Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
File:                     WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft (raw, json)
Hash identifier:          HNBWP3eiuz59IU8swnF8hvnIR8V4XYF1/RmpBuq/0zg=
Subject key identifier:   14:0C:E8:F9:02:CD:8E:4D:E3:3A:4A:12:B6:34:D3:A4:C1:0F:B4:22
Authority key identifier: 58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE
Certificate issuer:       /CN=5811ab97aac984b7524effad5fac68eb1e19cdce
Certificate serial:       01962E61B8CE8FCF1059A336E2813A1B9AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
Manifest number:          12CB
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl (hash: VGoNEZTsa/VFJeWxUmmj63dVwoaNKdVBDFJdDKxU5eo=)
                          2: pHVWgJuGe-4SCUP5TXdZ2HWcQDo.roa (hash: gAsEJftS+Uf8/0GhnyryHodqA1ekHyKsg54eRC3EHGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b8:ce:8f:cf:10:59:a3:36:e2:81:3a:1b:9a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5811ab97aac984b7524effad5fac68eb1e19cdce
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=140ce8f902cd8e4de33a4a12b634d3a4c10fb422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:d6:42:69:5a:3a:54:42:83:32:6d:39:8b:
                    43:6a:a3:1d:7b:9c:90:37:32:b5:b5:dd:ec:24:0a:
                    80:3f:ac:67:63:70:85:38:d9:0a:9f:b8:aa:2a:f6:
                    a6:f7:f8:05:59:bc:68:c9:7a:18:80:46:66:47:aa:
                    8f:2c:8e:41:a4:c1:5b:b3:7a:b1:25:73:96:20:11:
                    db:9a:62:c6:06:26:28:35:c3:cf:e2:f0:a0:36:79:
                    29:71:98:ea:c1:74:ac:10:53:a9:00:7a:26:7d:e6:
                    22:97:bf:58:66:4c:8f:7b:8e:1a:be:30:de:90:8e:
                    67:a0:2e:71:ef:dd:d2:91:d4:8a:e4:52:54:74:88:
                    df:83:04:73:7d:4c:77:cf:33:75:28:23:40:95:c4:
                    d3:46:a5:b7:48:c6:62:b7:49:f4:28:ed:13:e6:3c:
                    80:d0:f1:39:c0:ee:2b:b0:0a:87:75:2a:1a:10:1c:
                    7a:a1:e6:34:d5:a3:38:b4:0f:3f:ee:b6:1d:08:69:
                    1c:71:96:d8:26:1f:56:ed:97:43:b8:ce:30:9f:2b:
                    b5:19:87:09:41:79:c3:94:3d:f4:f1:57:b7:85:e7:
                    52:fc:24:c8:ac:19:56:23:93:59:3b:6a:6c:2e:1a:
                    95:b9:c4:33:7f:80:e5:68:d0:ba:3d:7f:c9:e3:a0:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0C:E8:F9:02:CD:8E:4D:E3:3A:4A:12:B6:34:D3:A4:C1:0F:B4:22
            X509v3 Authority Key Identifier:
                keyid:58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:12:1d:14:a2:7e:d8:d2:c9:8e:bb:26:47:82:24:1f:93:a9:
         3c:9a:12:dd:6c:7a:80:24:f3:37:15:ff:b3:f9:38:5a:3a:ac:
         a5:30:f5:b0:49:ca:10:a8:c1:45:1d:b9:b3:a6:6d:05:de:8e:
         9a:47:24:f3:fa:c2:51:ae:46:a3:3f:ce:cd:8e:6a:e3:b7:4e:
         53:26:07:a4:b9:6d:30:29:ec:7b:72:a3:79:3d:df:ff:4d:f8:
         90:08:a5:31:ca:e8:8f:02:f7:44:aa:3a:0e:83:b6:f7:65:88:
         12:43:52:3b:66:62:11:f9:1e:3e:c0:ea:9d:4a:f4:f0:31:b2:
         73:33:77:9d:2e:c2:d7:aa:aa:a4:2f:b7:4e:a5:2a:8d:23:96:
         b9:f3:17:44:40:63:06:15:15:fe:96:8a:3b:52:db:68:43:ee:
         c2:ab:ff:7d:da:d9:e5:a5:ee:6f:66:9d:31:91:e3:eb:96:30:
         0e:da:ee:49:cb:4d:9f:4a:27:91:ca:f0:0f:d2:5c:20:67:09:
         bd:ce:c4:f9:3f:4c:09:01:c0:be:03:59:62:de:9e:cd:11:c1:
         7b:56:27:3e:39:58:e6:bf:24:70:7f:39:ea:7c:72:f9:a2:7e:
         32:01:75:2a:33:67:8d:33:6c:9b:7d:9f:43:2d:6f:5a:b7:0d:
         44:a3:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----