Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
File:                     WPde8NYw4dCGeQygt45-744qz7s.mft (raw, json)
Hash identifier:          Sb7pWkgLTQYoUCaHU7IBnaBS3s0h15S+IW6nAmirxcg=
Subject key identifier:   6D:D7:44:3E:BD:E0:F3:A2:4B:49:88:0C:B7:E3:7F:B6:5C:D0:42:7A
Authority key identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
Certificate issuer:       /CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Certificate serial:       01962FAB69DC163A3ECA9C65B5040DAB3C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: WPde8NYw4dCGeQygt45-744qz7s.crl (hash: elf7mU5ujTy0MV45nAHCxWt8xmJdi86Rak1FwCICtLg=)
                          2: x5rquIVhJ13GXmSiEvGgLAga1-w.roa (hash: 89X00FnyaHqizMTzCA2kNKHXqUvFiwqZlo80Pxfjk08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:69:dc:16:3a:3e:ca:9c:65:b5:04:0d:ab:3c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=6dd7443ebde0f3a24b49880cb7e37fb65cd0427a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:27:85:bc:6b:42:d1:d7:14:7c:a7:6c:79:
                    08:cc:11:17:71:85:59:d9:67:75:6f:16:e5:9a:90:
                    52:2b:ff:94:0a:70:22:4c:63:83:2d:46:57:53:e5:
                    1d:0c:45:fb:d2:c0:90:dc:8a:a0:2c:be:40:00:8f:
                    0c:e4:0a:42:6b:c0:f3:70:b0:7c:4e:39:2d:0f:2a:
                    e8:fe:8c:24:ff:30:d9:a7:fb:46:a4:8b:01:8a:56:
                    43:cf:b8:17:56:1c:e6:c2:6f:ca:c2:69:1d:4c:7d:
                    2d:35:7b:39:6b:86:79:e7:c1:52:7a:77:cb:7f:2a:
                    93:37:61:05:32:3a:e5:9f:7d:11:40:26:02:a4:89:
                    fb:d8:cc:1a:5a:45:d8:39:3d:3c:11:f9:91:7e:f2:
                    3a:4f:bd:c9:d2:07:c4:66:3a:bb:45:41:93:27:15:
                    ff:a1:5f:38:e0:14:a8:68:5a:e1:f4:70:1b:f7:ec:
                    3e:b4:09:31:f8:2c:bd:3c:43:0a:cc:1a:49:52:ab:
                    da:07:35:2d:ed:f6:b2:98:95:3b:84:83:74:00:6c:
                    a7:bf:4b:93:36:98:f3:6f:1a:47:df:b3:8d:92:96:
                    a1:03:4d:db:ab:cd:f7:a8:06:e8:4d:e5:1b:91:fe:
                    90:e4:a0:6f:dc:1d:e7:f5:4d:27:75:eb:16:bf:43:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:44:3E:BD:E0:F3:A2:4B:49:88:0C:B7:E3:7F:B6:5C:D0:42:7A
            X509v3 Authority Key Identifier:
                keyid:58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:9e:f5:93:ea:6e:5d:1a:b6:d0:fb:d5:66:83:e1:b8:46:
         9d:71:a6:40:4a:d5:a9:f3:56:fb:48:22:70:b9:51:d1:9c:8e:
         a5:d4:5c:b2:e9:d7:cc:88:6a:57:7c:65:f3:ab:ac:30:22:b2:
         19:ba:58:41:7b:16:e5:28:bb:f8:9b:b6:cf:f6:b9:4c:5b:4f:
         05:2c:fc:cd:a0:52:b2:53:4e:91:9a:69:9c:b8:a0:d6:7c:62:
         b7:9c:68:19:4f:d5:fa:d4:17:e5:90:56:49:2a:54:a8:9d:f3:
         d0:f3:6e:12:9a:9a:78:c6:fb:f3:dd:43:b4:3f:60:12:b8:9d:
         0c:71:fb:4e:5f:63:99:97:eb:b0:75:75:b1:c5:42:b3:37:ee:
         e1:7a:78:7f:f0:47:e6:bc:60:48:2e:f4:b6:89:9b:76:ed:b6:
         22:1d:b2:ad:17:86:ac:25:c6:8b:e4:20:09:d9:a9:96:33:4b:
         c7:52:c3:ad:b6:1e:c2:a7:27:49:f0:29:5e:1b:b0:8f:4d:6b:
         70:da:97:59:8f:aa:e7:08:30:ab:92:89:40:5d:84:aa:54:84:
         1d:a5:7c:69:da:92:e1:55:b8:71:d2:49:54:6b:b5:44:d2:b8:
         b3:4a:29:d9:15:80:43:99:58:bb:7d:e1:08:a1:81:a7:15:9e:
         7b:18:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----