Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/04946b-22fe-4a33-b6ac-d05f0ff4c243/1/WBTLOIX9M21BTnDc4-0ZDXkkMmM.mft
File:                     WBTLOIX9M21BTnDc4-0ZDXkkMmM.mft (raw, json)
Hash identifier:          RnyKZXTPF+4Wn1fIS70cPi/I2kDXl68y0u12SbGpuzY=
Subject key identifier:   4A:8F:B9:7B:3F:4F:A8:75:51:E3:DF:EA:1C:E4:B1:AE:E5:07:13:4D
Authority key identifier: 58:14:CB:38:85:FD:33:6D:41:4E:70:DC:E3:ED:19:0D:79:24:32:63
Certificate issuer:       /CN=5814cb3885fd336d414e70dce3ed190d79243263
Certificate serial:       019346714982FA97B5992E8B0FD4CFAA4DA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTLOIX9M21BTnDc4-0ZDXkkMmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/04946b-22fe-4a33-b6ac-d05f0ff4c243/1/WBTLOIX9M21BTnDc4-0ZDXkkMmM.mft
Manifest number:          F2
Signing time:             Tue 19 Nov 2024 22:00:49 +0000
Manifest this update:     Tue 19 Nov 2024 22:00:49 +0000
Manifest next update:     Wed 20 Nov 2024 22:00:49 +0000
Files and hashes:         1: WBTLOIX9M21BTnDc4-0ZDXkkMmM.crl (hash: 8LIHb8DJC3K5FqQ8cphapX0mCaD7W0HkpaB+MAXEy1s=)
                          2: hXwoqMIn8qTJK4QROzsdYrUWzFo.roa (hash: q4ywFzuLrG+FijJpEev/rbrnrzro4PHR2eo/yOYJJWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:71:49:82:fa:97:b5:99:2e:8b:0f:d4:cf:aa:4d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814cb3885fd336d414e70dce3ed190d79243263
        Validity
            Not Before: Nov 19 22:00:49 2024 GMT
            Not After : Nov 20 22:00:49 2024 GMT
        Subject: CN=4a8fb97b3f4fa87551e3dfea1ce4b1aee507134d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:26:28:a1:da:db:26:9c:31:42:20:2d:f0:
                    4a:d3:4d:da:25:71:1c:51:95:3b:72:a9:b5:d3:7b:
                    f7:a5:fb:63:da:50:1b:57:a1:82:01:07:5d:fa:c5:
                    a8:af:43:ca:18:eb:df:2a:58:9d:e1:31:4b:a7:c2:
                    75:ff:a4:53:56:a1:56:20:9f:1e:17:63:3c:a6:1e:
                    9d:d3:55:df:c5:c9:d4:e5:9f:51:98:c7:47:9b:94:
                    86:4b:bb:26:e2:54:2f:f0:96:e7:c8:0f:44:d2:5d:
                    36:2e:c8:ca:09:d8:95:25:02:aa:68:e7:5a:92:4b:
                    9c:52:86:83:63:d1:9c:49:46:a4:0c:f9:96:b0:b9:
                    86:3a:42:2a:7f:2d:b0:eb:30:80:0b:6a:2a:97:c0:
                    95:1b:f8:b5:17:8b:76:d0:12:66:4b:51:3e:ba:85:
                    c9:49:5b:87:da:55:c8:6d:e7:ba:4b:60:c8:63:3d:
                    b6:71:b4:f3:64:54:68:2a:f8:91:7b:1f:26:3e:a6:
                    fb:1d:c8:22:28:c7:37:14:39:ae:1e:b4:8d:12:55:
                    de:83:6f:9c:52:3a:99:f7:45:59:89:03:2c:10:38:
                    34:d2:df:54:f6:2c:b9:48:c1:bf:f6:c2:a7:92:ec:
                    84:8c:c8:1f:cf:f0:01:e4:2b:37:1a:fc:ea:12:a4:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:B9:7B:3F:4F:A8:75:51:E3:DF:EA:1C:E4:B1:AE:E5:07:13:4D
            X509v3 Authority Key Identifier:
                keyid:58:14:CB:38:85:FD:33:6D:41:4E:70:DC:E3:ED:19:0D:79:24:32:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTLOIX9M21BTnDc4-0ZDXkkMmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/04946b-22fe-4a33-b6ac-d05f0ff4c243/1/WBTLOIX9M21BTnDc4-0ZDXkkMmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/04946b-22fe-4a33-b6ac-d05f0ff4c243/1/WBTLOIX9M21BTnDc4-0ZDXkkMmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9d:e9:0f:08:1d:dd:d9:f2:48:93:b9:67:38:78:82:53:74:
         f9:41:5e:44:5e:1e:b7:58:80:c7:37:60:c9:c0:ce:a9:f7:ce:
         a3:d5:0c:e7:a6:ec:4b:84:d7:51:89:2e:31:83:c6:09:2d:f2:
         d5:2d:b6:f0:48:11:38:61:11:e3:fd:91:a6:9c:3e:b9:28:95:
         c9:e2:7c:36:32:c9:e5:f5:60:29:42:c4:c3:b7:4a:ca:0f:55:
         ad:e5:e0:45:60:52:fa:1c:fd:ba:db:e0:13:fa:66:6a:80:00:
         37:ee:05:20:ac:94:61:f6:79:75:68:8c:49:49:2a:14:5f:1b:
         05:c6:62:da:95:86:3c:59:27:76:87:de:b6:86:c3:54:63:a1:
         fe:9a:f9:35:da:16:f8:4c:50:27:4e:e4:36:b2:5a:55:5e:03:
         6d:e6:96:69:51:14:f4:57:03:09:6d:62:26:54:68:78:fb:d4:
         8e:1c:1c:58:f4:b3:03:d2:b5:79:be:b3:27:07:2e:5a:20:84:
         01:57:81:7f:38:a5:7f:73:e0:ff:4e:63:39:d5:6c:eb:d2:92:
         0d:74:ef:9e:63:7c:5d:48:3b:c0:50:bf:14:08:59:c7:5a:b9:
         ff:de:0b:b8:be:30:32:64:88:55:9c:2b:5e:a9:e7:90:a2:20:
         d0:21:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----