Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File:                     WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier:          3sZZwWJd+hg+jmG30v+kBS0m1g91JWtfXgbRufP7JVE=
Subject key identifier:   43:65:11:40:25:3B:4B:E4:C2:02:14:FC:8D:70:A4:C2:3A:F0:C2:D9
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer:       /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial:       01962E2B17D52DEAD9862FF8B3425A33A4AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
                          2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: ueqWYaInFC6rSKfYvt/+vNc4XntPc/halnlmGIvHOIg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:17:d5:2d:ea:d9:86:2f:f8:b3:42:5a:33:a4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=43651140253b4be4c20214fc8d70a4c23af0c2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:8f:98:4f:f5:3e:be:18:e9:2e:7b:23:3d:
                    74:e6:cb:cf:19:88:b3:d9:0b:71:01:03:e1:79:e0:
                    e5:c4:4a:fe:75:25:05:c6:b8:ee:d4:bb:6d:cb:b0:
                    4f:25:33:1b:62:2c:1e:bd:e8:9b:a1:0d:37:3c:6c:
                    18:b9:e3:da:08:ee:4a:4c:8d:fc:74:a7:42:f1:f7:
                    01:db:eb:16:66:12:34:ef:84:24:00:54:8c:9d:1b:
                    25:be:a5:47:a5:4e:93:a8:a3:02:d2:0e:c9:52:a7:
                    cd:32:fb:d6:22:9b:f5:f3:13:c8:82:b5:1e:99:ad:
                    c2:ce:6c:01:fe:af:9a:10:86:2d:80:be:6d:41:f3:
                    39:20:51:0f:2b:80:fb:29:6e:ab:2b:51:47:bf:f0:
                    af:f3:c6:19:a1:a2:8c:b5:f7:8a:bb:a7:f1:88:a0:
                    6c:eb:1d:62:c5:4f:aa:81:c8:b8:9f:58:9c:94:b4:
                    c6:39:2c:da:7b:a7:15:0e:bc:90:b9:04:a0:d3:7b:
                    ca:4b:b9:3f:81:a4:49:6f:58:13:a2:3d:13:95:8e:
                    4e:5a:72:ea:25:a6:37:5b:ac:99:ae:4b:fe:bc:4e:
                    7f:ec:47:81:30:f7:f5:99:3a:40:59:f8:1c:86:a6:
                    7f:4c:07:56:a8:0f:47:65:31:4d:79:a4:49:c7:75:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:65:11:40:25:3B:4B:E4:C2:02:14:FC:8D:70:A4:C2:3A:F0:C2:D9
            X509v3 Authority Key Identifier:
                keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0d:87:de:69:4c:f1:b9:81:e0:33:53:69:d5:f9:2c:40:c0:
         e6:dd:b2:29:42:b0:01:68:f2:d9:90:12:08:98:f5:96:66:b8:
         a1:3a:09:3c:3b:a1:59:aa:ed:26:7d:d3:d0:61:f8:f7:2c:64:
         13:e4:f0:8d:77:90:b0:61:86:93:77:07:57:75:41:43:09:48:
         c1:96:d5:91:3d:f9:d0:30:70:37:a4:15:e5:62:45:23:d7:10:
         67:e0:4d:7f:29:13:22:f9:8a:79:09:0d:44:50:45:8c:8f:71:
         61:70:15:c8:c4:6f:ac:5b:f2:11:82:df:e1:12:b4:ea:1b:21:
         44:c3:5b:9a:9c:df:62:19:f7:d1:9e:86:66:d1:27:56:4b:1a:
         00:6d:35:27:e5:ce:1c:3d:66:3b:29:26:64:ea:48:25:b3:84:
         68:72:f7:9e:a9:c5:ca:6f:74:ad:ba:da:e6:73:14:3f:33:cc:
         3f:f6:92:6f:2c:86:23:76:62:58:8f:37:b5:c0:ab:18:21:de:
         55:33:ef:1e:23:52:df:05:4a:10:5e:1e:09:46:5b:7a:e7:42:
         fa:60:bf:d1:d0:eb:b5:88:a2:7a:4e:4f:79:23:31:95:b0:08:
         0b:7b:f3:13:74:22:79:e9:47:0c:1c:ef:90:e2:59:0b:dc:14:
         76:13:cb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----