Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File:                     WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier:          oT2GP2AATadzwTsaB5rKGRJQ/zcVXST66I2vxAQoiuA=
Subject key identifier:   92:C2:A0:D2:9C:77:42:0A:13:DD:A5:99:19:CE:35:98:12:4A:D5:B6
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer:       /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial:       01962ECF59A9C741EAB5C60FB444E208ED96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number:          0C51
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: xoNz3BW2Pi/oyAmXGbCKaUfwsrRnVTf5zEYTFHjz0Z4=)
                          2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:59:a9:c7:41:ea:b5:c6:0f:b4:44:e2:08:ed:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=92c2a0d29c77420a13dda59919ce3598124ad5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:64:57:df:54:61:32:d4:11:e1:67:f5:9d:
                    69:70:50:3e:b0:43:83:06:01:c2:09:13:9f:38:ec:
                    26:29:6b:d7:fa:a2:54:1c:ae:f6:a1:8c:3e:99:d6:
                    af:80:c2:bd:52:3f:76:d5:4c:2b:96:6e:c9:e3:3d:
                    46:e3:5f:a0:ed:26:9b:b4:0f:67:86:17:63:10:9d:
                    d2:83:b0:52:69:76:f1:ba:c3:3d:b6:b1:fd:bf:5f:
                    26:58:de:d5:fd:b6:46:97:a6:39:95:bf:b7:1a:23:
                    b3:a6:57:fe:92:25:4d:1c:89:d7:ff:fb:53:f1:42:
                    db:33:e9:e4:d7:0a:65:10:50:42:dd:25:b0:d2:1a:
                    2e:73:fb:8c:56:63:15:05:ee:f3:85:fa:dc:dc:50:
                    42:f9:53:70:66:a4:97:30:17:53:67:e9:8f:f0:8a:
                    6d:85:f9:36:ed:29:37:25:8f:52:80:57:a8:1a:5a:
                    db:f4:84:cb:fa:6a:86:06:d4:17:fb:a8:9f:bb:51:
                    a0:a1:a4:e7:b3:dc:ac:ca:86:41:c5:52:95:2d:fe:
                    b8:86:76:c2:87:c1:24:dd:53:a7:3a:07:96:3a:b2:
                    bd:d1:b7:af:f0:ee:3f:ad:d4:e0:7f:5d:da:29:f7:
                    dc:07:f9:95:9b:a9:3d:c8:43:9f:83:99:35:3c:18:
                    e0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C2:A0:D2:9C:77:42:0A:13:DD:A5:99:19:CE:35:98:12:4A:D5:B6
            X509v3 Authority Key Identifier:
                keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e6:b7:04:fa:8d:35:4e:bc:0f:45:f3:7d:ba:94:84:10:29:
         3f:77:12:4e:c1:14:b1:fb:4c:6d:03:13:4b:24:25:da:86:22:
         7e:d3:c4:1c:d3:e3:57:fc:b5:cf:65:ab:3f:a9:3a:8f:cd:d0:
         86:ef:38:c8:7b:75:90:31:c7:96:74:64:38:e4:56:08:4b:9a:
         1b:1e:e5:12:36:24:bc:1c:ab:46:0c:ad:75:a9:9f:62:dd:0b:
         b1:d6:95:5f:02:ea:46:ec:ae:93:29:75:2e:cb:89:3a:f2:f5:
         8e:62:84:c6:49:05:86:7b:1c:f1:60:fd:6e:d3:4e:93:d6:e0:
         a9:fa:d7:20:4e:66:f6:5a:d2:35:af:f8:5a:ac:49:09:45:a2:
         8d:25:5f:cc:f5:9a:02:0a:8a:db:37:3b:14:09:88:0d:bb:19:
         f8:40:93:ba:cb:d9:6f:94:69:d0:90:c6:23:c4:b7:9e:ca:ac:
         d0:1a:69:70:b4:bc:f0:04:13:83:44:6f:c7:99:af:99:78:b6:
         ac:f4:6b:02:2a:08:00:46:15:a5:8e:bf:b4:09:e7:a7:b8:92:
         1b:12:65:1d:87:2c:9a:5a:80:78:f9:68:8c:46:45:8c:58:b7:
         b1:d1:a1:67:ff:ce:a6:cc:a9:3f:60:b6:14:aa:de:10:5a:69:
         43:eb:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----