Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
File:                     Wxos8vE3Re4bv38KdL6tPOUHSFU.mft (raw, json)
Hash identifier:          yvoCjOtAr3ZkvwU4Ff+M+ZYGr5heSlUueuhc9CrhUhk=
Subject key identifier:   9C:DC:57:D1:4D:F5:6E:E9:AE:C8:BF:73:E2:D9:1E:A9:E5:1C:42:48
Authority key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55
Certificate issuer:       /CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
Certificate serial:       01962E61D7BE793A47F6E2D34F8FDE142F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: L7K-XR4rTNFTEnboIJT8rcKDxW4.roa (hash: Orjc5PbTzJEGwidvDgWcdnyYtJunNcWhaUwiDHcpNvs=)
                          2: Wxos8vE3Re4bv38KdL6tPOUHSFU.crl (hash: fVgy1RRIjaOCETuVudUNe1faM0EfFLLENEEe4JNiIzg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d7:be:79:3a:47:f6:e2:d3:4f:8f:de:14:2f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=9cdc57d14df56ee9aec8bf73e2d91ea9e51c4248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:2f:c8:f1:47:9d:5a:a9:ef:17:4b:9f:4a:
                    b1:07:59:3c:7a:c3:21:29:2e:8d:82:63:37:d8:0a:
                    ca:61:a1:a0:c9:07:19:85:b6:ec:2b:5a:0f:2d:72:
                    2a:4e:01:65:fa:fb:3d:5b:72:89:50:af:60:68:76:
                    45:49:8c:a3:16:c9:64:70:35:22:8f:ce:e1:37:76:
                    a6:5f:8c:70:52:b4:85:a0:df:ed:ce:84:30:3a:9a:
                    e3:5a:a2:b3:3c:1e:c6:37:42:b8:8c:61:32:4d:bc:
                    42:10:18:f7:b6:f5:b9:11:03:e1:b3:84:e6:d3:4c:
                    73:44:b7:84:d8:64:8d:f7:fe:2a:8b:ac:c3:06:8c:
                    5f:17:5e:83:df:77:52:d0:5b:77:7b:11:52:49:bf:
                    ad:1d:f8:76:47:52:6d:86:1f:73:b5:96:3b:b2:46:
                    3a:b8:8c:0e:86:07:bd:ee:82:54:5e:3b:7a:c6:3b:
                    c7:35:ea:6c:59:08:e4:6f:ae:05:6e:68:e7:b9:1d:
                    85:91:09:1f:4c:6d:90:66:f4:61:91:d2:59:4c:50:
                    f8:a3:03:a9:5f:92:b4:8f:d7:c5:b4:68:2d:76:67:
                    67:b3:8a:0e:12:38:a4:97:85:19:5f:32:5b:6b:04:
                    1f:8d:54:9f:0e:e6:46:a8:7f:48:ed:2b:8b:2b:f1:
                    bd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DC:57:D1:4D:F5:6E:E9:AE:C8:BF:73:E2:D9:1E:A9:E5:1C:42:48
            X509v3 Authority Key Identifier:
                keyid:5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:43:16:1a:76:b5:52:d5:1e:ca:2a:bf:7b:b6:22:12:a9:
         dc:d9:e0:69:2a:89:e7:03:25:17:ba:4f:d7:48:31:b2:78:57:
         f5:69:55:1e:41:7b:23:aa:64:d8:aa:63:c1:38:4a:07:2f:55:
         4b:ab:dc:23:81:71:0d:73:12:f0:59:8d:08:73:67:84:ba:54:
         ee:e3:a7:23:ce:e5:72:7c:78:7d:60:3a:d6:6b:44:78:49:ab:
         04:4c:42:4d:b5:01:13:74:2e:a4:66:73:0e:f0:c8:8b:d5:2b:
         60:ce:19:f6:f1:b7:e2:4e:70:07:ae:b8:26:0c:61:08:bd:5d:
         61:12:da:40:df:f6:e2:ad:90:91:c5:e3:47:2e:b4:1f:0b:b0:
         6f:68:0b:46:bd:f9:11:b6:06:4e:76:14:d0:84:e2:04:ed:51:
         ca:64:61:06:52:57:fe:80:28:95:b4:0d:2f:c6:c2:db:93:9f:
         dc:df:28:1b:6b:5d:bb:3c:dd:34:97:65:1d:bb:08:57:2d:f6:
         4e:17:d9:49:e1:97:76:5b:21:26:98:7c:bd:37:d2:a7:94:de:
         63:d8:79:b0:bb:1b:5b:95:b3:0b:d2:7e:79:dd:81:d1:be:56:
         35:1a:ec:1c:a1:71:e2:ab:9b:50:02:d8:af:67:47:9f:ae:f6:
         55:aa:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----