Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File:                     WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier:          D8XrQngtwRn5syeC80p/SDv6x5TLxt/tccZSYn5KjAU=
Subject key identifier:   CD:51:99:A5:60:51:E7:CE:82:3F:BB:9E:98:00:12:CF:14:B3:37:B5
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer:       /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial:       01962E98EB2E5311516D7B1B65E1BFB6B142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number:          05E2
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: JxAB+DD570gLiB4muY9F/lJf8br3ye7cznEhD443LWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:eb:2e:53:11:51:6d:7b:1b:65:e1:bf:b6:b1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=cd5199a56051e7ce823fbb9e980012cf14b337b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:16:31:ff:02:f1:21:cc:c0:fa:84:88:fb:89:
                    eb:6c:73:06:d9:92:df:f9:c0:cf:0e:c2:3d:a2:40:
                    17:38:e5:d5:82:cc:1f:98:fb:d4:da:2a:14:30:20:
                    a1:53:8b:0d:af:96:ba:46:a6:3b:f5:5f:8d:02:cb:
                    f5:a8:3e:24:0d:66:d2:c1:00:f2:44:64:0f:dd:ab:
                    0e:e4:62:05:ca:21:67:49:78:b3:89:fd:0b:a8:ad:
                    b1:1a:cf:e5:db:c0:e1:77:e8:4f:12:51:c7:2e:85:
                    d7:11:9c:91:72:c0:6f:84:36:a7:92:6d:34:a7:06:
                    d7:ea:6d:06:a0:a9:5a:f6:3b:23:62:ea:51:89:14:
                    21:90:62:76:12:9c:95:8b:e1:d5:4f:ba:47:a1:07:
                    1f:fa:60:89:3c:09:e7:2e:4e:d3:53:ee:b7:62:ee:
                    e9:d2:b5:8d:18:88:30:3a:c2:b3:a9:ba:af:ec:9c:
                    0f:f1:90:88:c9:d5:8b:0e:84:09:66:19:7c:7b:f1:
                    c6:fd:08:8b:b2:9b:20:ca:ce:3a:bb:26:ab:d2:46:
                    40:67:fd:93:74:b5:ba:23:f8:33:0e:b7:d1:66:37:
                    a8:e2:87:35:9e:8f:fd:28:4a:d1:8f:68:cc:10:63:
                    80:47:1a:6f:43:04:aa:d3:62:39:d3:9e:66:fd:64:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:51:99:A5:60:51:E7:CE:82:3F:BB:9E:98:00:12:CF:14:B3:37:B5
            X509v3 Authority Key Identifier:
                keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d3:bb:6d:4f:da:71:b6:c3:88:d4:2b:a7:6e:23:56:93:5f:
         36:48:a6:a9:5f:1a:cc:c7:64:db:02:55:fa:6c:27:6f:19:46:
         95:41:9d:9f:0f:62:dc:48:79:a7:df:1d:83:7f:56:62:fc:e2:
         26:96:84:ff:dd:3c:05:80:8b:92:aa:8f:8b:fb:44:fe:86:a7:
         ba:04:a3:3f:fd:b1:1a:55:93:37:7c:59:14:5c:3d:ae:cd:07:
         3f:c1:c8:ce:9a:5c:38:f4:f4:f6:ca:82:08:f9:0e:30:34:a2:
         5d:24:dd:1b:d5:d2:26:16:50:83:c6:94:2c:5b:de:1a:7a:1d:
         4e:7c:b8:0f:81:de:63:61:ac:ff:b4:6f:13:40:83:3a:00:14:
         69:47:8e:bf:9e:3c:a4:e1:a4:68:9a:bd:13:45:37:64:dc:c5:
         06:cf:c0:85:ee:68:df:be:ad:df:34:ce:05:f3:bb:d9:3b:a4:
         2b:f8:09:7e:4d:3d:8c:e7:03:2f:cd:06:a0:d3:a6:dd:c4:3a:
         b9:8f:3a:8b:96:c3:13:84:15:b4:56:45:2b:db:b9:c7:a9:80:
         1d:d7:5c:43:27:82:dc:89:d5:bd:5c:47:82:9d:57:dd:a2:ce:
         d7:a4:55:66:81:8a:d2:17:3d:6a:6c:a0:75:5c:dc:ef:11:04:
         e7:23:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----