Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File:                     WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier:          yfULeI08Zlc/vIywxj6BBij4pjMn3afTU2PAE9hrjsA=
Subject key identifier:   89:BC:4B:39:16:DE:6B:1C:D3:2F:85:55:2B:91:8B:B9:3B:5F:75:C5
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer:       /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial:       01962ECFD1615D16660F1D69D4204C20AD5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
                          2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: uRmoZ+4pz4vX0eOzMcSO7OPAI9q3kJTRMROiQYk5SkM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d1:61:5d:16:66:0f:1d:69:d4:20:4c:20:ad:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=89bc4b3916de6b1cd32f85552b918bb93b5f75c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:08:9c:48:2a:89:99:c3:81:5a:e8:ee:81:
                    5b:5f:92:e6:af:d0:69:0d:cb:4d:d9:a2:79:68:67:
                    07:16:d3:b2:4f:15:b4:df:68:66:18:10:89:37:f2:
                    28:54:e5:5a:95:c7:3e:9c:b4:90:eb:93:68:fc:fe:
                    48:89:e2:7c:1a:e3:67:bf:a8:e8:d7:35:65:84:30:
                    b7:74:50:a9:f4:bc:18:75:1c:1a:c7:ff:8b:05:87:
                    dc:e0:56:b9:02:ac:fb:dc:66:25:04:bc:98:7f:08:
                    ac:d0:4b:04:31:cd:cb:0e:7e:92:4d:60:98:cd:42:
                    f0:52:be:0d:aa:4d:f9:68:ff:e8:fb:1c:10:e6:e5:
                    01:e0:36:5a:37:05:82:79:0d:ac:a9:ec:8e:91:e3:
                    f4:3d:3c:3e:72:14:fe:48:3a:11:35:fa:29:ea:75:
                    07:b2:af:f1:f8:2d:bc:19:41:28:a9:02:b6:94:4f:
                    0e:f3:e5:2d:51:63:b8:58:49:b7:64:7a:b9:2a:20:
                    75:83:07:56:67:b7:82:36:61:65:32:a3:7c:7b:f1:
                    50:3f:bc:8a:81:c4:06:24:3b:d6:84:d7:9b:26:07:
                    b9:23:bf:6c:02:0d:8d:5c:e0:37:98:1d:80:cb:3d:
                    b5:f7:09:e8:b6:75:e0:8b:c1:38:7a:04:cd:f6:f2:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BC:4B:39:16:DE:6B:1C:D3:2F:85:55:2B:91:8B:B9:3B:5F:75:C5
            X509v3 Authority Key Identifier:
                keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:9e:7d:fb:eb:d8:af:4d:d4:00:2d:7e:77:ea:38:8c:2b:
         db:99:68:2a:39:81:c7:a9:29:f8:65:ce:c2:e7:74:5e:91:47:
         c5:1e:bc:1f:f5:5b:87:b2:23:45:a5:fd:f2:a2:77:8a:64:a7:
         5f:ea:33:e1:0a:06:55:8f:1a:9d:e6:c6:01:f2:96:cc:fd:2d:
         94:aa:3a:c8:86:31:ac:b2:ad:1c:06:05:78:7b:d4:77:b7:b8:
         5d:58:01:50:61:19:c0:d2:8b:74:14:2b:4a:f8:39:f0:5d:57:
         24:f0:bd:37:da:b3:d0:17:26:70:f4:ca:5a:f4:48:51:d6:05:
         03:78:b5:5f:58:25:99:57:5e:c3:67:d4:d1:e1:8a:91:49:d4:
         4f:f3:77:17:d8:d3:84:ca:d7:e0:0f:f5:37:88:16:fb:09:59:
         33:c7:2c:19:b9:a4:96:67:79:79:d2:e6:d7:5c:ac:70:6d:18:
         99:ae:33:5e:ca:27:31:44:43:ff:3e:da:f1:90:46:8d:bf:44:
         18:26:cd:1d:e2:e3:55:f7:e5:9c:9d:ad:72:4b:f4:47:e5:2c:
         3e:5b:e2:e0:f5:2c:41:ab:52:be:bc:c0:d9:b8:8e:4d:e7:e2:
         19:19:22:67:e3:11:f6:9e:72:c5:f4:d3:74:c3:95:c2:5f:f3:
         e2:50:83:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----