Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
File:                     Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft (raw, json)
Hash identifier:          fhgjgUdE6Z1ruODnKTIuMz03QkI0qAy3RREeYEkR24o=
Subject key identifier:   32:E5:E3:D9:13:1F:78:4A:1E:B1:E3:1E:AB:E7:84:C4:45:5B:19:7D
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Certificate issuer:       /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial:       01962E2B0FEA16A11A0B3AA60855973D4D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
Manifest number:          0444
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: 9u-rsDWtE_83E-zt9uyk1Tmhx_c.roa (hash: e8hWv5F2Yw7MHTSO7w0icoPmtLInDJiNFNJcyngC6B0=)
                          2: Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl (hash: o4hcG0hP5ZMLP8hm/4NFDQydFdK5wFBglmhZ+ZxCnrk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0f:ea:16:a1:1a:0b:3a:a6:08:55:97:3d:4d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=32e5e3d9131f784a1eb1e31eabe784c4455b197d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:44:e7:32:20:0c:70:e6:d3:39:f9:a1:0e:
                    5a:91:a9:25:8a:56:2f:00:ea:20:1b:6c:a9:b1:ef:
                    37:bc:18:7a:f5:cd:5d:3e:61:6d:86:a9:2c:08:42:
                    fe:41:e6:44:96:3e:c0:ec:b6:0e:98:32:37:f2:79:
                    f6:30:08:ec:a5:b9:f8:54:a5:0a:5b:48:98:88:42:
                    6b:cf:30:84:a7:62:e8:75:db:b5:71:c1:2a:6c:8f:
                    27:53:bf:f0:ba:bf:57:25:72:a8:63:2b:b2:28:5d:
                    5b:46:5d:50:95:d0:4c:46:32:29:1e:d1:10:bc:52:
                    e4:fc:6c:9a:52:d7:a4:91:22:a7:8e:4f:8b:ed:f8:
                    ca:22:89:d9:1d:84:db:ee:e7:61:20:da:fb:3b:2e:
                    6f:43:d4:68:5d:6d:e8:37:bd:17:86:c9:ac:4f:31:
                    88:fa:39:75:70:04:fa:24:0e:76:60:9a:d5:ed:51:
                    28:93:8f:e2:ea:09:ec:56:3b:34:8c:1d:18:51:5c:
                    5c:ff:34:e9:78:c7:a0:6b:65:de:48:de:29:77:52:
                    3f:7b:90:77:0e:ec:40:9b:6c:cf:33:9f:10:c0:c8:
                    7d:3a:83:7b:3d:5d:ba:2a:38:97:2b:bd:fb:5d:4c:
                    0d:6f:be:c2:5d:1d:8e:c4:4e:56:77:17:2e:21:cc:
                    b9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E5:E3:D9:13:1F:78:4A:1E:B1:E3:1E:AB:E7:84:C4:45:5B:19:7D
            X509v3 Authority Key Identifier:
                keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:69:00:94:2c:82:03:b2:22:72:64:70:0a:f3:75:1c:a9:0d:
         31:f3:78:d3:02:fa:54:67:f6:aa:7d:00:49:36:fc:34:cf:f8:
         48:5a:af:5b:0a:8a:65:53:3c:4e:fa:35:69:93:1c:cd:ef:b2:
         8f:b4:80:a9:3a:52:eb:2a:27:91:44:77:85:de:aa:8d:48:28:
         ad:16:c3:22:f6:b9:4a:1b:7d:82:6b:1b:08:bf:de:5a:d6:9f:
         93:ea:f0:91:dd:c9:56:89:83:8a:5f:51:1b:10:85:43:ff:16:
         8a:af:42:c5:81:38:a6:7b:03:87:85:8b:47:1a:ee:0d:3a:74:
         49:0f:83:06:ee:93:08:24:29:46:8e:15:02:71:85:a6:76:9a:
         85:fd:a5:d4:1e:25:bc:b4:c1:4a:78:2c:cb:fc:51:5e:f0:a7:
         3f:33:93:ad:b5:58:13:f9:23:3c:48:58:87:20:50:d4:8c:90:
         f2:bd:91:15:21:bb:c1:b8:dc:0d:08:7e:60:8c:85:88:46:fa:
         10:3e:5a:5f:48:a3:6f:39:34:a6:cb:82:7e:03:e0:e8:3b:e2:
         9e:30:8a:3e:55:83:00:20:85:01:03:eb:b8:1d:29:23:9d:7d:
         ec:57:bb:2d:55:32:be:17:f2:84:9c:01:bd:8c:31:73:61:26:
         42:ae:0a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----