Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
File:                     WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json)
Hash identifier:          jgpBgW2iOdAoDI1pnNinhcH5tzMHTMnGQDdZWj1IkIU=
Subject key identifier:   CB:95:A9:62:A4:D6:C1:1A:FC:86:8F:60:3E:EC:CB:19:DC:CC:30:45
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Certificate issuer:       /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial:       01962E986BCD4F3607D9B5E00D6DCBB88F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
Manifest number:          0C89
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: 0AdevnLlsxFU0_MXijL2HLDuliU.roa (hash: Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=)
                          2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: 2opQkUz/LK5uRjrP28YvxBwKf0Yu3WicNnvY21opdo4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6b:cd:4f:36:07:d9:b5:e0:0d:6d:cb:b8:8f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=cb95a962a4d6c11afc868f603eeccb19dccc3045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:e9:ca:ff:ba:6e:75:d0:a8:db:3b:7d:6c:
                    26:28:d3:58:16:53:5d:69:d8:77:ab:ff:9f:31:2a:
                    d2:f8:f9:21:77:70:01:c9:57:8a:a1:93:05:92:e2:
                    b6:c5:22:fc:c8:9a:3c:31:7f:d4:f3:32:a5:d5:a4:
                    ba:f1:39:b5:8b:d2:42:01:b3:03:5a:1e:f9:58:cb:
                    c4:67:a4:40:c9:06:53:0d:70:6c:65:93:1a:8f:cb:
                    16:56:76:7c:ed:c6:5d:68:36:6e:f2:a7:cb:42:c6:
                    2b:c6:b7:4f:5d:a7:ec:19:7c:fd:97:1a:29:32:74:
                    fa:1b:d3:7e:43:43:06:be:e3:0c:d0:e0:f9:31:45:
                    7c:e2:87:cd:af:81:68:a6:71:9f:2a:03:d9:67:db:
                    01:70:37:3e:61:49:2f:94:53:70:83:c8:d2:dc:62:
                    ce:b3:14:39:10:14:1d:b6:b1:de:6d:51:2d:cd:d3:
                    91:a3:30:ce:c6:7d:63:cd:92:ad:d7:f0:79:ae:47:
                    09:b7:17:ca:bd:31:21:94:d8:c6:c6:75:af:e7:13:
                    fe:95:33:c0:c1:bd:c7:a8:21:23:86:5e:ea:f0:e7:
                    7b:41:2e:3b:40:a2:d7:a2:ad:aa:48:a4:40:73:cf:
                    cd:88:84:35:dc:00:db:91:70:91:8d:c8:45:cd:2a:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:95:A9:62:A4:D6:C1:1A:FC:86:8F:60:3E:EC:CB:19:DC:CC:30:45
            X509v3 Authority Key Identifier:
                keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:77:da:0e:2d:0f:3d:3e:18:7e:06:47:e1:b8:db:13:a0:f5:
         25:f2:f1:6b:f2:2d:e7:a4:de:d1:82:b0:c3:a0:6b:a2:3a:73:
         13:50:7c:98:c2:d7:f4:37:6a:eb:76:3d:f0:2c:e4:00:e9:c7:
         6f:45:86:39:78:65:de:0a:02:91:b5:44:2a:1e:34:bf:e0:87:
         18:4b:57:f2:51:d8:18:b5:67:76:1a:dc:97:6c:c0:5f:fb:1c:
         a3:3d:12:fd:81:69:fd:fe:35:72:35:2a:88:11:5b:42:51:58:
         40:09:43:fa:d6:1f:4e:44:ba:1c:9f:96:34:a5:47:82:00:c0:
         ed:eb:cd:5a:a8:27:da:81:82:8f:a9:8d:d6:a8:b4:3e:f6:6c:
         2e:1a:a0:9d:4e:e6:64:fb:c6:50:75:a9:6a:3f:48:6c:52:05:
         6c:37:6a:f3:61:a9:8e:74:4f:19:05:e3:70:ac:72:ec:cc:94:
         1e:21:f4:7c:03:00:fc:86:8f:a4:de:ec:b6:f7:19:1d:4b:c4:
         53:4c:6d:02:74:94:9b:94:55:a7:45:ed:c0:bc:e3:75:0d:7d:
         80:76:c4:0e:25:9e:e3:1f:8e:26:e5:1b:58:4f:e4:ba:61:34:
         58:c7:99:bc:2d:cc:70:4d:47:7e:2c:aa:09:d2:45:f6:26:5e:
         76:a5:06:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----