Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
File:                     WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft (raw, json)
Hash identifier:          f0jX7cY+L2XAlGA//03FwhklmvRFPIBCkR4DVjQVjoo=
Subject key identifier:   24:C0:59:15:5A:85:EA:FA:89:26:F2:AC:B8:63:64:8A:4E:C8:B8:8B
Authority key identifier: 5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05
Certificate issuer:       /CN=5b192aa28315f5942d4105d52ebfd6d328f0f405
Certificate serial:       01962E9997B74B23147BFD3CDABD9719033C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
Manifest number:          0832
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: 1-u2sU3DDBTp7tslVtZM2YXONawE.roa (hash: hY4Vnqp2FHEqA3NhSl3nyi2JgSEr1mIebkZ+fS2Quh0=)
                          2: WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl (hash: KbnFkABxrozXEvNrc1Ue23aX5iUQURu8kXlGXrWbjzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:97:b7:4b:23:14:7b:fd:3c:da:bd:97:19:03:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b192aa28315f5942d4105d52ebfd6d328f0f405
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=24c059155a85eafa8926f2acb863648a4ec8b88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:9b:37:c3:cb:0f:b0:95:ff:89:3f:09:de:
                    bd:df:8e:a6:01:90:5f:d1:ef:e6:3e:92:5b:bf:b6:
                    8a:57:7e:d0:f2:eb:8a:93:ea:11:bd:2f:b2:b3:97:
                    1e:6a:d4:28:df:da:73:cd:a1:2f:18:73:7e:fc:cd:
                    30:00:b3:cf:56:8f:90:36:14:30:8d:86:f4:d7:24:
                    5b:ee:0a:f2:b5:08:79:d6:50:ac:c6:6a:99:e0:a3:
                    c8:7c:37:cb:65:9f:89:94:6a:23:f4:0d:19:a6:44:
                    b7:25:a0:4e:57:0b:4f:75:b8:e8:41:ea:0a:34:07:
                    c3:7b:84:1c:4f:2f:c9:df:27:88:eb:33:fb:19:9a:
                    55:c2:57:94:02:24:ad:2d:15:b3:b1:35:b5:9a:9d:
                    b3:0e:63:46:1f:93:3c:9b:72:14:8f:37:d3:b7:7d:
                    95:6f:99:bb:93:b6:ab:17:59:bc:13:11:e0:2a:bb:
                    f3:f0:9b:af:ad:30:7b:5e:7b:4f:b3:f7:95:b3:0e:
                    56:1f:ea:ab:4d:ab:9c:b0:c0:3b:70:c2:8e:30:e3:
                    94:de:86:79:6c:4f:da:91:2f:e2:8e:a2:e0:d5:a0:
                    80:53:07:0f:f2:f2:03:ad:d5:41:42:2f:ac:54:22:
                    39:66:e3:a0:f6:6a:43:63:27:55:b4:80:18:66:e3:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C0:59:15:5A:85:EA:FA:89:26:F2:AC:B8:63:64:8A:4E:C8:B8:8B
            X509v3 Authority Key Identifier:
                keyid:5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fd:5b:49:81:43:4a:8b:e6:df:a8:74:63:91:3a:bd:b9:f9:
         a7:ce:1f:4e:c2:49:cb:a1:18:01:41:d4:0b:f8:ce:f8:28:52:
         17:2d:b8:80:cc:2b:0f:a8:8a:12:46:de:96:f6:6d:1a:dd:20:
         0c:73:e2:c9:41:6a:18:55:3f:8c:31:b9:d4:65:17:f2:af:3a:
         5f:f6:84:56:aa:67:5a:02:b9:aa:8b:30:c8:3f:1e:30:3c:bc:
         72:dd:dc:d1:cd:5e:8b:0f:2d:f3:b2:90:3c:54:42:d0:99:27:
         6c:79:4c:88:c2:7d:58:26:ba:d2:2f:a7:2a:bb:ca:3a:4e:e7:
         7b:4a:d4:da:e7:06:57:5e:31:00:b4:84:e1:15:fc:4d:7f:45:
         8d:db:f6:af:a4:71:8c:76:75:fb:3a:0d:55:c5:1e:ac:49:66:
         9d:6d:12:11:27:76:51:40:e0:72:41:96:79:17:72:5e:c3:04:
         79:9d:d2:9a:b4:81:51:68:c9:d2:14:b1:d3:0b:55:64:e9:ce:
         26:ee:b4:a7:04:a2:7e:f7:3b:9a:25:9e:08:db:c2:1d:ce:1a:
         f2:62:3b:28:b8:ff:f4:71:aa:e3:ad:e4:b5:e8:2a:dd:8e:07:
         95:e9:b3:0a:5f:d7:4f:78:0b:de:85:bb:7a:27:82:5b:cb:76:
         30:e9:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----