Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File:                     WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier:          97dkSr8ZcCexbBCJHkJPWejEfP3EfPZo2FwzMZBqkWs=
Subject key identifier:   0B:F7:09:5C:3B:E8:84:FC:93:89:72:FA:46:FE:D8:FD:21:22:6F:7F
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer:       /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial:       01962DF3F8C2F83E3A6DD750E941D2B86AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number:          08D2
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: DTuRKBc5DWAml25DkyA602e9E2c.roa (hash: 5dE22gWyeJTuF6kqg31h2vC+gEZF7bnxpO0rszd82sI=)
                          2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: 1vUKpbi3EQmc3JLI6uoM2ws3u9ASJWVwp1gxFQw662Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f8:c2:f8:3e:3a:6d:d7:50:e9:41:d2:b8:6a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=0bf7095c3be884fc938972fa46fed8fd21226f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:69:23:9b:59:3b:86:66:7d:84:25:5c:25:
                    a2:d2:41:44:d6:48:6c:9f:9d:88:24:6f:d0:54:3d:
                    c0:c5:e6:43:00:1c:17:66:50:5a:b1:2e:54:09:a6:
                    0e:8e:03:bb:7a:d4:a4:7a:0d:8a:00:45:55:7e:c4:
                    98:b0:9b:6f:d2:cd:4f:2b:06:36:98:89:ff:25:91:
                    b5:a1:5d:42:76:c5:b2:fa:e6:0e:8b:c5:d3:91:6f:
                    88:1e:10:88:47:8c:31:f4:93:d6:c7:6c:fe:33:75:
                    fa:e0:e3:2f:2d:c9:73:e9:dd:a3:32:fc:84:86:7b:
                    60:b8:6d:6a:bd:9b:a1:75:fc:a5:67:f8:a3:b7:cb:
                    99:cd:77:20:73:65:2b:8b:8e:9c:81:83:22:90:2d:
                    c1:b2:9f:2e:30:c6:18:d7:55:1a:23:d3:26:5e:57:
                    a3:72:22:b3:05:66:bf:3e:9f:05:48:cd:89:a8:5c:
                    e0:da:04:df:13:ec:78:0a:71:3a:28:f7:7c:e8:68:
                    f3:0a:7a:dc:54:df:37:07:8e:c0:4f:dd:bc:e3:fb:
                    07:27:07:d6:c0:72:11:3c:7d:96:99:3a:77:c6:90:
                    c8:cf:bf:0a:9e:d3:6c:ad:99:48:41:11:11:4b:b6:
                    63:ab:91:0f:d8:65:92:4e:f7:4e:9a:b1:16:5e:68:
                    48:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F7:09:5C:3B:E8:84:FC:93:89:72:FA:46:FE:D8:FD:21:22:6F:7F
            X509v3 Authority Key Identifier:
                keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d9:62:9d:89:0e:88:1a:d6:e4:aa:02:62:5e:2c:64:50:1b:
         a7:b4:98:c3:17:76:20:39:ff:17:33:57:b7:97:06:39:72:c2:
         6b:44:3d:83:89:88:bd:2f:e6:a9:d0:4c:f9:87:f0:30:5a:81:
         48:f8:a9:cd:1f:4b:9e:f1:fe:6a:9b:f0:a8:e2:55:20:00:2a:
         94:99:cb:db:f6:9e:0c:52:89:51:d2:16:83:67:47:c6:ee:b5:
         aa:d2:87:93:3b:74:e3:18:07:af:30:63:1c:37:d1:bf:26:ce:
         93:0e:16:3b:62:9b:5f:d0:04:90:dd:09:6e:fa:49:b8:0c:cf:
         aa:33:2d:7b:28:ce:78:ec:25:ec:ca:1b:d3:ef:53:f4:96:77:
         92:6a:65:82:1f:4a:6a:a1:ae:78:c4:96:5d:72:9c:8b:f5:4c:
         27:7a:2b:d4:26:b0:86:e5:0b:e9:96:14:5f:b8:7b:6b:64:88:
         ad:f4:6d:62:22:77:b1:0b:cf:14:4b:ae:da:1a:6c:cc:d3:c5:
         5c:32:62:2e:3a:a7:82:05:0e:99:08:88:05:21:19:ae:17:03:
         71:e1:37:19:72:c7:7e:f4:14:c9:e3:c8:be:f5:2f:fb:07:fe:
         42:25:1a:e1:4f:a6:5b:fc:c7:fb:e9:75:d6:2c:ad:85:8c:4b:
         e7:61:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----