Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File:                     WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier:          N7IBnpe8tsSL/BFik2rqFaYctTMPWtwc8sutnmLJpTI=
Subject key identifier:   E7:65:0E:60:5A:63:33:CB:18:E5:FF:A9:41:EF:DA:70:9E:44:B2:7D
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer:       /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial:       01962FAB2BBDFD288660B87DA3B8AE707679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number:          0C0A
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: ukj6SWlHK2BL2k4yD6A7H/CSPrf9NvPOxy7r1O1KelE=)
                          2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2b:bd:fd:28:86:60:b8:7d:a3:b8:ae:70:76:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=e7650e605a6333cb18e5ffa941efda709e44b27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:62:54:19:e1:98:f2:86:dd:47:d3:a5:f1:
                    be:9e:63:33:48:7a:be:ef:d3:e0:15:5c:86:13:38:
                    bb:56:35:74:14:6f:cf:0b:e6:8e:5f:5b:5f:75:f1:
                    5f:73:65:cc:51:f3:9a:a8:15:a7:8e:24:98:4d:f0:
                    d1:57:87:c1:4a:92:11:cc:12:46:55:f6:76:18:58:
                    8a:e2:23:6d:0b:6d:3f:0a:37:22:90:76:37:a1:ed:
                    6e:85:df:b0:93:61:e1:ed:94:8e:eb:e8:4f:65:87:
                    5d:01:91:7f:bc:fb:c6:a7:36:7d:fb:f8:e1:c0:82:
                    f1:4f:d5:b1:e6:16:43:0f:ba:b0:7e:f4:80:25:34:
                    65:18:d1:61:0a:74:93:23:89:8e:b2:9f:5d:93:25:
                    79:d3:64:3a:d9:9d:28:ba:6b:c9:50:5c:6d:81:de:
                    90:8c:cb:3c:5c:4f:dd:44:bc:e3:9c:67:5e:61:45:
                    88:3f:b5:b0:70:8a:20:e0:dd:97:dd:e4:54:8c:c7:
                    83:02:2e:8e:89:30:65:df:ab:94:c7:b4:47:7f:c8:
                    f6:37:28:5a:a6:e2:55:83:88:e3:90:c4:1d:54:75:
                    bd:8d:cd:53:c4:51:9a:56:f4:24:3f:e8:4f:c2:a0:
                    10:99:bb:dd:ef:18:47:02:ed:7e:97:79:e1:de:d6:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:65:0E:60:5A:63:33:CB:18:E5:FF:A9:41:EF:DA:70:9E:44:B2:7D
            X509v3 Authority Key Identifier:
                keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:48:be:49:44:ab:d7:e1:e0:32:cf:e6:d5:03:1e:e8:d2:13:
         12:25:f1:34:40:f4:11:8f:ea:e8:73:ff:2a:c2:8e:83:63:cf:
         2d:9e:20:9f:2f:32:fb:cc:d3:8f:fd:1e:7b:d3:93:a3:06:da:
         2a:7f:58:63:3c:27:55:5d:0a:a8:72:27:8b:a6:a5:07:00:60:
         85:23:94:80:6c:4f:e2:29:30:fb:19:1e:f7:56:62:89:dc:66:
         3d:5b:78:f8:a5:17:10:2e:02:ad:29:a2:b4:84:09:0a:ef:9f:
         44:9f:87:53:91:d7:9a:b9:3e:de:32:84:27:52:e7:11:c9:d1:
         00:f1:55:f9:8f:73:69:00:cf:f1:33:64:cb:6e:b7:54:27:4f:
         ea:4b:34:a3:0f:25:b3:a0:bb:2b:04:ca:98:cf:74:c6:95:b6:
         a8:21:79:42:9c:be:71:e3:7c:6a:3a:cb:e1:8a:68:93:a9:2c:
         18:2d:c8:4f:63:79:da:e1:47:53:46:8e:40:e9:f2:31:c4:36:
         97:63:7e:d3:c1:5d:b2:d1:22:60:ed:50:24:fe:79:7e:11:18:
         a5:c8:04:2d:97:1b:cd:96:83:97:c6:a8:3b:b4:fa:c2:f3:bc:
         4e:23:3d:6a:ec:df:a3:fd:ca:bf:6f:fa:24:39:55:88:52:7d:
         0f:34:1c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----