Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.mft
File:                     WaBsGHlTz8gTOyvu5fAaFeRdoHg.mft (raw, json)
Hash identifier:          avkG1Pd2Ojjb3TSCfsVUzfwGdwpeLuyz8gZMTi7pY9I=
Subject key identifier:   49:10:AE:B7:73:10:A8:BD:6C:86:85:2D:94:A1:1C:52:F5:98:19:41
Authority key identifier: 59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
Certificate issuer:       /CN=59a06c187953cfc8133b2beee5f01a15e45da078
Certificate serial:       01962DF439926FD4F9B677F746F9DEE7D613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.mft
Manifest number:          0E24
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: AxaM-v_keC6hj5jeMIEMnDIirj8.roa (hash: WzcovteMzR5j0alxL7TF1AbpsPu9LZ7T0iqF7rMqk/Q=)
                          2: Q4Ifd36mUgahlb8ER3M21CG4Et0.roa (hash: EkxK6XBw8YM5DjPD1olp887Tfc6rOgr2lDvuY8PUoEw=)
                          3: WaBsGHlTz8gTOyvu5fAaFeRdoHg.crl (hash: sv/zPtDESamJ8mHh4h7rZPydIQdguJt4R4tX8VnVGmY=)
                          4: q2JPU8dxIMMe2Q7x6Q9pfIEW5vc.roa (hash: 899bNl9fPVf+A0gU4Vj1vZoq6SULDUfpfOHC6wEz9xY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:39:92:6f:d4:f9:b6:77:f7:46:f9:de:e7:d6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59a06c187953cfc8133b2beee5f01a15e45da078
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=4910aeb77310a8bd6c86852d94a11c52f5981941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:ac:3b:95:95:64:c9:f8:a7:c7:63:3f:f1:
                    0f:88:1a:bd:c7:86:2a:94:79:70:81:f5:37:3f:2d:
                    78:74:11:a1:4c:9a:a6:cb:9f:a8:03:bc:b5:4d:97:
                    75:45:f3:3e:4b:28:c1:ca:f5:64:3c:bf:96:54:42:
                    96:e0:16:cd:d3:60:2b:a3:9c:f6:44:bf:e1:95:2b:
                    7f:32:ec:9b:2f:44:b4:25:82:0b:ed:0f:26:ff:6c:
                    a2:b4:d7:6b:9b:d5:dd:d1:cc:e3:20:51:35:1c:e6:
                    49:01:63:48:15:8f:77:ec:a5:f9:bc:d4:49:be:9d:
                    24:12:1c:a4:93:d9:01:dd:e7:6f:63:ae:bd:62:84:
                    5c:00:29:1f:e8:c6:af:89:70:c1:d1:bb:45:39:03:
                    a0:fe:27:ea:6d:86:b5:67:15:45:8b:a3:38:82:fe:
                    2b:f9:5a:ab:7f:04:aa:06:e5:80:a8:d8:3e:d5:85:
                    e8:88:97:9e:62:76:97:23:05:78:7e:61:01:35:fe:
                    fa:4d:5c:81:87:64:15:9f:64:e1:a0:01:e4:b7:df:
                    66:09:2e:0d:47:83:f3:c1:34:7f:d7:a2:7a:83:48:
                    06:a2:5e:1a:89:0a:42:8b:5c:e7:1b:3a:70:7a:60:
                    0d:5d:d2:c9:7e:a4:98:55:b3:c6:7d:8e:0d:fe:12:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:10:AE:B7:73:10:A8:BD:6C:86:85:2D:94:A1:1C:52:F5:98:19:41
            X509v3 Authority Key Identifier:
                keyid:59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:38:da:98:9b:d5:3c:4b:16:97:c0:f0:41:9a:e3:7a:04:4e:
         c4:5f:c7:8e:b7:21:e9:b9:dc:eb:90:a0:74:76:ad:c4:fd:13:
         a4:40:f2:92:a8:28:c1:db:19:c1:64:c2:c7:94:9f:b1:81:b3:
         d3:7f:ba:38:61:59:3b:5a:81:0a:eb:bd:9b:4a:0a:16:5b:4f:
         b3:d1:9b:19:2c:d3:47:3f:80:af:b0:25:57:24:32:bc:35:f5:
         e0:e7:8b:9f:2c:ec:58:29:54:c8:c7:bb:14:e8:8a:29:d3:2f:
         ca:bd:01:a4:a3:6f:ed:ba:f6:cb:35:67:f6:c3:28:06:6e:0e:
         86:1f:62:13:d4:08:5c:1f:05:81:6f:5c:5b:72:49:68:47:b7:
         f5:0c:be:cc:e4:ce:40:b7:84:bd:b4:db:f7:76:80:b8:c2:51:
         0c:07:7e:8e:af:80:9f:92:35:03:aa:78:3f:d4:27:34:ba:67:
         28:f9:77:f0:75:86:e6:f9:7c:3f:60:fc:9a:34:b0:6f:9c:5e:
         20:2e:1a:92:7a:f2:b6:6a:a3:62:c0:b9:67:52:33:c9:a6:28:
         6d:6d:d1:11:f2:4b:68:60:35:b6:29:4e:e6:0e:d7:5f:e6:bc:
         62:3f:3e:a4:4c:cf:d3:25:07:60:59:4d:98:a5:cd:5e:2b:cc:
         86:d1:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----