Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
File:                     WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft (raw, json)
Hash identifier:          nJF3/tIpoqzSF9Sj+8pF45jMPgb/Cvk0NkU/2FexfQ8=
Subject key identifier:   27:C0:9F:ED:D0:F1:E1:4C:8C:FE:B4:B0:69:D5:78:89:F1:B7:77:7A
Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
Certificate issuer:       /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Certificate serial:       01962F746FF8EDF4E382C69DD3F5580C276F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
Manifest number:          0424
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: PIXJy1lwlibwbVRJMDgxK7qX3n8.roa (hash: G+nFG8M3t0bz2vOGqdbaOSNmLf0qzMF1t7uKbdGXy6c=)
                          2: WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl (hash: QWba8Ukc8uxvtIZUEIBrajsnpVpVTT4gWiqRimMFYo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6f:f8:ed:f4:e3:82:c6:9d:d3:f5:58:0c:27:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=27c09fedd0f1e14c8cfeb4b069d57889f1b7777a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:be:51:65:7d:71:6b:1f:89:f7:9a:2c:a6:
                    f7:dc:3c:60:b2:cc:7a:cd:ed:fd:3c:dd:8a:c7:1b:
                    4d:4f:52:9f:cb:9a:bf:a9:d1:75:ad:2d:ab:2f:fc:
                    89:9d:e9:0b:3d:0d:f6:e3:13:b6:c4:31:01:1a:0a:
                    e4:c9:73:1e:cc:66:29:ea:c6:15:da:a8:ac:c8:f9:
                    0e:54:d5:23:32:f2:f4:7b:55:a9:b7:fd:61:5a:fe:
                    69:dd:02:6f:55:7a:4b:dd:21:20:7a:b3:0d:20:9f:
                    26:56:f9:0e:77:f7:78:38:7f:73:c4:18:40:95:4a:
                    28:55:17:32:88:0b:ca:42:d0:9e:d3:6b:d4:11:c2:
                    50:31:ec:6d:4f:f5:83:4a:4f:00:0c:ae:c3:66:f1:
                    3f:61:ac:ec:f3:35:98:ef:aa:a9:5d:75:45:d5:ba:
                    cc:3f:cd:f3:72:48:2f:70:18:e9:62:85:a3:b0:9a:
                    a3:29:46:96:07:2e:b9:91:10:42:3b:29:a9:4b:59:
                    b0:32:bc:37:6a:31:31:f0:d3:b2:4d:7f:c4:78:e8:
                    e7:bc:1b:c3:56:d9:32:56:71:a3:f8:6a:b1:82:fb:
                    d9:68:1a:5c:92:57:12:5d:c9:98:4b:a3:dc:92:20:
                    07:78:5e:64:1b:7d:de:79:f2:ab:35:d1:4c:39:b5:
                    4a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C0:9F:ED:D0:F1:E1:4C:8C:FE:B4:B0:69:D5:78:89:F1:B7:77:7A
            X509v3 Authority Key Identifier:
                keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d7:1d:8e:f0:1c:65:c1:b6:a1:69:c8:38:41:14:6e:8e:19:
         c2:ec:9f:59:4a:74:c5:34:74:01:a0:59:f0:f0:3b:9e:5a:4c:
         d6:29:3e:e9:99:35:70:e8:e1:57:75:be:82:30:12:27:61:d5:
         6b:a8:0a:72:7c:c3:e6:bc:c6:94:b2:43:df:c4:2e:b5:0c:cd:
         ed:b5:04:61:ed:c3:80:e8:1f:eb:9f:b1:0e:6d:f9:4f:fb:65:
         b1:df:b9:ac:7e:4d:cc:89:e0:b1:17:c6:06:96:10:39:0a:62:
         1b:ec:46:78:0e:cf:f5:90:8d:f2:8f:b6:2a:ca:e9:0a:1b:2f:
         97:a1:20:32:7f:e5:19:a3:44:88:fd:83:f5:ba:34:23:27:28:
         5b:50:a8:fb:2b:ac:b9:37:02:5a:8d:af:ce:33:f5:9e:8c:0d:
         ec:26:4f:69:44:57:76:c4:35:c7:b0:58:a4:ba:c6:8e:49:82:
         10:c3:84:90:00:f1:20:e7:0f:a1:cd:ba:4b:a4:85:ff:09:e0:
         c5:f8:01:fd:0a:ea:37:a5:a1:c3:15:32:e5:48:e9:03:6a:d9:
         34:0f:92:54:2d:2f:9b:f5:3a:c4:e8:6c:8f:41:d8:d7:83:4d:
         68:04:46:9a:b9:1a:a5:85:09:0f:0e:81:98:fa:a8:1e:7c:bc:
         24:28:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----