Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
File:                     W5sFqT1fP8xaCwEEwbD20kws0fY.mft (raw, json)
Hash identifier:          n5okhpd55E2COrNIRtpvuLGvf/2tNClX1k/FjzI3HEc=
Subject key identifier:   48:9F:5C:3B:52:A5:03:BE:DE:EF:6B:BA:30:38:1A:CD:40:61:CF:86
Authority key identifier: 5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6
Certificate issuer:       /CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
Certificate serial:       01962F746AA4C922D73E7037A9E80E581AF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: EEI2dNSjcVw2iZs7Gn74yhtAoxA.roa (hash: t2UDAq4DzGmTsnjWgogyVQ3r8Ls90WheZWHhRn0w6Ws=)
                          2: W5sFqT1fP8xaCwEEwbD20kws0fY.crl (hash: j98azabOlvFFx5TdgRsc1My3FqQgkg9jkeJQB7JS0J0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6a:a4:c9:22:d7:3e:70:37:a9:e8:0e:58:1a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=489f5c3b52a503bedeef6bba30381acd4061cf86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:15:e1:be:bc:81:89:8d:04:8a:41:37:fd:68:
                    79:4e:20:02:b0:c0:3f:62:31:9d:eb:1b:77:99:45:
                    fe:64:8d:70:25:20:f2:cf:91:d0:41:e1:b7:f5:f0:
                    b5:e5:d8:e5:41:b7:0d:19:cb:20:b1:e4:8f:d5:31:
                    f1:5a:c4:f7:8e:9f:2a:54:d4:c2:24:2f:4c:c7:35:
                    99:d5:da:a4:98:63:3a:77:9e:f3:1e:75:45:4e:87:
                    80:51:2c:7a:2a:cb:e9:4f:b1:bb:30:25:4d:e7:16:
                    d9:2a:97:ca:40:02:cc:48:29:dd:cb:4f:d7:a9:d0:
                    cc:a1:cc:0f:c1:07:5a:91:ab:5f:ec:8a:47:90:4e:
                    22:27:57:2d:c1:7e:71:0f:ef:fb:84:ca:04:01:b7:
                    f4:50:67:86:86:2b:19:70:c5:93:73:e9:e7:1f:c5:
                    d9:d3:3c:3f:b9:dd:3a:95:5e:39:d3:36:91:d5:d3:
                    19:8d:d6:5f:2f:2c:42:0f:28:7c:d7:da:d7:b0:62:
                    40:e1:ed:e2:17:8a:7d:85:e1:86:f0:9f:71:8c:21:
                    70:f9:f6:56:04:3d:79:eb:cd:66:a5:35:45:7d:d6:
                    45:0f:7a:6e:7a:7c:0b:b4:ba:53:46:6d:ac:77:82:
                    5c:2c:cd:7b:69:87:56:6d:77:e5:a7:79:d3:e5:19:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9F:5C:3B:52:A5:03:BE:DE:EF:6B:BA:30:38:1A:CD:40:61:CF:86
            X509v3 Authority Key Identifier:
                keyid:5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ca:0f:df:8b:29:af:74:d5:0a:ef:11:e5:24:49:7d:51:04:
         1f:27:1e:10:5c:39:15:53:03:91:cd:3f:e9:14:a0:8b:04:ff:
         56:a9:c6:17:00:f9:64:fe:90:32:e0:5f:e3:05:7f:ba:18:45:
         65:f4:76:5a:da:c5:ed:86:90:d5:ea:23:1d:12:06:74:ff:a1:
         0e:de:b0:56:4c:40:19:06:b3:f7:19:b6:87:6a:b4:93:e1:9b:
         5c:81:81:a7:cb:92:ad:ca:86:54:b2:86:c9:c1:92:0f:14:9c:
         bd:03:ce:c0:01:87:5a:de:ec:e2:87:0f:90:1c:72:dd:fb:0a:
         14:39:ff:b9:23:fe:1c:38:51:62:3f:fa:73:b0:b3:64:a9:1e:
         ae:96:19:62:6b:e7:27:fa:a3:55:e4:b3:fa:e2:f0:1e:8a:1a:
         55:4d:0c:92:de:53:13:1b:92:fb:8f:1d:49:b9:e1:58:ec:40:
         ff:7b:3e:c5:96:f1:04:dd:af:1d:90:92:f1:71:83:8b:28:f3:
         04:1c:47:9d:e0:2e:ef:0d:bb:0c:be:c9:0e:c1:f0:79:3b:a5:
         0b:b0:94:61:c9:8a:ed:26:f4:79:28:29:14:c3:79:b3:1a:09:
         32:0e:24:7f:f8:72:c1:c6:77:85:77:35:1c:af:18:a5:a3:62:
         1e:9b:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----