Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File:                     WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier:          M8sZJ2vSYPDoCpsKMBpdzfJqPUhdWYXFFj1ujp1MFNg=
Subject key identifier:   7A:D1:5D:BD:48:27:95:2B:A7:BE:0D:29:E8:9B:B5:A1:86:4B:0C:29
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer:       /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial:       01962E61EF0699340EE930BCE1C0421C2627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number:          DC
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: shohcEJRjvKNBhiCZZ9LXQ/8eFNcEDQINXotsTjhOsY=)
                          2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ef:06:99:34:0e:e9:30:bc:e1:c0:42:1c:26:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=7ad15dbd4827952ba7be0d29e89bb5a1864b0c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:9e:95:a2:b5:a8:22:a3:8c:0a:c6:4e:4e:
                    e7:f2:a5:cd:00:3f:e4:eb:3c:6b:20:89:de:23:20:
                    33:b3:f2:fe:a9:ad:0e:da:f1:bc:35:93:c6:74:31:
                    90:d7:96:aa:20:28:26:02:30:c8:43:1e:89:69:98:
                    1a:02:35:70:90:ad:b0:65:ec:e7:13:ce:11:33:b2:
                    ca:9c:1c:36:77:6c:5d:45:ac:ec:cc:43:a9:eb:15:
                    e2:f6:d3:3a:b2:c1:e1:43:a5:ea:bb:69:ba:e2:97:
                    95:0f:79:60:a3:21:b7:f3:1c:6d:72:07:77:d8:4b:
                    f2:80:0f:fe:14:42:94:88:3f:55:e3:d9:1e:24:f1:
                    13:70:99:6e:5c:57:67:16:37:45:bb:22:8b:2c:da:
                    30:4e:78:a9:3a:02:e6:f3:d3:ef:32:8c:5a:69:18:
                    70:8e:08:49:a6:11:f3:2d:ef:44:48:3a:43:81:2c:
                    78:ce:f7:65:6d:86:f1:b7:82:b6:74:26:52:7e:dc:
                    0a:ee:0e:3b:da:47:11:bc:c6:1b:62:de:e7:82:22:
                    e8:cc:94:73:f0:13:a5:08:79:07:b1:2c:cf:0b:d4:
                    24:7e:64:82:43:f6:65:71:54:7a:fd:36:ab:a2:e1:
                    c5:c8:af:78:86:f6:b7:52:43:28:43:10:68:f7:1d:
                    ac:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D1:5D:BD:48:27:95:2B:A7:BE:0D:29:E8:9B:B5:A1:86:4B:0C:29
            X509v3 Authority Key Identifier:
                keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7b:dc:35:6f:8f:e9:dc:21:2f:2d:45:11:0a:3a:d1:91:7a:
         4c:be:9b:8a:60:02:6e:f9:2d:f3:85:94:5f:12:5c:e8:48:7c:
         a8:c2:7c:a4:6b:de:c2:64:a4:62:fa:ef:fb:b1:c1:2c:56:2c:
         d9:3c:ee:0f:a4:60:a9:11:0c:81:f3:b0:0c:e6:33:1d:37:af:
         c8:78:99:67:dd:2b:11:72:8d:d5:20:92:e4:6c:91:40:24:88:
         04:fc:01:8f:5b:a8:8a:24:85:6e:3e:9b:b5:24:66:1b:75:56:
         29:27:a7:4d:ad:2d:87:9a:76:dd:12:d4:35:07:03:42:af:25:
         ee:76:2e:d8:c3:97:e3:23:5b:2a:32:94:a2:02:98:af:b5:f8:
         d0:92:19:34:7b:ee:18:83:79:2c:a8:bb:dc:74:da:7d:b3:f5:
         c9:23:16:ea:77:21:59:7f:0d:71:f5:4a:ed:24:a9:68:b7:ca:
         3a:59:a4:9a:b7:58:57:e6:06:d5:79:d1:3c:ce:40:f1:5c:3c:
         18:c8:15:04:b2:7e:a7:44:ca:1f:ea:22:4d:c2:d0:bf:28:51:
         85:cd:c6:80:c3:0e:4e:dc:9a:00:fc:1d:86:dd:a7:1e:17:5b:
         a2:cf:c7:56:c3:7f:c6:90:05:98:8f:22:b0:00:92:76:aa:4f:
         f8:ca:0f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----