Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06f9d3-bd15-4e08-83e2-0d21f0d1089f/1/WI-w9_6OlXkn1zYkq1kcHkcToAI.mft
File:                     WI-w9_6OlXkn1zYkq1kcHkcToAI.mft (raw, json)
Hash identifier:          KaVab09MOc0nuNNQB7tpRKk+Zs/MdF4OqB1wDIWzcXk=
Subject key identifier:   98:58:89:FA:D6:F7:19:B6:BA:41:72:C9:2A:53:7A:76:89:A0:A8:8A
Authority key identifier: 58:8F:B0:F7:FE:8E:95:79:27:D7:36:24:AB:59:1C:1E:47:13:A0:02
Certificate issuer:       /CN=588fb0f7fe8e957927d73624ab591c1e4713a002
Certificate serial:       0193471783331D7C70E2A04086519C1AD016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WI-w9_6OlXkn1zYkq1kcHkcToAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/06f9d3-bd15-4e08-83e2-0d21f0d1089f/1/WI-w9_6OlXkn1zYkq1kcHkcToAI.mft
Manifest number:          0EE2
Signing time:             Wed 20 Nov 2024 01:02:23 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:23 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:23 +0000
Files and hashes:         1: WI-w9_6OlXkn1zYkq1kcHkcToAI.crl (hash: ssuZ+87XcWUTVGGxlqkb3dIh0eDLCKqJnUnmko6X2MA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:83:33:1d:7c:70:e2:a0:40:86:51:9c:1a:d0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588fb0f7fe8e957927d73624ab591c1e4713a002
        Validity
            Not Before: Nov 20 01:02:23 2024 GMT
            Not After : Nov 21 01:02:23 2024 GMT
        Subject: CN=985889fad6f719b6ba4172c92a537a7689a0a88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:7e:ad:2e:30:a3:a9:a8:b9:95:14:e9:5f:
                    fb:df:b0:ba:0a:08:7c:47:e2:cb:03:23:0f:65:fc:
                    c3:dd:43:0c:42:7a:08:74:f0:25:ed:c4:75:53:c3:
                    36:39:3f:60:ac:28:8e:a1:e4:c3:b1:03:f0:88:f5:
                    8c:3e:59:f9:f3:32:50:c8:36:92:12:f4:2b:f1:d3:
                    d3:5c:a8:17:b4:d5:ef:bc:fe:96:30:34:b7:bd:38:
                    81:58:74:3f:e0:c6:87:87:d3:13:ac:43:f4:4c:11:
                    3e:f5:7d:c9:23:72:71:ec:85:61:dc:81:ef:52:68:
                    36:ae:b1:8f:0c:b5:09:c0:b1:5e:b5:b7:91:ac:56:
                    be:15:45:bf:78:38:e5:93:bb:08:02:2b:1d:84:c8:
                    36:6f:63:46:47:1c:15:8a:77:8b:c4:41:ce:f0:b9:
                    4d:09:1c:61:70:79:2f:89:63:90:12:e3:d5:b3:f3:
                    d7:c2:01:d8:0a:17:0f:d4:1c:cb:ca:2e:3c:22:20:
                    ff:7c:a3:cf:da:44:14:c6:99:c2:0b:b4:d6:89:39:
                    b5:59:42:64:4a:b2:26:b7:18:af:68:c7:16:92:bf:
                    63:77:af:0b:fa:ea:ac:b6:37:54:0b:6a:bb:47:2d:
                    2b:f9:ab:3a:ca:88:b2:a4:88:1f:1a:3c:75:1a:8e:
                    6f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:58:89:FA:D6:F7:19:B6:BA:41:72:C9:2A:53:7A:76:89:A0:A8:8A
            X509v3 Authority Key Identifier:
                keyid:58:8F:B0:F7:FE:8E:95:79:27:D7:36:24:AB:59:1C:1E:47:13:A0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WI-w9_6OlXkn1zYkq1kcHkcToAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06f9d3-bd15-4e08-83e2-0d21f0d1089f/1/WI-w9_6OlXkn1zYkq1kcHkcToAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06f9d3-bd15-4e08-83e2-0d21f0d1089f/1/WI-w9_6OlXkn1zYkq1kcHkcToAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:cd:f6:85:ae:de:c0:dd:b9:82:20:2e:cd:0f:54:f4:f2:
         b5:3e:81:02:12:62:ee:c8:58:9f:a1:7f:40:a4:af:38:bb:04:
         e3:45:1b:bb:7a:24:a6:3e:0f:e5:7f:44:8e:95:03:a6:cc:e7:
         b9:43:99:c4:23:9e:f4:c0:57:ec:8c:dd:74:5d:c3:2f:f9:8c:
         4f:66:a9:17:64:b1:30:58:c7:c9:aa:3d:d8:ca:ef:ba:d0:4c:
         38:d9:ad:9e:dc:95:05:dc:13:8b:80:3a:c4:81:d7:29:a4:63:
         a0:d4:93:f1:40:1b:e9:99:27:02:de:c6:bf:cb:5f:f5:26:c9:
         bf:15:61:d6:55:07:0a:79:8f:0a:df:f8:e7:75:00:85:b7:cc:
         48:51:66:d0:97:4d:b4:be:77:86:6e:76:86:7b:b6:7c:e7:08:
         df:ae:ca:b4:29:6e:80:e0:f4:4a:9a:b1:a1:20:84:c0:9f:e7:
         a1:03:80:ca:8b:71:32:45:e1:8c:ae:99:f5:a6:89:8e:e4:59:
         30:b8:d4:f2:2e:9e:08:65:05:cd:6a:96:6d:7b:c7:92:8f:a4:
         70:54:c3:af:04:2e:40:e8:11:41:58:5c:d4:9d:c9:1a:75:18:
         b7:84:f4:aa:f7:80:da:35:fb:f5:c6:ce:47:32:d1:c5:dc:54:
         9c:1e:5d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----