Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
File:                     WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json)
Hash identifier:          s56Sjpy7JoYseCZ2vyvO3O0897WFjViHmnx/DuTqfAQ=
Subject key identifier:   66:7A:D2:5A:32:E6:2C:45:08:D7:CE:C1:21:1F:0B:52:FB:3B:C1:9B
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Certificate issuer:       /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial:       01962DF4482722D5DE102C5575A806C0782E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: IopWMeRqXOypB_fRacr3ZaxFtQI.roa (hash: FppOmUQRJ7eFBYEwXngpnxhSpl+Hc5qsOfWlbbkaJzw=)
                          2: Jr5TTPsXLbcmeb3jXm4kwRQ-J5g.roa (hash: 7oDZ/1zx1zR8r5+3OuEyrGxtjVcipWg0/FsvL6uuU3M=)
                          3: OL6yc8ZRNNzUrmUlMJiUidDHuh8.roa (hash: yRgWUM0pwyoXJeRdU0MzJI562R7I/kz9Vz80Sl7k9NU=)
                          4: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: idbZoo22QVlsFfxlXMcD9LOX/myjD5R61LbYQMkJHc4=)
                          5: s4RqD1BS5l0_C1DY6qiIvroBiqY.roa (hash: zMF8j8B+bWyi3iOyQzBoW2FngUlQmNbr8zpHXcZBvR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:48:27:22:d5:de:10:2c:55:75:a8:06:c0:78:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=667ad25a32e62c4508d7cec1211f0b52fb3bc19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:62:50:3c:25:64:ce:ec:fe:b1:72:27:26:
                    ad:cc:53:90:aa:a4:27:ed:c2:73:18:1a:1f:f7:4e:
                    2c:eb:36:8d:b5:72:60:04:a7:7d:71:37:43:bb:cb:
                    19:04:e9:55:1b:fb:fb:83:b1:15:9f:c1:5e:60:63:
                    da:db:3a:70:fc:e7:96:68:81:4d:61:d1:04:16:b8:
                    cc:50:f1:5b:c0:eb:cb:3b:d4:4b:90:bc:81:15:b4:
                    d9:e1:42:9f:c1:81:a1:6e:df:d3:6f:53:d8:c7:f0:
                    bd:d0:d1:2b:27:32:52:89:89:dd:17:8b:b5:7d:d5:
                    64:61:f0:07:9a:30:2f:36:27:0a:86:7f:5e:87:f2:
                    cb:d6:3f:84:5b:6d:23:71:0c:ea:10:09:15:57:73:
                    fd:03:8f:b3:f1:94:3b:b1:2d:32:d1:28:ad:91:6f:
                    96:27:5a:78:57:7a:1b:9b:40:4e:87:37:e4:f2:05:
                    bd:a8:09:e9:51:97:98:f2:e4:db:b1:83:b3:e9:e9:
                    88:c7:bd:b7:f2:a0:2a:e3:74:3f:ee:fb:5b:84:02:
                    bf:c0:63:03:15:ba:a4:d0:b7:98:56:c6:4f:2a:d9:
                    e7:2a:62:38:52:42:1a:a8:a0:99:16:b5:d6:c2:c8:
                    35:da:1d:92:f8:bc:dd:fa:73:e4:54:44:5f:cb:89:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7A:D2:5A:32:E6:2C:45:08:D7:CE:C1:21:1F:0B:52:FB:3B:C1:9B
            X509v3 Authority Key Identifier:
                keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:70:88:8b:ec:6e:35:bb:0c:70:57:c9:90:20:b1:8b:a3:ac:
         ad:fe:9b:57:6e:f5:28:bc:c5:ef:81:ed:45:53:14:f0:f9:a8:
         b9:73:96:2f:a4:e1:93:67:2d:50:4f:f2:75:36:fd:bc:73:51:
         bb:45:31:db:e5:78:76:7c:f4:ad:7e:98:92:dc:b2:d1:24:35:
         bf:16:1b:d6:18:04:81:15:b6:8c:9b:86:22:41:bf:6b:64:6d:
         75:97:ab:7a:e9:cd:ee:cc:d8:a3:03:55:64:eb:75:b8:96:0b:
         40:9d:31:13:e1:f6:46:ee:83:6a:d6:e2:1c:2a:ac:2a:e6:af:
         52:4b:fe:1d:da:7b:5b:b8:ff:da:b0:63:ab:c2:ad:63:2d:3c:
         0a:ec:98:9c:2a:81:7a:fe:94:f8:fd:d8:3d:f7:c1:84:7e:22:
         95:34:62:54:4f:fa:ca:75:5a:ec:74:90:16:6f:6d:8d:57:51:
         1a:c5:21:8b:5c:96:c9:32:80:bd:98:e0:14:be:3c:6d:c9:27:
         67:21:1a:65:08:fc:13:22:47:18:bb:8a:9a:0e:67:b0:aa:be:
         53:3b:c9:80:68:8d:f2:55:4b:8b:1d:46:ec:70:57:fb:19:79:
         d4:61:52:34:60:30:f7:69:55:01:c9:07:f9:84:ca:52:00:7d:
         fc:c5:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----