Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
File:                     WPgwRPUQ5RX_XcTffgCO3fmmf50.mft (raw, json)
Hash identifier:          p45BMYgZPXEVsDFwc1Su/oUUGAId2ENNYQqZKlITyQU=
Subject key identifier:   CB:82:CA:9A:A8:F9:FE:39:CF:CD:23:2F:BE:BA:1E:EF:44:12:4E:3F
Authority key identifier: 58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
Certificate issuer:       /CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Certificate serial:       01962DF3E8A392F9D95DFD8F96F022503E0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: WPgwRPUQ5RX_XcTffgCO3fmmf50.crl (hash: 2etWxgTm4pXfEDIYspzkjYg+Bo3RxioBqb6B2q3qfSU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e8:a3:92:f9:d9:5d:fd:8f:96:f0:22:50:3e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=cb82ca9aa8f9fe39cfcd232fbeba1eef44124e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:06:2a:46:36:89:98:ec:6c:b1:fd:7f:2e:e2:
                    e3:ad:85:59:34:66:39:f8:84:16:84:c0:f6:4c:86:
                    ad:db:0c:25:e8:f0:af:83:e9:ec:b5:51:bc:19:11:
                    b2:85:e3:35:58:e8:cc:27:f6:55:47:8a:8f:c5:4b:
                    5a:54:9a:f0:ea:d1:09:b2:2d:c0:10:46:c3:b8:b2:
                    ad:7e:4d:37:e0:0e:e0:34:aa:12:db:74:74:57:c2:
                    c1:e0:78:30:bf:bc:a8:8d:71:ce:90:1e:8f:78:4c:
                    6e:1d:3d:94:38:e8:49:06:51:dc:be:91:d0:85:16:
                    34:c0:6f:4b:1c:aa:11:c7:81:d9:20:c2:f3:02:32:
                    1d:84:24:04:af:f8:2f:ef:16:21:4e:b0:25:32:d7:
                    90:83:62:7c:7a:25:20:a6:b1:6a:90:33:79:b0:ef:
                    cf:1b:61:c4:3a:0a:de:c3:48:b0:ee:2e:ac:bb:62:
                    9a:1a:cf:99:08:a8:2b:25:56:46:0c:8c:b7:a0:c3:
                    c4:bb:44:03:61:ea:44:a9:2e:88:7a:d9:9d:ae:ff:
                    af:05:f2:48:d2:7a:3c:70:fb:4f:49:96:f1:bd:05:
                    3b:27:d7:fc:c0:24:60:fc:3f:5c:7f:28:af:f1:4d:
                    b8:64:c3:52:18:23:6e:68:85:39:c6:6a:96:3c:10:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:82:CA:9A:A8:F9:FE:39:CF:CD:23:2F:BE:BA:1E:EF:44:12:4E:3F
            X509v3 Authority Key Identifier:
                keyid:58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:54:20:22:15:6b:48:10:b6:44:6e:e9:7c:0f:1f:36:34:d2:
         e8:c0:f9:ce:83:6a:f1:e4:b4:7e:6c:e7:e0:2d:88:d1:7a:22:
         8e:ee:c5:ad:63:aa:95:2e:6c:cf:c6:94:1a:5d:ee:5d:30:c7:
         2a:02:c4:b7:06:aa:08:0c:31:61:a3:59:9e:0b:53:bb:68:77:
         5d:8d:dd:e5:81:43:d9:37:27:84:20:0f:1a:3c:e4:94:a1:38:
         38:0c:8e:65:35:6d:40:b7:fc:9f:70:4e:9c:52:55:af:6d:0d:
         30:62:e4:48:11:9c:0b:34:6c:2f:8d:23:59:38:2b:a8:9b:8c:
         86:00:31:a8:80:ea:eb:81:85:dd:fc:94:8c:81:23:27:dc:36:
         82:6f:c1:b5:14:69:c9:d3:20:bc:73:be:cb:fb:04:83:30:77:
         16:28:03:c6:41:d3:2f:fb:c5:81:05:4a:93:5d:2f:e7:10:f5:
         18:51:21:94:07:e4:cd:99:a2:eb:69:14:4f:59:04:61:e4:f5:
         4b:1d:34:20:7b:9b:e3:bc:69:56:ec:17:63:53:48:52:91:17:
         10:48:c4:b2:71:d4:f2:0b:27:c0:9f:c9:c6:71:9d:5a:e9:f5:
         82:ab:67:01:39:aa:d7:84:48:86:c0:80:ca:3f:e3:1d:21:20:
         ec:ee:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----