Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File:                     WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier:          kkMVMjv1mIMp6dpjRCRZAC/sriQsx99X7biIOHRsaOE=
Subject key identifier:   B5:ED:52:21:8E:AE:3E:04:64:1D:E0:FC:5F:20:39:31:3B:71:3B:BE
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer:       /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial:       01962ECFD8B482643A22C5C04B8E1D2E7375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number:          1147
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=)
                          2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: kWqj+R2mD0tzKLLg1IzJ1ci4LgD2qW9BqOEwmAElOjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d8:b4:82:64:3a:22:c5:c0:4b:8e:1d:2e:73:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=b5ed52218eae3e04641de0fc5f2039313b713bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:42:d9:89:e9:d7:1c:39:30:17:e4:f4:de:83:
                    5a:a4:ac:7d:68:89:44:99:36:c4:26:e5:2b:6f:fb:
                    37:67:3e:38:52:13:07:31:3b:08:99:7e:09:1b:9b:
                    d2:54:40:6a:c8:9e:57:59:42:1f:58:79:d9:25:7d:
                    ea:b2:2b:b6:01:79:45:2d:78:1a:3b:b2:fd:c9:ab:
                    a3:60:81:72:2a:56:72:bd:9c:4a:38:96:06:8b:f8:
                    f8:a3:2f:f5:5a:da:9b:06:f0:87:50:a3:21:c0:b6:
                    90:65:c2:0f:86:4a:cd:81:90:62:fb:ca:08:ec:29:
                    71:13:ba:fd:e1:f0:49:33:4f:3c:ab:14:4a:c2:91:
                    4b:16:4a:bb:43:bf:ba:75:be:46:10:ac:09:09:8a:
                    d3:39:b7:96:9e:c7:53:43:08:59:7f:e1:27:a3:7e:
                    5f:75:bd:23:f7:2a:24:cd:71:8a:f5:7d:f5:77:47:
                    88:ca:75:4c:29:cc:0d:bb:e5:12:b2:ac:64:f9:bb:
                    e0:43:a8:6d:20:6c:b7:2a:6f:40:59:44:83:28:c6:
                    a9:23:4c:e5:7f:48:e6:f0:86:10:56:58:53:b3:60:
                    43:4b:a6:15:3e:05:5b:cd:72:7a:98:a7:0f:74:38:
                    73:52:36:e3:97:9a:c2:7b:9f:b6:a4:74:d9:18:07:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:ED:52:21:8E:AE:3E:04:64:1D:E0:FC:5F:20:39:31:3B:71:3B:BE
            X509v3 Authority Key Identifier:
                keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a9:7f:8b:4d:fe:dd:6d:3b:49:c5:a6:a4:2b:df:ec:fd:ca:
         c7:ea:8b:cd:ee:2a:17:cc:b1:5d:32:76:f4:e9:66:c6:84:ab:
         c5:50:ca:25:f0:a5:ed:aa:c6:8c:d1:df:23:19:33:b3:f1:9e:
         b6:eb:c2:14:7b:a2:ff:c8:72:da:bc:22:48:c1:d8:52:2a:a5:
         47:15:d7:91:a9:74:c2:cb:18:60:66:e0:e5:d4:1f:28:89:3f:
         17:96:f3:80:34:99:95:ef:f2:b9:eb:3a:20:94:b9:a5:8f:db:
         fe:b6:69:04:59:71:dd:e1:cf:a2:7f:98:53:0e:75:fe:98:31:
         f1:cb:7e:c2:4d:e1:4c:4e:00:8e:3c:94:3e:a9:a7:f3:a1:96:
         9c:e6:09:94:66:8c:c6:9f:64:93:15:2c:4a:52:78:89:34:65:
         c4:f7:70:00:13:a8:3e:2f:d0:de:2b:f6:af:68:a7:a0:ff:dd:
         5a:06:16:78:e2:75:90:d2:c4:cb:4b:02:02:a8:0c:68:61:d6:
         63:9c:3b:cc:78:d4:af:1c:07:ea:67:de:a1:e2:d3:e8:bb:c8:
         66:91:1f:f3:dd:7f:6e:8b:5e:36:75:1a:88:82:db:ce:a1:5b:
         23:3d:30:c6:8a:a9:ac:88:ce:63:d6:1f:9d:46:fe:58:11:54:
         4a:d4:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----