Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File:                     X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier:          ul60KU3o8ey4lAYym8b5EYSnrA2ST8lU8m242I6nt90=
Subject key identifier:   AD:92:4E:4C:35:5F:6C:2F:00:4D:43:C5:B3:95:C6:7C:B8:F8:9D:F3
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer:       /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial:       01962F3D42626278DC2EF15507BF9BEF23AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number:          0FB9
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: RtjwzHq4SBRKDg3CAYbGNlp57WUa+39fQtXvCg1fvq0=)
                          2: xBWezcOjf0HLBQBmbtDyglq06CU.roa (hash: dlL0ZUaafY/fyT+lFkSao0d0hLl5qFvGU+tiAKR4bcA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:42:62:62:78:dc:2e:f1:55:07:bf:9b:ef:23:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=ad924e4c355f6c2f004d43c5b395c67cb8f89df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:ef:8d:83:d2:fc:5f:9b:f3:f3:f8:1f:0e:
                    ce:8a:df:88:43:a1:29:0f:f6:78:f0:6d:45:1c:13:
                    e2:af:ce:3a:16:85:a5:fa:b9:76:1c:74:4e:0a:22:
                    a7:08:39:10:b3:dd:ea:14:93:67:e7:ce:2e:a7:c0:
                    af:e3:63:11:59:db:b8:93:7e:ea:e3:1f:11:31:cd:
                    be:c3:84:6e:7a:4f:c0:6d:da:e9:5a:8e:5d:ca:bc:
                    31:e2:e2:75:58:cb:86:65:54:03:55:9f:b2:23:de:
                    9f:ff:8f:84:74:17:f4:6b:41:e9:d5:aa:ce:11:ab:
                    a8:f6:10:0f:06:c7:1d:ec:08:04:df:cb:d1:a6:d1:
                    0c:a1:0e:81:99:7d:ba:29:53:cb:67:58:52:61:59:
                    de:20:52:f8:fc:29:08:72:02:28:6b:3c:7f:66:d6:
                    db:a5:f7:46:96:71:cd:8d:d9:ea:90:7d:02:00:15:
                    8c:79:da:dd:58:22:7f:93:03:c4:5d:b5:21:5e:90:
                    81:47:93:31:51:1f:47:7b:d4:41:bf:1c:70:c3:1f:
                    c0:43:24:90:f3:5f:79:01:24:5d:28:26:35:48:da:
                    82:5e:e0:85:43:c8:ed:38:ff:af:16:aa:53:6d:3e:
                    d0:34:2a:10:aa:94:f6:ee:94:d2:20:04:23:f0:91:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:92:4E:4C:35:5F:6C:2F:00:4D:43:C5:B3:95:C6:7C:B8:F8:9D:F3
            X509v3 Authority Key Identifier:
                keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:18:43:bd:99:b7:ba:bb:86:96:02:a9:45:55:f7:14:41:38:
         b9:36:c0:34:d1:f3:f4:dd:61:01:b3:10:96:52:0e:0a:78:47:
         b1:6d:3b:66:b9:3a:43:d7:61:4a:51:63:f9:03:11:da:15:97:
         24:d2:6d:87:13:8b:6e:9a:f9:43:ba:19:51:e1:bc:86:12:5a:
         03:e6:5d:81:5f:5d:0d:50:29:38:dc:89:82:d6:54:95:35:29:
         a5:e0:3b:bf:7d:23:bd:c8:51:c0:80:8a:66:14:93:72:ea:8a:
         b0:f6:2a:2d:6c:68:93:78:32:86:c8:b3:e3:4c:70:9a:6d:44:
         bf:e6:3f:eb:19:1e:90:a8:c6:04:7a:c8:b5:d2:aa:2f:01:a8:
         70:72:dd:ca:c7:1c:ce:6a:21:29:4d:ee:9d:e3:c8:ca:44:02:
         16:fa:14:c7:6e:ec:af:12:6d:25:47:46:1f:a0:f9:a9:9a:ba:
         cb:ce:1c:17:2a:c3:29:09:66:75:23:fb:3e:78:0f:aa:2d:ff:
         0e:ca:b1:64:12:e6:ef:82:18:fe:0e:4d:d2:1c:d9:6b:16:29:
         b5:a3:57:fb:4f:60:21:1f:11:18:64:60:78:c1:0b:ba:de:aa:
         d6:86:70:dd:13:cf:d6:16:70:f0:5a:95:52:fb:a5:6b:bd:50:
         e2:e4:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----