Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File:                     WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier:          F8RsWonMnAPnmSfpgYqoGAxzdEL4QFAyPzNOfbuLImo=
Subject key identifier:   DF:70:2D:A8:E1:25:9B:E0:65:E6:8F:96:47:19:73:F3:1F:94:57:1C
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer:       /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial:       01962E98E45123838C483AFE1A1C60E93A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number:          0EAC
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: 7UOjyf-6bS8r8zJDoqOo76_7Llk.roa (hash: M/fakT1uObMb7UW5IWYfhtUN1rDOGMnXTsxFWM6dOkk=)
                          2: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: UQ89nJOhRgw/xoeMizPTIhbPV2NCl1MdPFEKrbVZFzA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e4:51:23:83:8c:48:3a:fe:1a:1c:60:e9:3a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=df702da8e1259be065e68f96471973f31f94571c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:84:f4:fa:24:c5:5b:e0:95:38:18:e2:29:
                    68:b5:1d:73:45:33:db:95:7d:8a:34:39:f5:08:77:
                    57:e5:19:35:f9:5e:9d:18:96:88:bd:93:f1:10:08:
                    fd:90:26:74:d2:5f:5d:75:65:eb:27:a7:f3:6e:4d:
                    96:aa:ff:a5:f1:7e:3a:84:4e:ad:de:6a:0a:e4:c1:
                    88:0e:64:db:70:c6:eb:07:a1:fc:43:d6:c4:26:7b:
                    4b:46:59:12:ed:76:a7:86:ed:5b:ea:cc:10:dc:65:
                    60:0f:08:19:f8:d9:a8:7b:23:f4:a9:fc:36:12:77:
                    bc:28:a1:8d:c3:b3:48:05:b8:09:c4:25:40:18:9e:
                    7e:cb:8b:26:5d:72:18:cf:2f:7c:32:ac:23:d0:bd:
                    11:85:ae:41:20:c0:12:c7:3c:a4:56:51:a8:6c:ee:
                    65:49:33:1a:48:66:cd:2f:45:ca:af:d7:2a:25:d9:
                    5a:8c:96:61:77:2b:d4:ea:18:e0:72:2b:2f:0a:98:
                    0c:0a:65:6b:32:eb:d1:b0:d0:fb:b7:fb:c7:1c:6c:
                    e4:69:65:bb:87:53:64:10:a1:13:ed:5e:7f:93:96:
                    e9:ce:42:d3:50:0e:74:8b:de:aa:27:cc:a0:8b:01:
                    b0:7b:22:57:ac:58:ab:f9:76:99:5f:ef:52:b4:c9:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:70:2D:A8:E1:25:9B:E0:65:E6:8F:96:47:19:73:F3:1F:94:57:1C
            X509v3 Authority Key Identifier:
                keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:67:8e:a3:96:33:59:3e:06:d7:b9:f1:43:34:80:74:90:b2:
         24:af:7f:26:cf:30:b0:1d:7a:ef:e5:da:e6:f5:55:a8:3e:fa:
         ed:bf:82:85:13:2a:a1:05:14:f4:29:9a:8a:f7:41:25:ee:d8:
         18:48:ee:a4:a2:34:c5:85:3b:0a:07:24:91:97:40:86:9e:1b:
         f1:aa:f7:32:12:91:61:b8:f8:ef:38:aa:08:5a:a8:fe:f2:fb:
         cf:bc:02:b8:46:22:11:8b:f8:22:78:b4:7b:0a:e6:1b:3a:eb:
         02:10:f9:64:1d:b7:e6:d8:ee:8d:72:36:93:70:c6:79:25:af:
         11:36:c2:81:ef:93:89:7b:31:97:d6:5b:54:d3:02:b1:93:76:
         09:f8:de:84:d5:e1:42:ee:72:fb:b7:74:e7:c0:80:7a:8c:09:
         2e:58:91:49:bc:98:b1:6b:0f:02:45:45:19:99:0d:bd:ea:13:
         fa:ea:42:01:60:d5:d6:d0:08:5b:bf:88:49:be:ce:55:5c:fe:
         67:2c:08:d3:8e:e7:f6:d4:5c:1f:ea:5a:ca:fe:fd:2d:4c:0e:
         4d:9a:f8:2b:24:f1:b2:20:b0:a1:9c:51:f1:d7:b3:3d:fe:b1:
         2e:54:6f:94:b6:37:dc:79:d8:0c:4c:eb:a3:f1:49:ad:f8:77:
         22:1b:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----