Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft
File:                     WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft (raw, json)
Hash identifier:          QKo8tKeKDGEVf5TCaBUDAG0sszXIdNePiKzBA5+IHTo=
Subject key identifier:   21:E3:48:CC:7F:3A:3C:A4:AB:EF:61:18:B3:8B:61:FC:B8:F6:67:61
Authority key identifier: 58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66
Certificate issuer:       /CN=58ec149761a5d84b8c49e2c9936bbb748033fe66
Certificate serial:       01962DF3A6E556D6DE0A02027FC471731D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft
Manifest number:          05F6
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl (hash: vqMSyCQEXK1qj81QbOKKapP7ekla8KU1eA1N1x4k6es=)
                          2: YLZ4R2cXRiV8ZGqHdVbiXZ3u-6Q.roa (hash: cdselfx58yv16hOyAN0xxLi2jgGKa8b7Sqm03lityB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a6:e5:56:d6:de:0a:02:02:7f:c4:71:73:1d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ec149761a5d84b8c49e2c9936bbb748033fe66
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=21e348cc7f3a3ca4abef6118b38b61fcb8f66761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b9:09:83:ff:0d:8d:39:18:d8:90:7f:15:3a:
                    83:31:ef:33:8d:9d:58:9a:e4:03:61:dd:f6:bd:fb:
                    f3:ac:f5:f6:fb:fd:95:a2:34:ed:b0:23:fa:f0:c2:
                    95:9a:61:0d:eb:7f:88:53:bb:54:de:25:43:2d:71:
                    f7:d6:12:50:fb:81:e1:21:62:18:6c:23:b8:ba:6a:
                    15:6d:b5:fe:08:93:35:9b:04:24:7b:fd:d8:c6:a8:
                    4e:89:af:b8:e1:25:ac:e0:78:36:24:4b:6b:67:0f:
                    3e:b6:da:9d:b2:17:6d:21:af:13:10:82:6a:13:71:
                    41:8f:c2:bc:ad:a0:26:55:42:62:6a:c9:02:30:82:
                    c4:47:c9:71:72:f0:f2:f9:bd:2f:f1:cd:19:2a:61:
                    b3:db:98:42:06:fc:d9:dd:96:fa:56:dd:7e:2c:1e:
                    52:90:6f:6c:94:70:aa:33:ed:dd:aa:8f:fc:01:21:
                    b7:68:aa:71:e1:b9:25:f4:27:85:69:a7:06:f0:ad:
                    42:55:b5:19:75:2a:80:ca:81:5a:3d:06:bc:78:50:
                    63:0a:cb:cd:8c:ef:bf:2c:9b:e6:c9:c1:64:0c:82:
                    8c:89:b9:f3:27:90:fe:ae:02:da:57:c9:82:73:01:
                    e9:93:a2:67:50:65:55:fe:3d:1c:a8:fc:45:bf:e7:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E3:48:CC:7F:3A:3C:A4:AB:EF:61:18:B3:8B:61:FC:B8:F6:67:61
            X509v3 Authority Key Identifier:
                keyid:58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:8b:24:3e:d6:e3:18:b9:e3:41:84:13:cc:74:b5:19:fe:ec:
         06:f6:b5:5e:44:9d:9a:83:67:bd:2f:b1:27:69:f0:5d:84:d0:
         85:5a:65:d9:ce:87:80:48:12:66:94:90:c7:75:fa:a9:1e:fe:
         24:66:6b:c0:f6:e2:f1:0c:f3:8b:a1:01:08:4a:b4:18:a6:e3:
         2c:ce:d5:ab:ac:7b:99:c2:31:8d:fa:87:a6:65:d7:25:47:c6:
         bd:40:c7:6b:f9:ab:3e:d4:83:f0:b8:b1:85:7f:42:c8:9e:b6:
         00:7e:50:88:85:25:20:bf:65:73:8a:a2:8b:b4:e6:6e:03:66:
         12:3d:05:74:22:d6:0a:46:b5:ec:54:03:5c:70:32:da:6c:82:
         63:ad:49:2e:be:9f:8e:6b:08:02:73:4a:d4:71:24:cd:03:cc:
         d2:a6:46:bb:eb:03:e0:7a:63:13:a3:74:aa:a4:60:20:a2:ff:
         66:d9:8c:dc:7b:cd:d2:98:dd:dd:3c:29:03:c1:a1:5f:f1:6d:
         f7:ff:15:87:a3:ea:8e:53:a2:e7:12:e6:7f:2b:88:61:ea:59:
         54:b4:dc:aa:3c:31:6b:c7:1c:7a:27:a9:2c:79:08:d3:d4:f4:
         ca:50:21:dd:56:e3:ef:34:c1:39:63:5d:b3:00:82:e8:6e:76:
         fa:74:14:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----