHHqoWzXhfRO9yQ1XpdcP64E5zRWEQQS4QJGXvJP0WQ=
Subject key identifier:   4B:B9:21:7C:0E:75:AD:86:93:DC:29:DF:4B:AE:FD:E7:64:12:1E:E8
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer:       /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial:       01962F3DB7A8E76E749A08CED182D3D7BCD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number:          0A5F
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: 7DnpwEFQPGw3dVrsKYl79tcIDfCSq1m4OZiYqthOrFI=)
                          2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b7:a8:e7:6e:74:9a:08:ce:d1:82:d3:d7:bc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=4bb9217c0e75ad8693dc29df4baefde764121ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:dc:b6:2c:02:74:66:96:1d:94:5f:3a:0c:
                    c3:c4:a9:b4:f1:fd:72:4c:8d:65:91:b4:de:5b:c9:
                    2d:bb:25:5f:1a:46:cb:1b:d0:cd:69:a7:c1:0d:03:
                    05:01:bd:c5:fa:2a:8f:eb:aa:de:cf:04:83:cc:21:
                    ea:63:77:6c:a1:42:84:ed:e4:5a:a4:40:e8:1b:38:
                    3b:f0:56:6b:aa:41:40:2d:49:5e:1f:f8:d3:a7:11:
                    75:77:19:02:45:d6:ed:60:ba:c3:e5:cf:ba:50:c6:
                    f2:b0:7a:e0:2f:e6:1a:7c:93:d6:43:6e:e3:40:35:
                    45:7c:e4:b7:41:88:5c:92:ca:81:21:0e:74:2f:75:
                    a9:63:98:48:1b:03:f9:54:52:af:3a:be:6d:c0:80:
                    50:12:d3:30:9d:0c:4a:bd:7d:f1:7f:c8:18:17:d3:
                    80:57:b7:95:8b:04:08:7e:6d:26:ff:cc:a1:c3:90:
                    72:e6:7c:3f:3a:5c:a6:2e:01:2e:be:6d:b1:40:4e:
                    5c:a8:ab:cf:5c:62:41:f5:a7:10:3d:0a:b6:ab:b9:
                    f3:f5:5b:50:41:b5:0a:42:6f:15:2e:f5:06:60:cf:
                    4a:87:4b:40:7d:ff:86:7b:4e:71:55:f9:81:f5:84:
                    83:14:e4:e0:90:dc:a3:a5:39:7b:d9:a5:f0:97:4b:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B9:21:7C:0E:75:AD:86:93:DC:29:DF:4B:AE:FD:E7:64:12:1E:E8
            X509v3 Authority Key Identifier:
                keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:db:9c:4e:6c:41:ab:39:2d:61:e9:2a:2e:1b:d7:8f:1f:49:
         ad:1b:67:ff:54:db:24:b0:ef:9b:29:c7:ec:5e:8b:16:13:66:
         d6:67:53:cd:b1:80:aa:1c:be:79:9e:e7:e9:c8:01:ba:60:77:
         c3:81:cb:c7:25:ee:ff:e1:67:a1:dc:eb:fd:44:23:83:62:1f:
         3d:68:b8:b0:ce:91:a9:56:17:da:03:bd:13:2f:60:df:78:b8:
         48:bf:b0:86:25:25:f4:8c:e4:63:8c:99:c2:ca:1a:57:d5:63:
         21:2e:d9:c6:10:36:d3:48:1e:dc:d2:bd:0b:42:44:4e:41:d9:
         05:b3:f9:bc:16:77:96:07:00:0a:9c:d7:f6:b0:41:0f:25:3d:
         de:0c:75:d3:75:6a:2b:5f:de:08:b6:45:d1:1f:87:fd:e5:c0:
         26:5e:56:00:48:77:ff:37:05:2e:dd:8d:b4:91:c1:c0:a2:0f:
         ab:46:9b:3b:b9:86:41:dd:1e:d3:fd:cd:41:1f:94:5f:a1:14:
         9d:3d:9d:14:61:c3:06:27:b4:9a:1c:6a:6b:f7:09:1c:53:09:
         70:75:b2:8a:9c:b9:3c:86:d4:fa:c7:e6:28:07:46:f0:15:87:
         ba:3d:00:24:84:e4:29:7b:b2:7d:9f:09:e3:01:21:c3:86:5b:
         ce:7a:2c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----