Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File:                     WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier:          KXOcsV4diDoq7Wh5fWb2loTEO5tLQ+M1+a4ltO4sBpI=
Subject key identifier:   9D:2B:A5:BC:04:9B:61:BE:D5:A9:A4:B1:A9:70:EE:BB:41:04:3A:42
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer:       /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial:       01962F06A3DBAB4E44048FE235E9D3E8F74E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number:          024D
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=)
                          2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: z0ClCBFw/IkjxR7c3dZcyujhrufc/0aCXya78zHLBbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a3:db:ab:4e:44:04:8f:e2:35:e9:d3:e8:f7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=9d2ba5bc049b61bed5a9a4b1a970eebb41043a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:44:30:32:3e:89:37:3e:b8:22:9c:a7:e5:
                    cc:5a:0e:de:f0:c6:5f:f7:4d:ef:19:5d:e0:c0:86:
                    9b:6f:25:a0:5c:1f:8c:1d:15:4b:28:ff:23:0c:78:
                    82:11:50:66:41:3f:0b:c5:34:58:53:20:8c:26:45:
                    1b:94:c2:25:90:98:f3:c4:a0:9b:83:eb:5d:d4:80:
                    b3:08:7f:5c:f0:85:5d:5f:74:20:14:e5:ed:19:fe:
                    2b:55:ae:42:25:13:93:b1:fb:bc:68:06:82:1e:fc:
                    8e:e4:0e:37:81:6a:fd:9e:61:18:6f:95:33:cc:71:
                    f0:a8:6d:29:41:f3:b6:0a:91:33:2c:a9:25:e6:85:
                    76:de:a6:64:80:e0:c2:d7:1c:c2:4a:d7:8d:92:58:
                    8b:35:ab:f4:0d:b3:ea:f4:1b:50:1f:a7:29:44:4e:
                    00:63:d2:d7:f6:61:f8:1d:b6:9a:7c:55:c8:20:0a:
                    8b:f6:be:ea:ae:35:60:5c:c9:3b:cf:58:8a:73:ab:
                    f3:ae:0b:f6:af:4c:0c:d2:e6:b5:63:f0:cd:a3:19:
                    46:f7:f9:c9:6e:f4:7a:c3:a2:67:b2:1a:a2:28:15:
                    c3:2a:fe:06:57:b8:07:4b:2c:5c:9f:72:ad:17:52:
                    1e:91:11:5e:4b:57:5b:cb:fc:17:43:63:cd:3b:23:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2B:A5:BC:04:9B:61:BE:D5:A9:A4:B1:A9:70:EE:BB:41:04:3A:42
            X509v3 Authority Key Identifier:
                keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:cc:f8:cd:25:1a:dd:3d:68:48:f7:15:b3:76:ef:a6:55:0f:
         e5:b2:0b:2f:28:13:92:97:f8:dc:1f:3f:14:d4:0b:87:c9:dc:
         c2:41:be:45:d3:8e:53:8f:b0:62:a9:57:1f:dc:49:c4:88:00:
         59:70:53:dc:af:58:bc:e1:55:61:22:01:f9:df:23:f2:4b:74:
         3a:21:66:5d:90:79:09:46:e4:a0:ac:fd:cf:16:fc:c5:7a:a2:
         04:b6:bc:57:9e:8e:ef:51:85:c0:51:71:8f:9c:b9:fd:76:12:
         b6:d9:9d:5c:dc:16:08:77:52:a2:0b:e5:dc:49:3a:a5:2a:99:
         72:c7:13:81:e6:89:78:a6:a5:1f:19:ec:b1:49:7a:fc:6c:ea:
         1e:14:ec:96:47:9b:01:76:02:de:04:23:34:22:e5:71:e0:04:
         d6:5e:85:ca:a7:78:e0:5d:0c:9f:e3:83:a0:33:2f:1e:25:78:
         7b:e9:34:a7:98:99:ef:f1:95:0b:ad:7c:2e:de:ba:4b:9c:4a:
         95:98:fb:fa:94:bb:61:56:f7:89:4d:d5:58:f9:6c:25:c9:0c:
         0e:d7:c3:ef:5c:b1:37:60:bb:74:dc:91:b0:3d:c1:d0:00:67:
         f3:c9:46:e5:66:85:25:2d:61:42:fd:55:1a:b8:96:9d:89:85:
         89:49:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----