Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
File:                     WQYyXjRBilfOVm78DD6LOKDvpds.mft (raw, json)
Hash identifier:          VhD3NyWlo8lC/H60YX4RiOywJXRbekfSeZMCAX3y9kQ=
Subject key identifier:   12:48:0B:99:28:99:C9:86:55:C2:7C:02:27:50:AB:DB:FD:45:71:5B
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Certificate issuer:       /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial:       01962F746CD1C02EC808E599A2D9AD9C76BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
Manifest number:          04CB
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: CHolCMPV9MDfWslO2iJddWWgMxU.roa (hash: xbO5/GWIWdRSiMSxSxvQxXxVcngA8nyNGqLLz8U68pk=)
                          2: WQYyXjRBilfOVm78DD6LOKDvpds.crl (hash: YJZ6a8P/CsDzLBlLyBaA7+fvCgl3NSajwYNRgkPyxYo=)
                          3: lJbRiLiZGOi-fCWDGGzZN5ma7W8.roa (hash: BxDOajJXMhzwiCUKNNyd1p9JlNupPH3KBSPrVsuMQCs=)
                          4: xyGqaFm8wV6in1t_6bj0_LRGfV0.roa (hash: m0Saw+cLOstpLd2stdgUm+hFFozHrcVyidN3zuOottg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6c:d1:c0:2e:c8:08:e5:99:a2:d9:ad:9c:76:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=12480b992899c98655c27c022750abdbfd45715b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:fb:2c:b9:70:25:83:08:91:3b:81:33:9e:
                    90:46:cc:3e:f3:b9:28:e2:16:14:b4:f5:15:b1:b4:
                    64:9c:c4:a4:9f:b8:2b:d5:1f:e9:2f:45:85:24:6c:
                    fa:20:ec:74:d9:39:24:bb:20:85:75:f8:3f:45:22:
                    c1:9a:dd:16:46:ff:aa:52:95:44:4d:95:ca:62:f2:
                    32:80:ed:8f:c1:16:97:7e:7d:f3:fc:ac:9a:f3:75:
                    dd:56:b0:32:7a:13:cf:54:d3:30:1c:19:f1:9b:c7:
                    54:d5:46:ae:d3:59:cb:4c:64:00:8d:74:96:8e:23:
                    9c:aa:27:8a:81:52:26:fb:c7:cb:69:c7:14:db:2b:
                    52:98:6a:d6:f0:e0:a7:62:46:de:23:e8:05:ce:4f:
                    9b:f2:83:44:0f:07:42:c3:f1:89:47:c0:67:4a:55:
                    d7:0f:a9:c7:82:d3:eb:1e:db:60:10:65:12:60:53:
                    f9:ab:c1:cc:df:be:1f:19:bf:9c:39:a8:09:cf:c2:
                    f5:5a:0d:df:c5:5d:24:85:48:8a:d2:9e:ce:47:3e:
                    79:2a:cf:f3:09:f2:a6:44:36:aa:5c:c9:11:71:9e:
                    f2:2d:b6:6a:cd:e8:92:21:89:4d:8d:c2:b0:aa:d7:
                    39:74:6b:fc:80:fd:a2:3f:74:4b:79:35:f5:91:88:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:48:0B:99:28:99:C9:86:55:C2:7C:02:27:50:AB:DB:FD:45:71:5B
            X509v3 Authority Key Identifier:
                keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6c:1b:9f:31:30:03:e9:38:95:aa:83:ac:8a:bb:20:e3:90:
         0e:2c:b8:fe:30:f7:26:bc:6c:45:54:ac:7d:ba:7e:e4:c7:b5:
         a9:ca:05:24:3d:df:44:b0:bc:0b:48:c8:1d:1b:4b:51:67:7a:
         d7:77:ee:64:d3:8d:64:6b:f6:05:19:02:bf:74:95:c1:95:c9:
         41:d4:bd:fc:7e:5e:79:58:4e:bf:d3:51:52:bf:0a:90:d9:ce:
         36:58:21:ee:df:a7:8a:cd:6e:94:e5:f4:8c:aa:be:b6:04:2c:
         aa:e0:2e:b4:fa:c8:f6:7c:a6:64:71:78:3a:97:12:50:fa:25:
         90:5f:ee:62:ec:cb:a3:fa:6b:4b:49:43:66:fe:69:60:18:8e:
         44:5c:be:c0:8c:97:98:16:65:68:8b:88:b5:40:f2:4e:6c:34:
         af:f2:21:ad:0d:52:6f:b7:36:8f:e5:53:c0:54:01:27:e3:b0:
         11:be:a7:50:a1:db:04:36:67:2f:74:b3:69:a7:41:83:8f:87:
         4a:82:ca:06:a8:bd:2d:f1:e1:f4:dc:2e:d9:01:f2:81:a3:e2:
         f8:6e:b9:80:cc:6b:6b:dd:f6:f4:bd:53:56:6d:79:e4:87:5f:
         04:93:82:4a:6d:ab:64:42:2b:88:30:f4:58:2f:0f:f7:8b:e4:
         62:c4:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----