Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File:                     WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier:          XFhZoq6K7Wj6qXWvBBwuAgP3Zv77Vhi2WA6e4DmyODI=
Subject key identifier:   78:DF:91:23:FD:D4:D1:0D:17:AB:C8:75:7B:25:A1:95:F5:80:DE:61
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer:       /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial:       01962FAB641B714218463AC8084028DE9163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number:          06C5
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: OQOfIBTtC9P7jCN0mN43Fc_lGps.roa (hash: ObKTxdr4K0eIsn14ipiRS5l0MCp4U/+rAHXfJfh0K1g=)
                          2: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: asI9nbHguGGCngdH6nesCu0eE+skEbYBtONoOcVkiyI=)
                          3: is_XEdqOSIZdOdAUliJ38zXn5ZE.roa (hash: +WoDzk7VKcG/lDal047Esdi6HVzF1DiurqrDKoqvrhI=)
                          4: skXm2fkwzq64ONGiXwLfUYMzOOo.roa (hash: eZX3z+2+p9WFafZJ1Sv1eq5Rzpet45IDFVeaiO++2eM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:64:1b:71:42:18:46:3a:c8:08:40:28:de:91:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=78df9123fdd4d10d17abc8757b25a195f580de61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:96:10:81:6b:32:a6:d8:ee:56:ab:6d:bb:
                    af:6a:b2:50:f3:26:a1:62:0b:ce:47:93:51:89:fb:
                    19:06:22:bc:ff:91:dc:72:a0:40:8b:66:6f:7d:d0:
                    51:8a:0d:48:03:da:12:5e:08:6e:4d:dd:db:2f:da:
                    41:06:7c:05:14:cc:ab:30:b7:d6:e0:1b:50:0b:24:
                    11:77:3b:9a:27:49:55:0f:d3:1a:79:99:8a:bd:7c:
                    54:3c:9b:a2:43:7a:be:fe:85:a3:07:7a:25:fb:c0:
                    da:69:ff:52:3b:35:62:d3:98:f0:34:cc:93:b5:7f:
                    9e:d8:9b:0a:38:af:fb:f4:10:7c:f9:08:83:f4:06:
                    6d:84:80:7b:0d:b5:cc:2c:d9:d4:81:26:40:e0:d1:
                    d8:48:1c:ec:66:3c:4d:e2:bd:6f:5b:75:54:09:34:
                    fc:bc:55:c3:a7:fc:ba:1c:2c:1e:f6:a8:be:91:82:
                    f5:91:b8:9e:e1:22:a9:47:6f:0a:e9:50:1a:1b:e5:
                    4c:b4:56:67:d1:d3:8b:0c:c4:3a:24:79:ff:00:e4:
                    7b:e3:97:2a:61:68:0b:4f:e5:18:28:18:6b:62:18:
                    be:d8:44:cd:60:67:72:40:30:f3:87:e8:fc:92:b3:
                    6c:69:9d:30:54:96:51:dd:f1:e9:8b:80:1e:f0:62:
                    bb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DF:91:23:FD:D4:D1:0D:17:AB:C8:75:7B:25:A1:95:F5:80:DE:61
            X509v3 Authority Key Identifier:
                keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:23:20:2a:b0:75:d3:7d:de:11:46:3f:a3:27:13:0f:37:
         21:74:4f:13:f2:63:a9:f7:fa:8c:c5:90:fa:16:6e:3c:34:37:
         9b:71:97:28:fb:c5:87:8a:bf:a0:b3:97:c8:44:95:53:96:e5:
         d4:31:d8:6a:db:ce:17:1a:71:02:4e:59:2d:c1:2f:ac:40:6c:
         05:dc:d4:d5:37:69:fa:37:53:6d:de:c1:0e:af:9f:20:aa:05:
         dc:0d:d2:a2:8d:fe:9c:e8:f4:a0:d5:45:5f:53:9d:51:d1:98:
         b3:c8:9b:69:81:7f:09:09:33:8e:45:07:58:4f:7c:30:8b:b6:
         e8:84:a6:bd:72:1a:da:7b:27:8a:0e:a6:19:95:fa:35:6b:f4:
         42:3e:d8:e2:aa:9b:c4:9b:dc:59:de:ac:69:11:08:af:b1:8a:
         61:00:71:91:16:f2:75:da:15:d1:64:20:e7:6c:48:0e:5c:83:
         c5:1d:e6:48:80:25:02:b5:7a:bd:00:85:b4:a1:83:28:c8:b0:
         67:75:c0:23:22:91:8b:b7:71:2d:8e:71:dc:92:05:2f:38:76:
         f8:65:16:1b:e9:91:ab:b6:e9:7d:8f:56:0a:7d:5a:3e:b3:01:
         e0:cf:aa:42:06:75:f6:ac:c1:22:18:dc:69:44:88:e1:5e:5b:
         18:7f:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----