Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
File:                     WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json)
Hash identifier:          IruCywXdD4Ce4Q7t6WkhO9EhHD0GvhyiTwoVZjQl6Vw=
Subject key identifier:   99:CD:70:90:D5:58:A3:8A:0F:78:ED:C0:ED:AF:12:39:6E:7D:DF:67
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Certificate issuer:       /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial:       01962E2B119597AC9D2B0F05D2EE1BAA86EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
Manifest number:          094C
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: Y5aWFdHgNsO2tB5Fq6dJy9EMXpKjpIvYSGP6PLagLK4=)
                          2: XxQYUuyDfDmvEH-_h4xcYdCTTls.roa (hash: sOyHTNSLK1nXbLPuDkiUpZ37v4YFW/N/3OvLA+CjJUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:11:95:97:ac:9d:2b:0f:05:d2:ee:1b:aa:86:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=99cd7090d558a38a0f78edc0edaf12396e7ddf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:85:5c:e2:3e:af:88:92:ff:8f:61:43:92:00:
                    1d:02:52:c2:c0:58:b5:f5:e1:b3:a1:ec:0b:7c:88:
                    e2:06:3d:4f:26:63:8c:44:24:ce:29:48:dd:5d:81:
                    eb:c7:6f:d4:93:df:9f:e0:b3:3b:8c:ef:e6:3d:03:
                    ca:bd:eb:e4:41:17:2d:74:ec:a4:65:57:15:bb:35:
                    9f:58:8a:f2:78:7d:cd:ca:4e:a6:98:c3:7b:ff:17:
                    db:06:f6:a7:a0:cb:a9:88:91:ad:56:9e:27:25:c1:
                    4d:4c:c3:79:5e:c0:5f:ed:55:ec:78:4a:18:4f:1e:
                    ce:42:93:26:f1:8f:89:96:79:37:43:06:65:b4:aa:
                    3b:da:ce:a1:b2:20:43:aa:c6:5e:7e:f9:0f:23:14:
                    0d:59:76:13:bf:cc:a8:3e:23:65:6b:42:33:19:81:
                    f4:6e:45:eb:84:c8:ca:99:86:29:2d:e0:7b:31:46:
                    36:a9:09:5c:bd:ee:c2:33:d2:e1:d1:01:44:37:15:
                    e0:27:8e:04:8c:33:80:3b:7b:18:a6:6f:f2:61:22:
                    83:dd:54:8f:20:6a:71:3f:76:bd:4d:e0:91:19:d2:
                    98:55:20:80:7e:3d:ea:98:ef:89:da:e2:0a:08:b2:
                    86:23:73:3a:c5:c4:87:c0:b4:df:62:57:8c:b6:fc:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:70:90:D5:58:A3:8A:0F:78:ED:C0:ED:AF:12:39:6E:7D:DF:67
            X509v3 Authority Key Identifier:
                keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4d:70:91:d0:7c:4d:dd:2a:9c:4b:19:0d:9a:a2:84:c2:45:
         bd:04:45:05:a5:14:2c:e9:f4:4c:ce:b9:4d:90:cd:33:4a:ac:
         0c:fd:46:d1:15:1e:79:59:c4:60:e4:4d:d7:29:a9:63:34:f4:
         e1:54:92:34:63:fc:f0:9c:f7:59:ea:21:e2:13:26:82:df:86:
         12:d7:13:a6:47:7b:67:0c:09:d1:b2:40:be:0a:38:03:fb:70:
         61:1c:bd:4a:5a:e7:e1:9d:9b:bd:a2:e3:37:16:6e:66:66:86:
         08:c6:79:a4:b5:c4:2d:a3:4d:4e:37:17:6b:eb:25:48:4c:6f:
         24:42:e6:cf:4c:95:17:50:a1:23:4f:e1:fc:27:be:ce:3e:b9:
         f3:45:62:eb:f7:26:cd:57:3b:34:c9:03:24:ad:91:40:15:a1:
         aa:71:9a:df:92:ad:03:07:8a:a1:c6:f9:57:24:ac:4b:4c:5e:
         eb:3b:13:3f:c6:0a:cd:04:df:ac:ff:96:c4:2e:ca:09:f9:ff:
         4a:5f:87:27:35:b5:60:84:84:c3:e1:06:89:8c:dd:66:e4:e5:
         25:a8:75:d2:10:09:1a:a6:70:ea:ad:6c:79:b6:54:be:77:31:
         ea:a8:0d:f2:0f:37:92:8f:b5:69:fe:44:1c:4a:aa:49:f8:13:
         b0:b1:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----