Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File:                     WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier:          omNfEGdeZINjKI7JU3A65Mnqrb5yCXrz2WaDs+rsLOM=
Subject key identifier:   EF:6C:13:E2:29:6F:CF:43:B2:E1:FF:E0:78:7E:68:CA:1B:37:F2:DC
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer:       /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial:       01962F3DC8CF17ED5AD4C3B7ECA12E42A3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number:          0962
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: QjuC+AnHMMs1N0TS853nxbGl+PrM/uQl9lRrElJ+GYU=)
                          2: euH012EDGUcPvCsGZK3_XSPmReQ.roa (hash: 4a2YJ6UV9i6dy+y4QlBQdoAoRR/Frnfv0MzkbXJqY/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c8:cf:17:ed:5a:d4:c3:b7:ec:a1:2e:42:a3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=ef6c13e2296fcf43b2e1ffe0787e68ca1b37f2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:5c:1e:58:b2:20:a8:97:53:50:2c:dc:02:
                    eb:b4:d9:c9:1b:7e:0a:af:d4:3c:bd:ae:33:3f:d1:
                    09:fb:49:30:f5:3a:1b:5c:39:7c:22:e8:f5:ab:c6:
                    10:8e:5b:f9:e7:80:9e:6c:00:ba:6e:fb:58:3c:79:
                    b1:2f:fa:9a:a4:d2:61:eb:87:af:35:0c:07:b8:1f:
                    9a:55:63:c5:93:72:60:ca:49:cd:72:a5:ad:fe:22:
                    04:40:b6:e0:81:1c:13:71:7f:0c:ec:7e:cc:ef:0d:
                    1e:4a:37:7e:cc:8c:31:f8:a8:32:c3:34:e0:d4:8e:
                    d9:1a:e1:5f:c5:15:12:08:d5:b8:17:02:62:d3:c0:
                    c1:e2:61:12:fb:48:25:9d:ef:89:9d:35:04:9d:9a:
                    88:8d:0f:7f:29:84:12:3d:06:97:7f:b7:77:aa:16:
                    70:94:ed:d2:f4:72:81:41:22:1a:c3:cd:1b:39:30:
                    9a:66:71:1a:5c:b2:ab:3f:30:b7:f7:ed:30:77:23:
                    86:44:0e:8d:60:63:25:84:fa:a3:2c:34:e3:d7:0f:
                    9d:b0:96:93:a4:94:f6:1f:30:38:bd:8d:9f:75:93:
                    30:0b:45:ea:08:df:cb:ed:f3:aa:85:d7:b7:ae:f8:
                    e0:df:ef:33:30:c4:e1:40:e4:86:95:15:9e:fd:e7:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6C:13:E2:29:6F:CF:43:B2:E1:FF:E0:78:7E:68:CA:1B:37:F2:DC
            X509v3 Authority Key Identifier:
                keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f9:ec:7a:36:c4:48:dd:3b:45:dc:59:37:45:f8:b1:6c:ab:
         b7:4a:8a:53:ac:eb:7d:5a:3b:89:58:65:04:ca:7c:28:37:6b:
         11:3f:ba:e9:d4:ea:73:57:c0:91:a9:76:a9:91:77:16:95:cf:
         94:5e:9d:5f:c6:37:6e:44:42:ed:b4:6e:01:82:25:a2:28:2e:
         6d:3c:cf:5c:f2:11:fd:1c:08:f4:79:12:91:f2:37:91:df:90:
         b5:d8:c1:04:97:95:4d:c5:d0:d0:6e:3c:18:b1:9b:9a:60:6b:
         7c:21:dd:e2:1a:56:07:02:80:32:f4:b2:0f:fc:cd:fc:72:2d:
         03:f5:fc:12:1c:0f:ff:ce:a5:39:5c:0c:41:67:cc:da:d4:ef:
         dd:d7:56:18:53:36:54:d8:59:e6:00:01:80:1c:c9:13:d0:5c:
         d6:79:b3:24:57:30:3f:8d:19:f6:1c:9b:5d:90:93:d0:dc:6b:
         55:b2:1e:fa:1b:92:34:4f:9e:e9:3d:ed:7c:d4:43:41:42:0e:
         e6:18:a6:27:e1:38:54:c3:88:88:dc:a3:b3:50:23:7e:f0:41:
         70:c0:9c:2f:66:ca:c7:1a:c9:53:5c:18:69:98:b6:8c:cd:a4:
         7f:5e:fc:d1:99:72:c3:5f:24:06:e9:2a:55:b0:63:f0:a8:16:
         bb:d3:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----