Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
File:                     WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json)
Hash identifier:          y0nber2/3RnkodesWhExgFKz+oxR47+ibX7BKYTES6k=
Subject key identifier:   F9:89:C2:2C:71:31:F2:9E:8F:04:54:80:F1:7E:E0:79:11:CC:22:6A
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Certificate issuer:       /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial:       01962F3D45932C160905A75D0FB0D2089286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: 4nRwCZls5UweiImlr2hyq7CrpgojC1V8ltuFCEl7ETg=)
                          2: qnyT4xJfydWnP5jn7MY2v2jL3y4.roa (hash: OVzltJuTj7ZgLCXEnxygFrh+27k2M7PI7mlew2jPilY=)
                          3: rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa (hash: pob5Gk3ii6Z8pPugpFKGScd6y3cYxp1AE5yYcUpWbig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:45:93:2c:16:09:05:a7:5d:0f:b0:d2:08:92:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=f989c22c7131f29e8f045480f17ee07911cc226a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:fa:ce:94:8c:4a:36:91:e1:2d:6e:30:0a:
                    f1:dd:0f:0c:cc:76:19:a2:fb:86:95:bf:23:73:df:
                    e0:15:21:e7:06:47:4a:89:fb:c5:33:cc:37:4e:d6:
                    23:dd:33:21:83:20:fb:87:88:70:e6:ea:60:14:cf:
                    d8:35:20:b3:18:6e:ff:c2:a0:f5:61:b6:b2:28:06:
                    09:b4:ce:05:bf:71:31:41:81:ce:91:6f:dd:f6:5d:
                    c1:54:69:66:7c:40:a9:bf:a3:e6:07:14:c8:3e:19:
                    a7:57:9d:c4:09:7c:ba:2f:97:f0:1f:05:e5:29:89:
                    a5:de:41:5c:36:f7:55:8c:04:b2:a2:2c:10:2a:80:
                    0c:e2:33:e8:ea:44:a3:03:4c:6a:cd:60:20:19:bd:
                    78:09:38:75:24:ba:c4:ad:06:e8:6e:fa:91:ff:79:
                    e9:24:aa:7a:fd:b9:97:ed:27:58:5b:87:28:3e:9d:
                    aa:7c:45:db:70:1b:24:f7:1c:d7:b1:52:f9:87:a5:
                    e3:30:d4:8b:34:29:6d:69:87:0c:bd:7c:4d:9f:35:
                    8b:0a:31:2e:fa:4a:83:36:44:d5:5e:6e:8c:c6:e6:
                    69:8d:0d:5a:c5:d2:c2:50:db:b7:b3:49:0e:38:a7:
                    b1:c8:9c:8b:80:ab:d4:f3:5a:9e:0c:ef:19:ab:33:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:89:C2:2C:71:31:F2:9E:8F:04:54:80:F1:7E:E0:79:11:CC:22:6A
            X509v3 Authority Key Identifier:
                keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e7:e5:2f:89:a8:77:bd:a6:4a:0c:7d:3a:b1:63:3a:71:36:
         4e:d2:7f:3d:2b:f3:0d:b6:57:5d:e6:7e:d2:0c:09:f1:8d:2c:
         50:40:38:3c:d2:2f:de:26:b5:42:5c:1a:66:6f:df:a2:be:f7:
         b5:35:51:87:ce:e9:ab:92:a4:5a:de:32:0d:b0:6a:36:d2:4c:
         ce:c8:24:24:1e:4b:67:63:c9:2c:23:5b:f4:a7:7b:55:3c:14:
         9a:9f:39:77:96:fa:a8:5d:46:81:8f:a1:f1:47:07:0c:5b:c1:
         c2:ee:18:9d:05:1b:8f:3a:31:c6:af:9d:a4:b9:50:a6:fc:6f:
         59:e7:82:ae:b3:53:6f:e3:1d:b2:65:63:51:c1:41:37:42:08:
         73:90:fd:23:86:0c:62:09:38:17:5a:fa:b1:60:41:2b:11:58:
         2b:dc:9a:3f:df:b0:3d:45:39:47:7a:ee:b2:b7:9a:fe:bc:8d:
         7b:31:ed:dc:1a:e0:3a:de:f3:fd:1b:ee:a7:63:17:7b:ec:87:
         69:69:da:c0:50:bf:1a:91:72:a7:7e:e8:9a:30:85:46:38:d1:
         f6:25:8e:ac:07:b4:55:fe:28:ad:7f:9d:35:0b:f1:79:ac:a0:
         72:71:79:11:07:90:db:97:9f:0e:88:56:4e:8a:01:f1:58:42:
         f9:d1:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----