Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File:                     WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier:          +9BZL5DfZbc8BzX38kAlWb1OeGrUkf8y1lJOL0e5vzY=
Subject key identifier:   A3:D9:5A:F5:07:A2:2E:06:98:22:77:09:5D:49:11:E3:22:1E:E0:05
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer:       /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial:       01962E6178BD30AA69FD2F662CD1C8897453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number:          0B71
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: n8SjzQh5TpE6xTDZ70eqvG6Z03JNyNSLQ3iUQvqDrmc=)
                          2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:78:bd:30:aa:69:fd:2f:66:2c:d1:c8:89:74:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=a3d95af507a22e06982277095d4911e3221ee005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:25:34:20:f2:1c:17:45:b9:97:a3:8e:fc:
                    dd:b9:1c:38:2e:5d:6f:62:91:cd:8b:2a:0a:0d:04:
                    77:20:28:0f:80:f0:1b:aa:c8:b9:b9:73:02:06:84:
                    54:9d:67:e2:c6:f2:62:0b:17:49:e6:c3:75:b4:d4:
                    dd:72:54:5d:dd:d5:91:2c:f6:c6:d1:e7:b8:3c:cb:
                    e8:35:5d:ba:b9:4e:38:0a:9e:08:47:d8:38:86:f1:
                    99:be:3d:3c:1c:85:39:62:6e:72:0c:b0:10:18:9c:
                    48:65:4c:15:88:46:c8:ae:95:90:d8:bb:dc:d9:3b:
                    54:9a:b5:fa:c0:36:6b:bf:30:ef:b3:f4:83:4e:24:
                    48:7b:51:43:74:b9:2d:63:cd:a4:bb:ad:1d:a0:f0:
                    19:fc:7a:37:12:8e:67:ba:6e:6d:57:89:90:8d:b2:
                    2b:12:af:18:06:73:7b:18:a7:c7:f4:55:9b:9f:a8:
                    e4:fa:18:3d:0d:25:80:02:23:c4:bb:65:07:b2:d0:
                    65:51:42:e8:ec:c2:91:61:af:42:29:41:a2:d0:6c:
                    7c:ae:6e:0f:03:2f:bc:b9:02:3b:b4:77:63:be:30:
                    58:3c:b9:10:37:f1:dd:14:09:05:36:7b:f7:02:5b:
                    fe:dc:32:dc:ad:c7:9a:cc:bf:d3:21:83:f1:75:09:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:5A:F5:07:A2:2E:06:98:22:77:09:5D:49:11:E3:22:1E:E0:05
            X509v3 Authority Key Identifier:
                keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:55:d9:9d:35:52:92:97:78:91:7a:8e:60:5c:04:31:3b:96:
         c9:d9:4a:37:7f:5a:bc:8d:ae:0d:04:1e:52:11:47:31:62:75:
         57:b5:d9:bf:79:9e:5b:17:17:88:cf:ce:24:58:d8:a6:92:1d:
         5c:75:cd:11:26:cc:a2:ac:88:a0:a2:ce:ce:ec:99:d8:bd:ec:
         1c:57:1c:c0:49:88:18:10:40:dc:87:87:11:1e:42:d9:5e:52:
         6c:0f:6e:8c:2c:96:4a:de:73:6f:f2:e6:cc:af:fb:da:a9:9a:
         c0:47:12:cf:4b:e1:08:69:3e:51:f3:07:34:1b:29:e2:80:e5:
         51:d5:aa:2c:9f:39:17:5c:1f:2d:20:0d:4f:8d:2f:4b:c8:55:
         ec:2d:87:80:d0:b2:c3:6f:c6:60:53:05:75:ec:87:a6:4d:68:
         81:39:e4:22:f8:dc:a7:ce:01:c0:77:a3:b9:f4:56:84:a6:bd:
         28:f7:3e:48:de:0e:19:ad:76:9f:02:69:f9:04:23:85:f4:8c:
         79:37:61:b9:9b:a8:a8:2b:f7:b9:21:14:79:0d:d6:d6:6b:16:
         6a:5d:73:36:07:d9:17:82:c3:b0:2a:fe:2f:5b:0f:5f:d3:be:
         1a:06:e7:ed:06:ec:b8:d7:e9:18:45:ab:01:10:34:03:67:1b:
         3f:b3:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----