Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
File:                     wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json)
Hash identifier:          a25ZN4T/3wWTNdqwYeSewvo1705uwI5I8QBFjve5Bis=
Subject key identifier:   B5:E3:36:97:5C:D8:2A:C1:68:0D:30:38:8C:39:A7:B1:1A:15:92:AD
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Certificate issuer:       /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial:       01962FABA1A9A7648C96CCD206B8BABCB4D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: JPfPPVmim_oMGeKjFN51mz2DXZs.roa (hash: huLyNUibR3FOKspRTI8zL5oJYiyI6ApwBCQ1/RFqhSE=)
                          2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: fRnFV0DnDBOpOsM5weEkCk49i8TGT1WncmPAnJsmxtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a1:a9:a7:64:8c:96:cc:d2:06:b8:ba:bc:b4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=b5e336975cd82ac1680d30388c39a7b11a1592ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:d1:0d:f1:9e:7d:43:2a:bb:86:3a:81:e0:
                    2e:13:0a:f7:bc:a5:62:85:e3:4d:db:5d:28:60:fd:
                    5e:2e:81:79:66:8b:0a:94:a8:d1:d6:68:c5:37:ae:
                    57:25:85:c5:cc:d0:78:7a:67:fd:0a:b4:1b:06:d7:
                    3d:f9:d2:ab:3b:5f:00:7b:08:fa:11:17:fa:95:25:
                    13:cc:c2:d3:45:57:37:22:d3:72:bf:81:9d:f8:94:
                    b5:b5:5f:21:22:0a:55:62:ed:0a:c9:b5:7f:b5:4c:
                    7f:dc:af:e9:25:b2:8f:f5:50:64:80:c3:55:b7:a9:
                    72:64:e4:26:f4:07:45:d7:36:8c:24:ac:58:ab:38:
                    f0:b0:ed:1e:9b:d1:91:df:56:25:38:90:81:f4:b1:
                    33:54:54:8f:4b:d8:88:1e:ed:26:18:1b:a8:70:f8:
                    77:c3:35:06:43:49:4b:a8:44:09:db:78:53:83:fd:
                    d4:11:22:bd:31:d9:65:d2:50:59:8d:2a:60:24:cc:
                    51:9c:7a:e0:ed:36:84:e6:79:95:ab:e4:2a:07:90:
                    2c:fa:36:7a:b3:5d:b5:b3:ed:98:4d:9a:ba:89:ec:
                    d7:f3:a9:d5:ac:6a:b2:66:43:8e:be:1e:46:6e:cf:
                    98:7f:76:7f:c4:90:e2:fc:0b:30:af:46:20:2b:f2:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E3:36:97:5C:D8:2A:C1:68:0D:30:38:8C:39:A7:B1:1A:15:92:AD
            X509v3 Authority Key Identifier:
                keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:26:6d:ff:6c:5c:c5:21:d4:26:2a:0e:b7:3c:eb:9f:68:
         98:00:bc:cb:7a:18:a0:97:61:71:f0:fc:4a:19:1c:89:8d:1e:
         06:e8:4e:0c:1f:4f:5e:f5:dd:ce:66:4d:64:0d:f0:b0:24:f7:
         d8:11:0e:0c:6d:a6:1f:84:d7:3f:a8:9a:24:8d:22:06:2a:0f:
         83:fc:85:d6:d4:7d:54:c4:df:28:19:be:58:47:45:b7:df:38:
         92:dd:65:03:f4:d6:56:d5:99:7e:8e:3b:80:47:4d:84:7e:70:
         d2:02:4b:87:b5:a4:85:a2:4a:8b:ea:5b:2d:a4:fb:d5:3a:14:
         99:6b:33:0b:cf:d9:16:ac:3c:79:21:6c:1f:97:7f:b5:b0:1c:
         7c:a7:cd:49:6b:17:35:f1:20:f5:96:e9:df:90:27:11:84:43:
         a5:ba:6c:c9:73:e9:5a:02:65:63:8c:ac:b1:86:c1:7a:96:19:
         23:40:38:5c:e1:9c:ec:b8:75:7f:70:79:9a:cd:12:8c:62:06:
         f5:da:20:8d:88:8b:0f:4a:bb:4a:3b:91:85:16:b7:12:86:3f:
         7c:80:a8:33:91:0c:47:24:9f:1e:57:e5:25:cc:5b:96:b2:2c:
         d9:c1:89:de:e4:e2:c0:bb:2c:69:98:3f:43:e1:cb:69:3f:7a:
         e9:b5:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----