Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
File:                     WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json)
Hash identifier:          e2Im2o+cL+9Lb2MiUYjAnGTQ02es5s4C4BsnO1WSrRw=
Subject key identifier:   1B:1E:2A:5B:99:28:63:07:DE:13:86:4E:B2:1D:60:0E:C4:A1:41:F8
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Certificate issuer:       /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial:       01962E61D1EFF2E3F0F832B8EDB35D645B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
Manifest number:          0D30
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: rzOE5LfWb+0V/2JmQ9CEc15VuIe6Q2z84ohEVTJj4WY=)
                          2: g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa (hash: KOU5LPuCuD+DZVOgS7dpp5JLgW4GWVq1/6dngwGDNNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d1:ef:f2:e3:f0:f8:32:b8:ed:b3:5d:64:5b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594b79990f616a8344c860148fc922910e154dad
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=1b1e2a5b99286307de13864eb21d600ec4a141f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:fb:01:d4:34:af:54:5a:a1:4c:12:b3:af:
                    eb:6d:1a:a5:ee:a1:6f:df:4a:22:1f:58:65:ab:92:
                    e1:ea:e6:59:b4:fa:5e:34:85:0a:8b:88:c6:ce:79:
                    ab:d4:87:61:15:cf:70:d4:17:d4:51:13:31:05:d3:
                    9c:bc:25:a2:5a:88:45:6a:ce:5c:b4:09:99:5c:49:
                    3f:10:04:d7:63:ee:47:a6:8d:0b:8d:1b:83:62:15:
                    af:c8:55:4f:86:dc:16:ae:5c:4f:09:ee:0d:46:0b:
                    12:7d:14:70:35:dc:c2:dc:09:83:5b:d3:8d:cf:3e:
                    1e:32:84:7c:25:19:91:b5:e7:d9:35:4f:17:ad:92:
                    20:d9:3e:01:d1:4a:a5:38:2a:48:17:65:d2:0d:a4:
                    a3:6d:c3:ac:8c:d2:3c:bb:ac:12:8d:74:18:ca:f6:
                    3e:c1:b3:fa:76:a9:23:0a:9a:b4:e0:20:58:50:18:
                    cc:ab:bb:ee:fa:0f:0d:48:3f:e1:6b:b3:b1:12:7f:
                    af:f4:08:0e:0e:a6:83:72:73:e3:7a:06:d9:49:6d:
                    91:9f:6a:16:0f:df:e8:bd:08:8b:6f:80:06:bd:5c:
                    49:ca:85:85:1f:56:8d:db:db:f2:86:06:28:c3:4d:
                    5e:e8:3c:92:ef:7e:75:d7:8e:f1:48:e5:81:da:d9:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1E:2A:5B:99:28:63:07:DE:13:86:4E:B2:1D:60:0E:C4:A1:41:F8
            X509v3 Authority Key Identifier:
                keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:11:72:bd:af:e9:5d:51:63:ee:2d:82:58:d1:a6:ac:3e:51:
         3e:b5:9b:47:74:12:e6:7a:13:07:b1:9b:2b:f2:34:e7:55:21:
         6f:46:e4:b1:d6:46:26:bf:fb:1e:ed:c0:5b:85:5c:3a:fc:db:
         a1:4f:65:31:b5:c5:4f:22:3f:50:b3:ea:87:52:a0:24:74:46:
         69:3f:7b:c1:4c:89:30:3e:6c:f3:f5:ae:80:55:0a:62:09:46:
         6b:e2:d2:91:b2:95:56:db:ce:30:1b:5d:b8:1b:cc:41:8e:c8:
         e8:4e:e3:36:34:e5:ef:5b:0e:4c:dc:d1:37:b2:bf:23:57:00:
         2e:90:d3:ab:28:6e:51:bd:af:76:e7:59:ac:6f:88:25:85:c9:
         b9:19:71:54:c0:97:8d:0e:7d:6d:7e:91:84:a3:0a:56:04:98:
         14:e4:09:03:b7:79:cd:40:91:06:4f:95:af:c9:1f:1d:f3:9f:
         75:13:cf:7f:0f:98:a0:c3:8c:1e:4f:3a:86:a9:30:44:ed:2b:
         ea:e2:4c:52:d4:00:a9:b4:4e:e2:35:c9:0a:7b:87:30:a4:34:
         63:43:47:7a:39:1c:d1:5e:a9:c2:f8:dd:74:48:97:4c:f3:3f:
         e0:35:74:7b:73:6c:39:56:99:f9:88:13:d6:70:fb:f8:6f:b8:
         ed:8a:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----