Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File:                     WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier:          Y4FQESGzszFrOAKPcvvl8UEq+BOqkzVmhTUE01KxTM8=
Subject key identifier:   5C:7B:7F:49:EB:A6:25:03:FB:D8:28:EC:04:34:EC:E7:92:9B:5D:AD
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer:       /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial:       01962E2ABD1ACFD19E2064C0F81C062DC521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number:          43
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: qTyL77KezVc4YaeRrN91h8kchfdLdmf+IqhfTT7itps=)
                          2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=)
                          3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=)
                          4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bd:1a:cf:d1:9e:20:64:c0:f8:1c:06:2d:c5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=5c7b7f49eba62503fbd828ec0434ece7929b5dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:2c:7b:69:d2:cc:1a:51:e3:eb:7c:5e:9e:
                    3e:92:57:b7:4e:0a:0b:a9:db:a9:4b:b4:39:9e:ef:
                    36:4c:97:0d:a6:a0:86:90:22:08:1e:54:a0:fe:5c:
                    3f:db:e5:a9:61:c0:de:3a:9c:f2:ac:5b:43:da:33:
                    b2:38:01:db:17:f4:00:4e:40:ef:c4:16:b8:d7:5d:
                    01:c3:12:ce:8a:12:ca:7e:f9:32:29:eb:17:28:d5:
                    22:27:ce:26:7e:e2:02:71:26:e7:40:51:6b:1e:1a:
                    6a:e9:ac:43:cb:69:2a:01:11:2d:42:4d:33:5a:8f:
                    aa:ea:06:cc:5c:60:22:87:83:c4:bc:4a:bd:f0:c3:
                    60:e1:ef:b0:ae:b7:b5:09:a0:f6:60:92:88:24:c5:
                    90:cd:8f:65:fa:81:85:f9:1e:f7:76:2d:e5:28:5e:
                    a6:f9:d4:a3:5e:c2:43:48:bb:e6:8b:e1:1f:a7:08:
                    5b:e2:7b:28:fb:26:20:96:48:70:3d:50:15:b8:6b:
                    78:a7:6b:4b:0e:4b:8d:23:f2:40:37:b7:38:b6:7a:
                    28:ae:6a:11:2f:7c:08:14:0c:da:44:6d:5d:3c:44:
                    25:19:25:b8:fe:1a:b9:1c:7e:c8:14:5c:ad:17:9f:
                    f4:ee:4c:ff:14:fd:a3:69:e3:39:45:bc:dc:50:3f:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7B:7F:49:EB:A6:25:03:FB:D8:28:EC:04:34:EC:E7:92:9B:5D:AD
            X509v3 Authority Key Identifier:
                keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:76:91:d1:d0:62:72:fc:87:cb:52:fb:f4:8d:e4:a0:90:ee:
         cf:a7:1a:ac:f1:41:6a:ad:66:0e:bb:fa:9f:ee:fd:5e:7a:b2:
         1a:9f:ec:60:8d:57:54:1a:7e:33:45:c7:7a:00:82:f6:57:71:
         e7:e9:74:6c:45:3b:82:01:12:37:9b:71:42:cb:f2:f3:28:ee:
         4d:9e:7f:66:d5:1a:4a:aa:02:29:8c:64:f3:62:74:bd:0a:ed:
         42:00:af:7c:14:60:54:ec:1f:75:2b:e5:01:42:0e:2b:16:b2:
         c4:95:5f:a1:74:10:3d:dd:e6:1e:f2:f4:9c:db:47:c7:98:1f:
         e8:04:aa:b6:75:c0:62:d4:1a:8b:89:4f:c0:25:63:81:e8:5d:
         94:e5:9c:2f:5a:cd:5b:5f:4b:47:4c:1f:ba:65:1e:00:a4:99:
         35:fe:1d:8e:80:24:0d:ea:a7:05:08:6f:4a:9e:70:30:b3:99:
         16:53:17:00:eb:5a:7b:4d:94:c1:f9:48:2e:7e:b1:cb:ab:45:
         21:6e:8c:9d:1b:73:4c:36:c8:52:59:6a:18:cf:4f:b7:d9:71:
         23:b1:a0:9c:a7:49:35:c9:e5:e8:2c:d7:f0:1f:ac:43:dd:98:
         30:23:da:7a:f8:06:bd:8e:02:0d:17:bc:cd:dc:5d:72:9c:6b:
         0a:be:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----