Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
File:                     WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft (raw, json)
Hash identifier:          UzOQZHuAqqO0RnU47+c+QAetSvQTJ5ul+kl8QXcnhqw=
Subject key identifier:   67:C9:8B:A4:BA:89:4B:4C:3B:DE:F1:DF:FF:FF:C5:B0:AA:43:19:B2
Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
Certificate issuer:       /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Certificate serial:       01962F06CEE9064CCD6632BD15465198242F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
Manifest number:          0182
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl (hash: 44Qrp8U7GEFz6dVBbWaerDjUs5Y5hJcLbdSMiii3YHM=)
                          2: uKvJupUJsNWoo5ivCG67FugGN0w.roa (hash: GwajJ7n21P+w7t9dfCC8gYHu25fAVce6h/mSVAkHqyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ce:e9:06:4c:cd:66:32:bd:15:46:51:98:24:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=67c98ba4ba894b4c3bdef1dfffffc5b0aa4319b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:a8:da:f3:cf:e8:fb:71:84:e3:ed:c9:74:
                    05:d6:65:01:34:50:ed:20:1e:36:13:29:96:3b:e1:
                    50:19:a0:16:b3:a9:c0:d1:eb:f8:f5:6c:77:c3:31:
                    fe:52:50:f3:3b:f0:31:2e:9f:3e:dc:15:9a:c4:64:
                    62:31:74:1e:57:49:fe:b8:b7:f3:5d:95:d5:c4:e3:
                    c0:40:53:61:f2:0a:af:91:8c:d9:36:f7:e5:57:20:
                    78:7d:30:a0:e7:af:85:2b:ba:d3:96:c6:99:9c:96:
                    1c:d7:d8:bf:eb:d6:80:b2:80:20:e1:2e:7a:09:80:
                    df:64:80:7a:ad:03:4e:2d:1b:ab:d2:7c:67:2e:57:
                    92:35:0a:77:71:05:1c:2f:bd:78:8f:6a:9a:bf:de:
                    a7:9e:3f:f3:12:f4:c9:4e:2a:a9:b0:5b:b9:c4:94:
                    3d:3c:de:ef:1b:85:17:a1:da:5b:d7:06:e9:3a:52:
                    e1:a2:2a:7f:8e:5c:4f:db:6d:8b:ec:a1:7a:cd:09:
                    3c:f0:9e:02:bf:3e:db:74:c3:56:09:83:c8:69:ba:
                    2d:64:f4:6a:c1:17:dd:63:ca:32:0e:d7:52:00:86:
                    90:5a:58:6d:3d:57:7c:c7:9d:dd:14:f0:52:72:54:
                    96:0b:ee:3a:c5:66:b5:49:f0:69:a2:4d:06:81:ed:
                    d4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C9:8B:A4:BA:89:4B:4C:3B:DE:F1:DF:FF:FF:C5:B0:AA:43:19:B2
            X509v3 Authority Key Identifier:
                keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:70:63:03:6a:36:91:0e:e7:d8:3b:12:b4:ef:38:ac:76:
         d0:0b:0b:0f:9f:2b:3d:9d:0f:e6:f3:50:71:e9:e4:d5:eb:8f:
         b8:04:7b:ff:59:b0:0c:31:3b:46:5d:1a:55:ba:e7:4e:40:00:
         a6:2b:f8:6e:5b:7c:20:9f:77:91:d2:ee:05:d4:b9:36:4d:04:
         fa:85:5e:45:a4:d4:5d:a9:b0:04:d2:eb:1e:dc:59:dd:4e:d9:
         1c:ce:2b:6a:6a:c8:6d:f3:e1:97:a4:1c:ea:65:fc:b6:c8:83:
         dd:56:8d:78:60:c2:39:bb:83:be:91:f4:aa:af:40:40:0b:32:
         d6:4a:66:35:84:b9:1e:e6:20:d7:20:b0:ac:8b:68:53:2c:12:
         1d:11:27:f7:fd:7e:48:f7:5f:0d:c6:3f:7b:80:e3:a0:3a:4b:
         60:1d:96:a9:c4:1c:a4:3a:48:1a:cd:d7:7e:fe:b9:6e:f9:1c:
         26:18:84:4a:aa:19:ca:3a:eb:31:f7:48:ea:d0:6a:47:17:27:
         0d:7b:29:f7:eb:09:ae:9e:69:91:51:89:c7:47:aa:b1:71:74:
         6e:3d:90:f5:5b:f4:bc:e6:cc:f4:36:53:bf:e7:3a:47:ef:6d:
         a3:35:1c:36:45:67:3b:61:21:00:97:03:c3:db:55:f9:70:ba:
         7a:da:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----