Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File:                     WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier:          eqEuHWNM+U54IsDKegLfK5vsKhRWd2+nDoGxXUWrqc0=
Subject key identifier:   49:40:8B:E6:70:33:0A:64:73:B0:6D:C2:62:23:D6:9D:A8:FA:29:3B
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer:       /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial:       01962DF3F50C64EBE303252D828CC125E275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: z4dUpYisxN3uQkIFxiDHdZKHofgEYNvkzgzSI6luN58=)
                          2: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (hash: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=)
                          3: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (hash: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f5:0c:64:eb:e3:03:25:2d:82:8c:c1:25:e2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=49408be670330a6473b06dc26223d69da8fa293b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:4a:3c:18:c5:45:5c:a6:a7:41:43:c3:fb:
                    60:d0:02:6c:3d:3a:5f:49:28:a1:29:16:e7:61:4d:
                    06:6f:57:45:d2:c2:f8:3b:c6:21:fb:4e:9d:3b:24:
                    95:85:90:78:6b:87:ad:57:79:c2:2f:12:44:3d:9b:
                    40:ea:4e:ae:9b:11:b5:db:5a:b5:f9:d8:e0:42:1d:
                    2d:1e:81:3c:28:0a:06:37:bf:bb:66:32:9c:61:d0:
                    c0:48:28:35:0d:c0:f1:24:2c:65:b4:1a:56:27:ca:
                    8f:41:49:0d:47:ef:f2:58:89:95:f4:59:44:21:ea:
                    34:9b:f2:6e:45:1a:02:77:19:99:bb:3a:36:77:d5:
                    9f:0e:52:b2:0f:f4:1f:a2:cc:bf:de:2b:bb:14:4a:
                    08:87:42:a0:66:f6:13:e9:1d:bf:5c:94:09:e6:ea:
                    82:7f:5e:1f:ad:a4:4e:0a:10:dd:bd:25:90:20:cc:
                    fc:f7:d0:d9:48:a7:83:5e:c1:77:26:33:31:31:a8:
                    3d:7b:7a:af:07:24:40:4d:d2:32:b8:c0:30:79:c0:
                    7d:16:de:86:f9:1a:aa:ba:62:5b:1b:99:77:fa:bc:
                    a8:f4:55:30:28:db:79:bc:1d:ee:9f:e6:16:c9:c7:
                    5e:b3:62:2e:e7:75:cb:d0:3a:29:14:a5:f7:7f:a9:
                    08:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:40:8B:E6:70:33:0A:64:73:B0:6D:C2:62:23:D6:9D:A8:FA:29:3B
            X509v3 Authority Key Identifier:
                keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ee:6b:46:b0:cb:1b:1c:84:b3:61:82:a3:63:4e:89:74:55:
         b2:b8:c7:0d:bf:ac:36:5d:4b:fc:4e:0a:63:3b:4e:b9:20:3b:
         5f:ab:13:67:6a:fa:61:e1:16:d9:25:c9:ce:b2:d1:0b:95:a0:
         7f:f4:a0:aa:d6:50:a8:fc:51:55:1b:bc:c2:27:55:74:6f:ef:
         58:1b:1d:81:18:0a:e5:18:a1:03:92:0e:36:18:5d:30:0a:38:
         55:d9:40:a1:bd:58:2a:b8:c5:92:4b:2d:22:5b:5c:06:b1:ab:
         b9:11:dd:fe:ce:0c:4f:b4:53:44:2f:eb:83:88:bc:05:21:52:
         42:fc:67:b1:2c:84:72:bb:19:87:e2:62:d6:e2:32:52:37:8e:
         4a:5a:e3:9d:bd:ee:56:04:52:a9:70:90:da:17:96:d7:aa:7d:
         38:6a:a4:32:2a:4d:2c:df:56:05:60:6e:6a:04:69:9b:9e:b6:
         37:81:ac:ed:10:30:cb:6e:08:82:6d:41:a2:af:66:e4:00:51:
         c1:c1:5f:b1:90:2c:24:c3:5d:25:81:f9:ae:5f:58:43:fb:9e:
         56:67:ee:bc:b3:ff:b3:e5:d3:1d:09:8d:3b:39:6e:31:bb:56:
         a5:b6:26:d8:28:5f:e7:8f:88:70:46:50:fe:b6:e1:85:37:0a:
         c8:c9:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----