Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
File:                     WNz7D_Tyi4_61usN0p6ytq9immg.mft (raw, json)
Hash identifier:          fB7Tv3rnQdOKqnawMj6erATPIs7DVavwSypqRDgxDFo=
Subject key identifier:   31:16:FE:BC:3F:0F:E4:50:EE:6A:EB:16:B3:D1:46:AB:8F:18:A7:37
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Certificate issuer:       /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial:       01962ECF4EB0A0514BF422B77E25C1016A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
Manifest number:          0748
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: WNz7D_Tyi4_61usN0p6ytq9immg.crl (hash: jGNy2dFQ3lNYg5T+nFbthPC4HTzMQJA8V5x7qp3eiKQ=)
                          2: lgaTADVYOse5jNoGc-hlR1iyQcM.roa (hash: whet4s5rWCX20O/tP+eDuVvdhz/p6dV5HSU07qsog2g=)
                          3: sauoJPH8ZCzsvjvGozwJzjKKcxA.roa (hash: B9f46JTfl/pBuc2yfO6KIqonaBN9SLGFTMzKnpf4wu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4e:b0:a0:51:4b:f4:22:b7:7e:25:c1:01:6a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=3116febc3f0fe450ee6aeb16b3d146ab8f18a737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:d9:89:b4:2d:09:37:2a:31:62:82:1e:11:
                    4a:aa:ed:92:2f:0b:b5:bc:f8:1b:17:d3:c1:b5:9f:
                    df:84:6e:1a:77:2e:c6:02:e0:1a:ad:9e:ac:bf:ee:
                    f3:90:a4:00:18:a6:27:74:b3:3a:f0:70:b8:12:8d:
                    4a:60:f6:9f:30:5e:8a:ea:40:68:6d:68:b0:3c:8d:
                    96:24:be:27:60:15:c1:7e:16:a1:58:14:4c:02:c4:
                    00:cb:7e:11:78:f6:41:39:8e:7d:32:31:88:93:6a:
                    5c:91:b4:0d:c1:a3:aa:9b:6b:ad:7a:dd:37:69:bf:
                    13:89:f1:59:95:41:4b:25:8e:0a:88:4c:68:7e:3f:
                    57:70:27:ca:8a:d0:41:60:36:b3:8b:56:f2:6c:4a:
                    56:a4:e3:e3:ca:10:ac:fc:9f:d3:06:9b:9b:96:69:
                    1f:2f:5a:64:89:5c:35:6d:8b:e1:7e:bf:53:25:0d:
                    8d:6f:83:db:c7:a6:a9:d3:e5:9b:3a:77:1f:6b:8a:
                    af:56:af:41:9e:15:85:e7:9b:4a:bc:a4:5a:1f:29:
                    a2:fb:d9:60:55:f7:87:35:46:be:fc:88:d2:83:bd:
                    3f:8c:72:a0:0e:13:10:e5:a6:56:96:81:c2:03:5e:
                    f1:af:a4:d5:e8:e6:00:1f:35:34:be:a6:b2:bc:e7:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:16:FE:BC:3F:0F:E4:50:EE:6A:EB:16:B3:D1:46:AB:8F:18:A7:37
            X509v3 Authority Key Identifier:
                keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:01:3d:c1:90:5c:49:d4:fb:6a:da:91:e6:20:53:93:7c:f9:
         00:5d:d6:ea:a0:25:8a:a4:9f:8d:fa:a9:b5:4d:0b:7e:6e:2a:
         a1:71:23:ff:b4:37:4e:85:61:fc:cc:a7:02:19:9a:e0:8e:ed:
         f0:a9:6b:0f:af:1b:7e:b0:45:42:79:ba:8b:8f:d7:9e:5e:bc:
         97:78:c2:12:8e:a5:c6:bc:58:71:77:b1:f9:cc:ba:20:f0:bf:
         58:c8:52:88:b0:ac:6b:67:f1:12:97:14:45:40:d8:59:84:26:
         40:0b:5c:56:3e:ba:24:cd:0d:a9:46:29:9f:20:04:33:87:8c:
         6c:13:06:00:51:05:c5:2d:94:2b:4c:3c:3d:30:d1:42:bf:dc:
         fe:71:54:ef:3d:43:be:b5:ea:dd:9c:3d:8e:16:19:5b:18:c3:
         1a:99:54:63:eb:81:9d:b1:5f:1a:a3:3d:64:02:e4:10:0b:39:
         55:37:f6:6f:07:da:6d:1f:b3:88:dc:ab:ac:ad:f0:df:14:ff:
         65:24:16:dd:f6:f0:52:2a:b7:f0:43:5a:57:20:4b:58:8c:b1:
         77:fe:8e:01:68:3f:49:e1:71:97:67:df:9c:88:36:91:af:4a:
         98:41:28:11:e6:c4:e1:38:1f:c6:7d:58:d8:af:f9:85:a5:af:
         ee:6a:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----