Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
File:                     WBTburY-kRfQsCy6tWY55v0NQNk.mft (raw, json)
Hash identifier:          Fizo4K5vawOTMqX/vCi6WMEbFcYlatQhiUYkMVM+Rnw=
Subject key identifier:   84:5F:BA:0B:18:EF:34:08:8E:2B:86:C2:78:3C:79:6F:FC:9D:B1:83
Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
Certificate issuer:       /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Certificate serial:       01962F7441992066BBB70DB11E9182C1EB58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: 9aWfFrVV6kNcSEVMyjUiJGRV2Hk.roa (hash: 2ggTFeYxBPxRF6Rq6dR3nlXwESWxYB6llxCNOaUOXlk=)
                          2: NQ3Hqsa9Ig3VQeONsfBRUw0GPTw.roa (hash: Z4adnhO9HL4Qf13lMs1zy6XjGpvyjo5yTcpwXrNvu20=)
                          3: WBTburY-kRfQsCy6tWY55v0NQNk.crl (hash: dzY5/LfonxIBDPTRULmZ8I1FWZZs914C0Zv9O/oRua0=)
                          4: vCIsJFXMW5fIme07NsNA6g87pdQ.roa (hash: L57Yb+wStbiyBbdvvlmBkGgeQ91E4S6blQZLWIVdGHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:41:99:20:66:bb:b7:0d:b1:1e:91:82:c1:eb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=845fba0b18ef34088e2b86c2783c796ffc9db183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:36:b4:07:70:d3:c7:83:6e:0c:85:a2:51:
                    73:97:26:7e:59:5a:16:48:69:74:40:e1:89:fd:f3:
                    d0:67:4d:4c:6a:65:5b:c0:47:e1:6d:61:d8:80:75:
                    fe:0f:69:1a:c7:87:ab:d2:79:38:60:6d:08:d0:fa:
                    db:88:d9:e9:d8:f8:d0:42:90:d3:02:df:9e:a2:63:
                    58:66:a1:9d:79:ea:ae:ee:fc:03:06:7c:8c:09:9b:
                    13:a6:7d:aa:db:b8:1f:ce:e0:53:d4:db:f1:e9:a4:
                    40:93:b3:85:79:e3:28:9f:4f:7a:94:75:d5:59:b3:
                    25:65:4b:68:82:8b:4e:44:69:44:34:a6:a6:e9:78:
                    98:72:c2:b7:91:0a:2a:71:9c:4e:06:7f:cf:1d:2d:
                    cf:29:b0:7c:bb:6a:87:df:3c:b7:ce:55:49:99:03:
                    10:85:3e:15:9b:1a:59:db:e6:68:e9:47:c6:85:56:
                    a3:f9:ff:b6:18:92:39:de:e9:ef:c3:c4:cc:29:1f:
                    14:ad:11:ab:ae:fc:4c:dd:99:67:cd:4c:2a:9c:f6:
                    7e:3e:8a:ae:7c:e9:5c:55:67:b4:aa:c3:61:d7:29:
                    0e:10:33:68:4e:78:7c:42:2f:cb:e1:6e:ca:67:8b:
                    82:84:19:2b:09:af:27:88:f1:6e:04:82:ba:b7:a8:
                    34:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5F:BA:0B:18:EF:34:08:8E:2B:86:C2:78:3C:79:6F:FC:9D:B1:83
            X509v3 Authority Key Identifier:
                keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:5d:9a:39:5f:29:a6:5e:94:85:40:1c:57:e1:79:d0:c6:c4:
         6c:c6:50:2d:57:55:c8:e0:6c:f6:2b:91:3e:21:f2:4f:c2:9c:
         5c:33:4f:55:4b:6f:c2:64:01:dd:f3:84:fd:f8:11:77:7c:75:
         63:ca:99:56:3c:5d:98:7a:9b:fc:7f:f6:39:05:17:3d:76:29:
         87:e0:08:10:20:b1:87:07:e8:74:32:fa:c4:5d:35:49:33:3a:
         82:1e:31:40:44:18:22:3c:8e:12:50:86:09:87:31:99:14:46:
         0c:99:cc:2b:ce:31:92:c6:1a:a7:8a:de:0a:7e:56:ec:eb:04:
         e9:9e:45:ec:a0:66:5b:6f:98:61:45:43:1c:db:e8:3e:a1:14:
         cc:05:27:61:ff:4f:7e:a2:b1:e1:2b:16:af:41:7b:f8:e6:80:
         f1:21:4b:26:ec:47:e5:02:1b:aa:8b:ed:aa:ef:69:75:fa:6a:
         2d:a7:35:3e:b6:ef:85:fe:17:ff:ca:1a:0e:20:38:d6:39:98:
         78:94:e8:b3:a1:79:1b:02:7d:fe:20:a4:58:da:2c:80:2c:45:
         fb:56:a8:ca:3c:2f:18:8d:36:ed:1d:39:67:6c:fc:ee:17:42:
         22:91:d6:a3:c0:80:93:63:fd:27:b0:68:88:e8:2b:88:de:5d:
         c6:2f:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----