Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
File:                     W7XwXxK1IHaGju_NFK_OwZL-LPI.mft (raw, json)
Hash identifier:          BFbX3S2Y+IPStQwbsgVkD6Of3FCEmsWgAnj8Y8mwkFo=
Subject key identifier:   31:D5:49:65:B7:81:AA:66:02:C1:2C:69:02:89:21:96:A6:54:B2:C0
Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Certificate issuer:       /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Certificate serial:       01962F7477598138EE8E1F07033FD9802153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: QZDKvK6iw_tPh27glx9LTGGHSYU.roa (hash: XgdxnkBVQi+6Pi+BDAfBhOhlkd5fb/2ukIHoQx2+z08=)
                          2: W7XwXxK1IHaGju_NFK_OwZL-LPI.crl (hash: rZK7x3dUB/MGFeiwrabjm8UWgAs44GghQU2EHklNmZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:77:59:81:38:ee:8e:1f:07:03:3f:d9:80:21:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=31d54965b781aa6602c12c6902892196a654b2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:49:66:db:79:37:d5:f1:5c:87:3a:fc:fa:
                    ed:1c:fa:fb:93:d7:7c:20:6d:05:ea:a2:a9:58:f7:
                    e4:d1:2c:97:5a:8c:d3:1f:62:f2:ee:cb:52:6c:53:
                    26:fb:ca:5f:41:fa:fc:95:9c:cb:51:63:73:c0:75:
                    a9:81:a9:b5:b3:3e:c4:71:14:e3:76:89:57:ec:a8:
                    fa:f3:5c:96:1c:c2:36:79:c2:c6:84:92:d7:65:61:
                    34:5c:79:df:b3:4c:ed:b2:97:d2:52:b7:d5:52:31:
                    6e:f3:4e:3c:1b:d8:e1:ea:62:29:1d:83:cd:e7:26:
                    f0:31:ba:3a:11:cb:ad:33:41:e7:d7:3c:c0:2c:44:
                    b2:b7:10:13:3f:0d:c0:35:53:79:f3:a2:f5:85:91:
                    8e:2d:ff:49:c0:fd:ae:32:bf:6f:09:6f:64:77:ac:
                    8e:ec:ce:32:66:a3:2b:f6:3c:d2:37:f6:39:08:49:
                    db:5b:f3:c3:4e:3a:a3:ee:f8:a3:69:cb:d0:52:61:
                    5b:91:43:90:3e:5f:aa:4e:42:0c:65:43:a3:30:6e:
                    5d:ac:a6:66:1a:83:ed:3c:a6:ff:fc:04:2a:61:47:
                    ab:df:a5:7c:ca:7c:97:24:56:87:3d:b1:90:d8:09:
                    11:a9:1b:fa:7e:5c:a8:03:ad:87:21:38:28:cd:76:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:49:65:B7:81:AA:66:02:C1:2C:69:02:89:21:96:A6:54:B2:C0
            X509v3 Authority Key Identifier:
                keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:30:bb:9f:72:1c:10:fd:e9:85:7b:1a:b0:7c:6b:4b:bc:87:
         ce:d8:55:85:15:31:b1:ca:a9:db:35:c4:f6:fe:3c:d2:d4:b1:
         6a:e4:bd:f9:34:92:75:1c:b3:99:7e:f6:0b:a1:63:62:76:b4:
         70:73:12:6a:33:5a:c0:0b:84:32:44:63:0c:d7:bb:54:5b:b1:
         8b:47:3f:1f:71:9c:dc:da:4a:f3:5f:f8:18:75:55:52:81:2d:
         4c:6c:19:c5:6d:30:6e:bc:e4:b1:e0:af:8e:34:a3:e0:4c:2c:
         27:3b:46:f0:6a:3a:0a:8d:82:63:51:0c:03:b8:2b:1b:a7:eb:
         39:40:7b:4c:6b:a9:4d:71:02:3f:1d:4d:63:80:ce:df:dc:cc:
         3a:51:5d:ce:f7:c1:81:cf:d8:84:24:b4:3a:5b:b0:c0:d9:c1:
         06:e2:de:2f:20:8f:b6:1b:98:47:5e:34:96:22:a4:61:96:52:
         0b:22:4a:7c:5b:6e:4c:09:25:59:f1:f4:2d:3f:24:88:8e:12:
         5e:60:25:0e:21:4e:b5:9f:f5:98:02:36:bf:3e:dc:1e:c1:44:
         15:68:b6:01:3e:b3:92:a0:f4:94:64:8d:38:a1:5f:09:44:0b:
         4a:64:e7:ec:3e:aa:64:50:db:10:1d:0e:f0:59:38:93:86:77:
         b7:4f:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----