Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File:                     WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier:          SUeL3UU37wlmUjVXEU0aEBohSNTWy82WFu7fYyVdvXQ=
Subject key identifier:   76:D6:D3:BA:8E:46:E6:38:A6:A6:82:4C:D1:48:CB:62:11:93:95:F6
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer:       /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial:       01962F3DB0166951492E2985593B052EC4E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number:          0C45
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: BnHPRpHVxUrrpd0IzvhYM9ZoVGA.roa (hash: k46oPjmA0dBoUS914bzbaVVF+WxzasmMO4gdexQM14I=)
                          2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: O+piDFLAVKzSseeoQ3BL+ETnMhtonpqeMHY72hj+mzI=)
                          3: pXH9YpU9YJCA_rF2kD4sAq3Gb8A.roa (hash: T2ULJjjfs09CAUBnhR9VtzEhjC6fHO+cQ94xa8HkXMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b0:16:69:51:49:2e:29:85:59:3b:05:2e:c4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=76d6d3ba8e46e638a6a6824cd148cb62119395f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:ef:57:62:73:f5:52:dd:42:3d:8b:22:54:
                    3e:a6:b2:53:c8:8b:aa:c0:63:b2:97:cd:68:6f:54:
                    a0:42:d0:8f:c1:7c:14:61:7f:9f:a6:da:80:17:91:
                    8e:17:2a:b4:aa:a3:b0:c9:59:d6:83:53:ec:5a:1e:
                    c8:f1:81:3b:32:cf:7b:2d:05:dc:72:5a:24:23:b1:
                    d8:aa:65:bd:04:a1:ef:96:2c:19:81:14:64:f0:a9:
                    4a:3b:2e:6c:81:06:2d:ea:ed:29:5e:14:f4:bd:6d:
                    b6:43:40:9a:23:77:18:6c:b1:84:35:3f:f2:f0:ac:
                    1c:e4:82:62:bc:ed:07:36:55:f7:a5:82:5d:d3:f8:
                    2f:7d:8e:2b:0d:2f:b1:8e:32:54:04:be:9f:0e:13:
                    f3:a6:4c:51:56:cd:66:c7:77:a7:95:66:4e:a1:82:
                    c2:28:6e:67:0a:e2:62:01:1f:74:0c:78:8b:cf:19:
                    80:f5:86:66:28:95:1f:38:49:02:73:9d:0d:7a:f4:
                    6b:10:fe:52:98:e5:0f:e4:8f:8f:79:9f:2a:26:49:
                    e6:56:b2:93:f8:d1:34:24:86:d5:a8:b6:23:f1:37:
                    59:47:4e:17:5e:2f:59:15:1a:dd:b8:65:51:ac:eb:
                    19:b7:fa:df:d8:27:32:13:21:94:49:0a:d3:e8:a0:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D6:D3:BA:8E:46:E6:38:A6:A6:82:4C:D1:48:CB:62:11:93:95:F6
            X509v3 Authority Key Identifier:
                keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:6e:fd:82:1e:07:ee:96:92:cf:ad:33:be:4f:fb:b8:ae:bf:
         2a:57:ff:c9:ab:9f:d9:58:c8:fc:ba:ff:12:9c:80:6f:e8:f8:
         4f:25:ad:aa:f2:cd:a5:6d:3b:48:7f:37:7a:71:3b:9c:20:51:
         f3:27:0b:b9:55:59:47:20:d3:aa:52:96:0e:a1:d3:82:32:82:
         2d:52:0e:a8:75:6a:24:48:1f:79:fe:ab:53:60:2a:d1:85:c8:
         7e:04:30:53:52:c5:e8:4b:b1:74:f8:ae:f5:15:e5:6e:e8:45:
         ba:22:09:8d:74:f2:4a:ea:7b:0e:22:e3:27:21:1c:97:b0:3a:
         2b:7f:39:b9:1a:08:ad:07:32:04:bc:9c:a8:3f:e1:22:5d:e2:
         57:ae:3d:bb:bc:f9:e0:4e:c3:61:c6:35:14:8b:c2:ef:b1:bc:
         66:9c:cd:7d:40:25:53:d5:38:c1:7b:5a:c4:cb:3f:0a:d6:6b:
         b5:88:0f:11:cc:a5:e1:af:76:83:48:33:5f:0c:a1:4c:e3:f3:
         fb:2d:a3:4c:7d:ff:1b:aa:cb:ab:80:a4:8c:2e:a5:b4:85:4d:
         86:2e:b6:9f:4d:01:e0:41:34:91:e9:31:91:27:33:09:9c:d8:
         44:3b:15:61:57:5e:cc:74:2a:b9:e8:b0:8a:50:47:f5:e0:ac:
         c6:8c:37:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----