Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File:                     WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier:          y2DJakhvh5X6tFzfcIEcBdgcXiOHO1xOiGrdU2qfClo=
Subject key identifier:   46:EB:08:D0:FB:E1:A7:7B:32:85:10:EE:30:FF:FD:55:FB:93:3E:87
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer:       /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial:       01962E2B44CFFFD7361596ADE87C02849E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number:          0681
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: RfGWyFfzUAvlWCf5Fz7Td01ZZUre8OM7U67z9nanuuw=)
                          2: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (hash: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=)
                          3: mzKfcsB_6SZ92dtoyTzdmZT_D5Q.roa (hash: W3oo5zZMXU2kzBLMgAMNFTy/16dWodtGflb0+ZEqPmA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:44:cf:ff:d7:36:15:96:ad:e8:7c:02:84:9e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=46eb08d0fbe1a77b328510ee30fffd55fb933e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:53:82:60:47:b2:f5:8f:cd:4b:75:b1:6e:
                    1d:8b:f4:56:ba:0f:72:2d:be:f3:e8:4c:64:bd:51:
                    d9:9d:89:15:4c:66:54:f0:5b:7c:77:cb:01:b0:eb:
                    f5:42:29:ae:3e:e4:17:e1:94:72:80:aa:13:fc:7b:
                    c5:b0:3d:91:31:86:ae:9d:66:80:10:6f:f8:03:5a:
                    68:73:3d:f2:41:d4:34:32:b9:15:84:3a:cd:5b:8f:
                    d6:1b:00:69:12:8c:11:51:e2:ae:fa:e4:ac:91:3a:
                    fe:4b:ee:12:e5:7b:cb:79:01:4d:1c:bf:1a:14:7f:
                    9a:72:97:a0:bd:b3:c1:11:7c:d6:fc:07:44:93:a7:
                    69:1f:12:89:4d:48:d1:1a:b7:57:56:27:6c:f6:25:
                    ab:a7:4b:bb:26:23:a3:78:c4:37:6c:4d:00:da:ad:
                    f7:e6:a6:c6:31:07:b1:e7:6e:2e:55:12:09:15:d1:
                    b5:13:a0:00:39:2b:4d:d6:32:82:57:f7:7c:c9:a2:
                    c2:b4:3f:56:7b:55:04:35:f1:f8:a8:e8:c1:8a:ec:
                    ad:3b:2c:a5:83:cb:a5:04:10:e2:2c:3d:1a:b0:c1:
                    5c:78:54:12:ed:2c:72:8e:4f:c2:e6:75:ab:ea:2c:
                    1e:13:02:5e:5a:68:b8:27:5f:a4:b9:f3:20:83:50:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EB:08:D0:FB:E1:A7:7B:32:85:10:EE:30:FF:FD:55:FB:93:3E:87
            X509v3 Authority Key Identifier:
                keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5c:fc:b5:62:09:fd:81:fa:39:02:48:07:4c:af:a9:90:ce:
         e6:24:c3:0b:9f:fd:bd:7e:21:e3:22:fc:3f:1c:f8:47:bd:0c:
         11:21:36:e9:0b:7b:e8:55:03:ad:bc:72:44:ee:a2:27:d0:3b:
         0d:5e:b3:51:96:2f:e2:92:12:ab:03:36:ff:2f:3c:43:99:d2:
         92:0d:d6:61:02:51:9c:aa:b7:fc:e8:4a:0a:8d:fc:2a:65:8d:
         5c:1c:0d:17:23:a3:f5:dc:0a:63:ac:52:67:2b:e0:d9:b1:29:
         d7:f8:70:44:8d:ce:8a:2d:86:ff:a6:14:67:95:b1:ac:64:d2:
         69:12:ba:9e:63:1c:e4:1d:d7:01:e7:e6:46:8a:28:69:5f:36:
         86:97:dd:09:21:ee:f5:97:d4:35:f8:d8:e0:f1:be:4a:4e:2d:
         00:35:2a:c3:ef:10:55:b0:0b:4a:30:48:0d:09:b5:16:ce:8b:
         2c:da:80:a4:d0:6e:22:a2:6d:e6:39:fd:4f:9b:fd:f6:2f:99:
         a8:98:b5:e3:89:86:34:2c:e5:95:18:6e:38:f3:28:17:92:fc:
         03:69:63:ae:d2:b5:94:74:d1:1d:b5:5c:3c:5b:0b:df:d5:c9:
         75:7c:b9:e2:cb:02:75:21:8b:4c:51:e4:92:cd:62:a3:fd:b8:
         33:af:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----