Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
File:                     WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json)
Hash identifier:          XC9K9nDqfRxwxtx1hbHS4Jg7E6IP9OYAb3lDjsCDM9A=
Subject key identifier:   38:55:B2:40:36:39:06:54:74:7E:65:62:0B:64:E1:E2:A4:2E:F0:CD
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Certificate issuer:       /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial:       01962ECFCBD3E50382963A136B3FA6CF62A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
Manifest number:          0395
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: 4zBDpBKsdMoEbVeP6xEeqnJN6S57UODAsLtCGU+9hrE=)
                          2: _dX4f78r8ar055s65dZPENw-y4Y.roa (hash: YAHCWNUUSCjGUaMNs/qPZDcoPmc5Fkj8HR1jTR9dAy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cb:d3:e5:03:82:96:3a:13:6b:3f:a6:cf:62:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=3855b24036390654747e65620b64e1e2a42ef0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:95:37:ee:a4:2c:d8:61:0f:62:df:26:35:
                    21:ce:23:07:87:a7:13:fa:17:b3:85:09:66:32:02:
                    60:77:45:65:fd:17:93:0d:44:f5:e9:2a:38:df:40:
                    bc:98:8a:3a:41:98:d7:bd:f4:7d:59:5c:12:f7:51:
                    3f:9c:9f:e1:e3:d1:4d:6b:07:8d:8f:ed:68:99:4b:
                    fc:db:af:b2:17:53:58:73:1c:8b:d9:0d:ef:b2:ea:
                    ff:b2:5d:cd:54:bd:a6:51:52:b8:8c:c8:93:5c:26:
                    b5:0c:11:d0:81:6d:84:67:55:e5:7d:e6:b4:9c:49:
                    46:00:82:ff:84:e6:be:9b:41:e9:76:d9:e0:a5:91:
                    33:af:98:4d:00:a8:a9:9e:53:c3:7f:8f:20:60:9e:
                    31:89:05:cb:cb:93:2b:ec:48:9c:24:9b:81:42:96:
                    f7:cc:32:9d:5f:f5:83:80:34:56:6e:51:90:0b:9f:
                    95:e7:0c:6d:e2:1c:7a:95:96:6a:43:80:3f:fd:da:
                    46:cf:b5:9c:cc:5b:e3:da:27:54:e3:83:ff:95:be:
                    12:9d:52:61:ce:26:61:4d:a6:3f:d7:c6:e9:b7:88:
                    6f:8f:c6:27:ee:bb:86:38:c4:22:e9:c8:0f:de:d0:
                    43:dc:fb:89:de:0e:34:b4:7f:91:66:e0:15:90:1a:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:55:B2:40:36:39:06:54:74:7E:65:62:0B:64:E1:E2:A4:2E:F0:CD
            X509v3 Authority Key Identifier:
                keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:a5:b1:4d:b5:16:a3:8f:f2:2a:b1:39:a1:a5:ba:b4:e5:45:
         b1:2e:5f:1e:f2:de:67:8e:3a:59:68:43:d3:7d:4b:4b:85:31:
         2a:ad:f0:cc:96:e8:00:12:38:49:49:a6:66:85:14:21:b7:b9:
         3e:74:c9:8e:0e:82:3d:e3:44:8d:92:9d:b6:ae:45:a2:7b:75:
         83:52:fa:2a:e8:df:7d:e0:43:33:35:21:89:8b:1a:89:34:f5:
         6b:08:03:08:5a:a8:e5:de:bb:89:f2:be:fc:69:a4:74:96:ba:
         fe:7f:1c:2a:82:3e:50:d7:35:2d:2a:f6:0f:74:7e:9b:9a:65:
         23:49:2b:e2:93:84:f8:71:cc:92:44:dd:81:e8:29:bf:54:e2:
         80:04:7c:5a:f8:0a:86:ae:2d:a1:3d:6c:59:d4:c1:c7:1f:f4:
         db:b5:ba:91:a5:38:40:29:74:80:74:5c:a4:35:f8:69:d3:c6:
         e6:f1:ad:3d:68:4b:81:df:7f:e7:b1:dd:ae:08:55:31:33:75:
         0a:f2:31:d1:c0:3d:73:c6:6b:26:9d:7f:c2:d0:bd:8e:0f:f8:
         b3:c9:a0:a6:44:c7:be:04:25:cc:b6:5e:07:50:30:d0:31:1d:
         af:e2:74:80:cd:2a:cb:dd:15:64:b2:03:f4:75:09:fe:b7:3f:
         ec:f4:84:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----