Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File:                     WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier:          YfxyhiHAKUGYHFFPCydLw8R+G42BL4F4/96/YJ1xrcY=
Subject key identifier:   E3:20:E1:A0:D0:17:FA:AE:0C:19:20:E8:D7:24:68:DA:5D:07:34:8E
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer:       /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial:       01962F3D6C7531C9F07FF00A68E470E7C106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number:          06C9
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: xACxxOR0DzYloZWazqvAGszLk4H98HsIszgzf/uxVd4=)
                          2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
                          3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:75:31:c9:f0:7f:f0:0a:68:e4:70:e7:c1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=e320e1a0d017faae0c1920e8d72468da5d07348e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:bc:2a:9a:a1:a1:ad:b0:22:24:cc:03:d1:
                    1e:d3:5a:6f:1f:cf:a5:ca:69:13:d7:cb:fd:74:05:
                    61:ef:5f:23:82:1f:2a:5f:7d:06:dc:c0:e1:cc:9f:
                    c4:34:fc:41:d5:68:14:0c:1e:14:56:d0:51:77:94:
                    71:ec:cb:8f:f0:4f:f4:89:7d:09:97:3d:1f:4a:a9:
                    13:06:ac:ac:d5:36:90:53:53:27:4f:67:3d:1a:74:
                    90:67:d6:53:0a:c3:2e:09:ea:81:0b:0a:0e:85:c2:
                    81:76:5a:a0:e0:09:e3:86:43:7c:9a:8a:e3:e6:c0:
                    89:31:23:53:6e:e8:b7:ee:02:90:95:83:ac:0b:28:
                    a1:94:a8:29:79:9e:c6:3b:20:80:09:02:59:2a:7a:
                    1c:bc:5f:cc:a6:5a:97:5a:c6:0a:e2:5c:42:97:fa:
                    87:ee:2d:37:8d:6d:54:15:4c:b7:b4:76:74:c7:b8:
                    19:71:78:28:27:c0:a8:71:2f:ed:1a:fb:51:a9:3e:
                    51:80:c0:75:4c:8b:5c:9d:d2:63:6a:5d:35:3f:c4:
                    09:65:ee:b9:8d:24:8b:13:50:d9:4e:79:79:5b:17:
                    a8:5a:d1:60:ff:f9:72:e1:d8:4e:ad:62:88:0f:89:
                    a8:04:f5:6f:54:e4:ad:60:5c:73:72:2e:99:6c:ef:
                    d4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:20:E1:A0:D0:17:FA:AE:0C:19:20:E8:D7:24:68:DA:5D:07:34:8E
            X509v3 Authority Key Identifier:
                keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:89:47:01:65:0a:65:e9:dd:89:9e:27:1b:82:f3:28:e6:19:
         b9:56:4d:27:57:b1:4f:9f:f2:cd:fd:2b:aa:e8:4c:cd:7f:41:
         06:0c:9a:58:3f:85:f5:e9:d0:87:c0:6b:05:8a:03:92:ca:f3:
         bc:f9:4e:8c:b0:9b:7d:63:03:8c:7c:03:57:96:c0:4e:f6:3f:
         a2:6e:ca:07:d9:7a:0e:0d:62:60:0c:c7:ef:53:c8:7b:ce:b3:
         a7:cd:0b:7d:36:21:75:9c:b7:58:1b:99:94:ad:e5:26:2d:94:
         fd:63:be:49:b8:06:1b:24:29:26:3a:09:88:92:d6:a7:37:9d:
         c4:ba:58:4c:6d:00:62:ca:11:1b:09:33:4b:b5:af:d3:7a:ff:
         7a:66:1f:59:89:3b:3c:8d:64:3e:bc:cf:8f:13:af:68:b5:3f:
         5e:6f:14:0c:3a:2b:d3:c3:d8:d0:78:c6:e6:9b:ac:da:08:e0:
         20:50:af:1f:80:dd:c8:89:dc:62:79:84:f1:53:47:f0:28:b8:
         40:a8:ba:0f:c9:6c:7f:14:e9:18:ee:4b:03:a0:50:d4:ed:8c:
         81:3a:b4:a6:7d:a1:80:a1:08:b2:a0:2a:be:8f:4d:60:8e:40:
         6e:6b:60:3d:a0:f3:c1:55:03:5c:75:af:be:11:27:23:67:0b:
         32:63:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----