Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File:                     W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier:          EVTlsUIcxsgwsktu0DAW/JyF9Xwbe4bojPgOUTx83hE=
Subject key identifier:   73:65:4E:F1:9B:7E:28:2B:16:61:CE:9D:1C:64:41:0F:00:41:4C:B1
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer:       /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial:       01962E618914AF05BC712D99B79E200A68D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number:          55
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 1-rj8FQlhLsWvMYMbvavcL6U5CiM.roa (hash: 8E6Qmt3o3cHK+i2R5luR1t+APaNbJIgG6LOjICsFkYo=)
                          2: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: 1axWSvswCDjDnVIDRxg3U+3BFb47UncrfJPWqZZHa/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:14:af:05:bc:71:2d:99:b7:9e:20:0a:68:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=73654ef19b7e282b1661ce9d1c64410f00414cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:99:cc:99:90:5f:6d:e4:57:29:a2:49:cb:
                    e3:be:57:26:51:40:c4:c3:b2:45:e3:26:76:74:17:
                    e9:b4:5d:ba:13:d5:c4:f4:31:96:47:6b:13:3e:48:
                    54:83:39:5d:e5:cb:e6:2b:36:b8:84:2d:44:c7:b1:
                    af:f1:7b:58:49:96:9a:ba:03:c4:cb:46:6a:33:fe:
                    03:c7:16:46:d6:3f:2d:31:94:f9:0a:a0:0f:84:a3:
                    fd:03:3b:0f:ff:d3:45:39:12:87:22:cd:d0:10:3c:
                    23:9a:9b:64:8c:b8:48:dc:59:40:42:74:cf:66:ed:
                    c5:bd:1a:35:72:a1:e5:7e:5d:dd:b0:be:a6:f5:f0:
                    ee:91:bf:96:16:0a:c3:88:fb:f8:d6:c6:da:06:87:
                    f8:2e:27:e2:69:6d:13:13:92:c2:b0:b8:a5:97:f7:
                    b5:a4:90:9d:b3:61:64:e5:d8:de:8a:7c:07:34:2a:
                    3a:49:74:46:fe:a9:e5:a9:6b:7a:c8:d1:4d:b9:4f:
                    b3:25:91:e4:8a:1d:49:96:db:76:aa:d5:8b:21:d5:
                    d6:da:26:64:86:cf:0d:29:ff:57:bc:07:cb:94:0c:
                    ab:02:ca:43:1f:79:5a:8f:c1:ab:40:f0:9d:73:c2:
                    6d:23:a0:ae:bd:2b:0a:83:4d:36:d6:65:52:26:3e:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:65:4E:F1:9B:7E:28:2B:16:61:CE:9D:1C:64:41:0F:00:41:4C:B1
            X509v3 Authority Key Identifier:
                keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3c:2c:e1:97:b7:27:ed:1d:e5:bc:45:79:fc:b2:60:62:b9:
         02:41:f1:78:b1:b4:25:69:de:56:07:ba:50:71:b6:d1:d3:dc:
         47:7d:c0:07:1c:ca:7b:44:dd:82:b9:ba:c1:8f:ad:42:64:93:
         7f:e8:19:05:3d:2a:5f:6f:9b:23:87:2c:8b:77:e9:53:eb:b8:
         f8:cd:24:41:58:e4:c1:6d:f5:d2:4f:c7:0c:fa:7f:74:be:98:
         2e:42:66:19:25:65:e4:fa:93:5c:ba:ac:63:07:43:53:39:53:
         18:e7:68:3d:2a:9f:69:a2:dc:1a:cc:c6:84:ec:bf:c0:b1:6b:
         43:68:91:ca:9f:43:dd:f8:8b:6a:83:81:eb:c1:d5:cc:af:18:
         48:6e:d4:2f:01:85:2a:64:b6:9b:3a:70:c0:1a:d2:d6:26:e2:
         16:25:71:f3:46:99:1c:68:ec:12:66:09:0f:67:b4:17:43:ad:
         ae:db:91:3a:c3:b4:b5:6c:0b:3f:3f:81:f7:3d:7b:68:70:e5:
         58:92:2b:55:91:9e:89:ff:6b:55:44:09:1c:89:5a:5f:9e:bc:
         0b:f6:cc:ea:1d:a8:89:d9:78:f3:06:bd:23:61:86:49:69:d0:
         06:89:11:47:cf:0e:05:f0:ab:3b:e8:cb:f0:a9:8c:9f:33:68:
         78:07:a6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----