Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File:                     WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier:          7KunLnjWyWKMyiCe+yNri7LiC8he/XnO63Y/VvBy75M=
Subject key identifier:   54:D7:11:A6:76:78:65:C8:1E:43:55:2E:60:C9:17:54:E5:5E:66:8B
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer:       /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial:       01962F743273E5F9063E2FD2944598D881B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number:          07AE
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: wc4Vyi6xyaf6ZK8+qDjYxSPbnS3iUS68UrmsXBLp3Qg=)
                          2: vdHTEb2gTWFnAUlb8EFFzZFOAyk.roa (hash: 7sUvaXCmkwC5CKTFltnkxSzQliSsm8MxQWVCiowpXtQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:32:73:e5:f9:06:3e:2f:d2:94:45:98:d8:81:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=54d711a6767865c81e43552e60c91754e55e668b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:24:f6:58:5b:9a:f7:6c:cd:4b:94:7d:8f:
                    ec:8e:7d:30:4c:8e:c6:55:8e:69:3e:2b:f2:17:e1:
                    49:c3:32:6a:6b:42:33:d1:90:45:10:47:23:d2:74:
                    f2:be:18:ff:49:6d:59:bf:a0:b3:e5:f7:b0:5f:04:
                    fb:7b:25:3b:f1:07:24:b5:bf:34:93:54:2c:da:15:
                    e8:3a:85:0f:ee:73:96:6f:d1:61:de:fa:46:ba:fc:
                    09:99:ae:14:40:bf:4a:29:2c:99:60:e6:5e:99:f6:
                    a3:b8:c1:10:e4:b3:a0:4f:ee:83:6b:33:fa:d5:0f:
                    ca:84:ad:db:63:46:8b:ec:a0:46:0c:f4:ef:d3:52:
                    c7:1f:ff:cf:b2:ac:0f:72:76:ab:a6:15:bd:9b:ec:
                    cc:16:0f:43:07:71:77:ef:32:c6:27:68:c4:2a:10:
                    c2:ac:71:6f:00:2c:91:54:4a:c3:1d:68:0a:85:a5:
                    4e:54:74:e8:8e:1d:c5:13:8b:11:19:da:59:ab:63:
                    9e:bf:09:4b:25:83:8e:2b:57:22:9a:78:a5:db:d8:
                    eb:7f:0b:21:e4:23:d8:bd:32:57:8a:e1:15:db:fb:
                    b8:55:6c:54:44:d7:e0:7d:df:db:74:4f:af:dd:e8:
                    39:03:a7:2f:dd:11:97:af:81:97:ee:1b:78:44:23:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D7:11:A6:76:78:65:C8:1E:43:55:2E:60:C9:17:54:E5:5E:66:8B
            X509v3 Authority Key Identifier:
                keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:41:e0:ff:d1:b1:63:0a:a4:31:9e:e4:a0:7f:6a:12:0a:1b:
         2c:2d:d0:c7:40:e6:d0:d3:de:5e:60:71:40:a6:be:48:37:90:
         f7:74:27:a9:50:3f:51:8d:c3:8d:db:21:11:61:e7:59:b1:27:
         cc:17:cd:38:4d:e0:ee:a1:75:ed:30:9f:23:21:a1:98:33:16:
         61:23:0f:69:92:20:d9:29:33:36:bd:d6:78:3b:b2:0c:5b:11:
         54:f6:8c:59:49:20:be:25:95:0a:4d:81:f9:ad:3f:45:7e:97:
         08:45:d1:ad:76:95:e4:32:9a:16:b8:22:a8:0b:c0:7a:be:16:
         8b:9e:e2:3c:52:cc:3d:3e:bc:98:68:8f:b2:47:55:33:a5:d4:
         10:9f:b0:0d:11:9f:c0:27:c7:02:d6:d3:55:93:16:4a:47:cc:
         b9:aa:ca:e4:14:99:0a:86:10:a2:f6:af:02:ce:62:5b:f3:a9:
         3d:ab:0a:bb:28:61:ac:02:e7:3c:c2:38:0e:b0:c8:1a:9e:8f:
         c6:08:77:81:91:03:39:fd:7b:9a:df:ec:aa:45:7c:8f:39:08:
         86:f6:bb:91:0b:a1:b1:33:c7:32:92:56:11:65:cd:9b:d2:d2:
         dc:48:4a:4e:20:cd:e8:eb:af:bc:4c:c5:78:44:42:e8:ad:1b:
         ec:13:73:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----