Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
File:                     WPJnqqyZvwydHo5CneAczTzJDsA.mft (raw, json)
Hash identifier:          +0YkaR2X+wR0ZO8tRRrZT0K/eT0Mc9oLVwWBuamngf8=
Subject key identifier:   61:75:37:1C:48:F2:2E:46:EE:3D:83:29:97:51:37:5F:74:1C:49:0F
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Certificate issuer:       /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial:       01962DF422DB0398AF66A5752E749C4A79FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: VxmO12w306gaXQmH0gdTcOIKrpc.roa (hash: yL/doTnHVquXpnwAcQ1RYhbKS8XdZRYVklJVmjcOaeU=)
                          2: WPJnqqyZvwydHo5CneAczTzJDsA.crl (hash: 8AeQJTlaAS5WKqflP1HKF6KQOe0eMBW+YR6dTiiYS0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:22:db:03:98:af:66:a5:75:2e:74:9c:4a:79:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=6175371c48f22e46ee3d83299751375f741c490f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:bd:92:b8:60:0d:3d:2f:83:9d:47:61:26:
                    be:db:f4:a2:01:6c:8e:77:5a:16:33:bb:9e:c6:ea:
                    ee:05:22:7f:1b:75:f6:de:1f:03:d4:77:5d:ec:88:
                    c9:2b:87:b2:da:fe:d7:66:98:38:ea:78:2b:b7:92:
                    c5:39:9a:53:12:fd:9a:b3:6e:b5:c6:14:ef:94:48:
                    6e:8a:dd:e4:0b:7f:25:98:bf:ae:bb:c7:33:6c:cb:
                    54:90:68:14:18:0e:f7:bc:3d:b1:d9:f0:6c:4e:d3:
                    49:aa:d5:33:bc:23:0e:eb:d8:6e:37:7d:ac:e4:60:
                    8b:b9:aa:7f:a2:8c:f0:f0:fd:a8:3c:56:33:a5:79:
                    ed:d6:ff:55:81:b4:2b:39:4e:6c:80:a3:cd:43:9c:
                    8a:af:a2:30:a8:7c:dc:d4:5f:fe:53:ed:58:a1:24:
                    87:e2:29:c8:7b:6c:f1:18:e2:01:ce:49:77:30:af:
                    f3:33:59:58:b8:b9:2d:b2:ac:fa:aa:35:05:11:e6:
                    4e:77:12:da:a5:b3:4d:7b:b2:c9:a8:46:93:3e:78:
                    b5:d6:81:42:2f:27:5e:d7:59:68:07:b8:ae:93:9c:
                    5c:c4:34:56:a2:f8:3d:de:58:d4:3f:15:c9:35:4c:
                    64:10:25:64:46:9e:6a:f5:51:f6:9b:97:7e:de:a2:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:75:37:1C:48:F2:2E:46:EE:3D:83:29:97:51:37:5F:74:1C:49:0F
            X509v3 Authority Key Identifier:
                keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:21:34:48:4d:9b:b8:cd:b8:9f:31:d4:93:ab:4a:4b:19:8a:
         a2:3f:d6:90:24:95:ad:b5:63:17:c8:d7:ee:72:9c:ad:de:0d:
         d4:72:0c:19:f5:c7:00:6f:7b:52:9c:dd:9c:d4:15:17:b6:a9:
         fc:c3:6a:f2:5b:34:35:32:d1:09:70:6b:36:8a:66:ea:f8:9c:
         0e:46:6a:27:32:f7:e5:71:85:a3:28:af:c0:70:dc:61:08:33:
         36:56:fd:69:d0:17:d2:ac:d6:52:e9:bd:ab:f9:0c:b1:0c:6c:
         75:c2:2a:0e:18:91:4c:b8:2c:83:8f:bb:f7:ec:c7:1c:75:55:
         9b:a3:c4:4b:e0:18:80:ff:0e:b9:69:b4:9d:a1:b7:9a:d5:87:
         33:95:c4:53:fa:e2:44:df:91:4d:36:10:f6:64:11:58:64:4d:
         04:5b:63:b8:bd:df:36:ee:28:b8:61:f4:e9:cd:c4:bf:01:06:
         16:9b:f6:7a:92:de:a2:97:54:94:05:68:8e:52:44:6f:b1:da:
         b7:3a:0c:90:6c:d5:5d:9e:48:17:ef:d7:e1:bc:dd:b0:4f:a5:
         63:84:63:e1:a0:9b:f1:58:f9:bd:25:b2:c2:ff:38:29:ac:8b:
         12:1d:ed:7b:98:ad:73:55:65:68:94:93:15:f1:b0:cc:9b:9d:
         9a:95:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----