Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File:                     W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier:          F7pvduEx6zOJ9FnHTev6/FsglYR8poMEA5SXK4UZpd0=
Subject key identifier:   B2:55:2E:38:81:87:E6:EA:D4:81:7B:12:04:B4:C9:FB:3A:5D:0C:FA
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer:       /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial:       01962E98C5CE67435F8EFF21411721A3588E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number:          10F7
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: WB5WMpRkqkcBshZi2PGyvIqZ6ffqTM+TFETnQP0WKfA=)
                          2: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
                          3: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c5:ce:67:43:5f:8e:ff:21:41:17:21:a3:58:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=b2552e388187e6ead4817b1204b4c9fb3a5d0cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:68:5c:b3:83:18:fb:e4:65:19:c5:9c:2b:90:
                    5d:ea:ab:1f:c5:cf:75:53:15:92:8c:9c:8d:75:2e:
                    0c:95:73:35:9b:ca:53:d7:70:82:3a:a6:00:5f:e3:
                    08:b2:a6:39:90:11:89:6d:87:d8:a7:65:57:c9:61:
                    11:67:b6:78:ce:b1:d0:37:6e:bf:d9:d2:a7:e4:e4:
                    36:0b:57:35:06:b2:44:67:14:14:e3:de:a4:00:31:
                    4c:10:a2:63:0e:f4:5b:a5:28:4a:f3:78:63:42:71:
                    5d:51:e4:17:47:bf:94:1b:1f:47:51:3b:71:a9:44:
                    6b:17:15:0f:45:e6:f8:c5:df:0c:4a:90:67:d7:bf:
                    60:4a:e3:64:76:d5:b5:0f:cc:4b:9a:57:c1:90:8c:
                    30:2a:e5:21:bf:21:a8:c1:18:a4:89:f1:90:0e:8b:
                    9e:00:8b:90:a6:df:55:48:d6:ed:79:96:e1:2d:d1:
                    60:13:29:c9:7a:03:fc:c1:e7:9d:63:3a:ba:73:ee:
                    d4:a5:52:d0:2d:60:1a:54:f3:df:f0:70:07:45:9b:
                    0c:f5:1a:68:10:d8:b6:ef:f7:c1:18:a2:37:01:7f:
                    70:b9:c8:c0:3b:2c:c9:6f:62:9e:df:a9:3c:62:be:
                    79:f9:e8:da:d8:53:24:40:5d:03:6e:83:b4:e7:25:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:2E:38:81:87:E6:EA:D4:81:7B:12:04:B4:C9:FB:3A:5D:0C:FA
            X509v3 Authority Key Identifier:
                keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:69:44:e5:71:78:e0:b6:50:20:0e:90:55:2f:1e:b3:66:51:
         7b:fe:58:26:8c:49:4e:ad:ef:1e:12:04:b9:87:de:a0:f1:94:
         a2:ac:27:7a:99:b3:21:66:8f:a9:93:65:67:43:c9:b7:b6:65:
         47:8c:53:93:ab:d5:a7:90:a1:66:7a:96:06:90:5c:78:2b:5c:
         f9:42:b4:1e:95:fb:f5:21:83:32:37:86:83:f0:67:fb:6a:d4:
         bb:fc:22:d5:6d:cc:d2:94:23:00:96:ae:51:4e:13:bc:0a:55:
         12:b8:87:a1:61:9d:ce:25:2b:9c:f5:00:06:17:ea:f9:5f:bc:
         b8:34:a1:66:d5:dd:1b:6e:19:a7:2f:6a:15:7b:1e:cc:f6:3b:
         65:26:4b:72:b8:50:bc:03:2e:1a:5d:b6:63:27:5a:68:c4:43:
         60:6c:d9:9a:16:38:dc:02:78:7d:08:8e:0a:d9:62:bf:39:2e:
         2a:a8:22:44:58:ca:56:47:94:17:65:16:2d:1d:74:7a:49:88:
         dd:b1:97:61:2d:23:e2:1f:0d:bd:97:42:dd:52:a1:82:2e:3c:
         cc:93:17:89:38:d0:bd:c6:79:42:12:46:24:d1:69:3d:6a:ea:
         75:5a:65:81:89:b4:9d:a7:16:f8:b3:77:09:c0:b1:22:58:dc:
         d0:1d:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----