Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File:                     WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier:          N3pzUwXn/IyJd/cgTm+cjrSl6FbXQdJRbWRH7dgkUa4=
Subject key identifier:   53:1E:39:58:F5:0B:91:51:A4:5C:9D:8E:24:30:99:03:D5:48:00:45
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer:       /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial:       01962DF3DF59E8D99E869A60D505ACF7A69D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number:          0427
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: 3gplfo45Bnjix0JstPNwkA/BOjhx4xdtg+N7w9o/1vA=)
                          2: a6Ca0db6IRWqpeQUf-mkPOP5Y6E.roa (hash: +wI+O0cNbhPu/Y/iWm666e3mQkbcXkl04FBEwBpeXro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:df:59:e8:d9:9e:86:9a:60:d5:05:ac:f7:a6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=531e3958f50b9151a45c9d8e24309903d5480045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:e9:41:cf:01:37:1c:ff:86:98:49:40:8f:
                    de:0c:98:5d:71:a3:4d:45:e5:ed:b3:8e:fc:e9:64:
                    be:8c:45:64:52:bd:52:b5:37:91:37:a6:c5:ff:08:
                    39:a9:d3:4c:96:36:3f:97:95:61:eb:62:39:86:02:
                    60:79:0a:74:34:2f:cd:b6:bc:c0:c5:82:48:15:51:
                    d9:da:9e:76:41:95:2a:ca:e6:4c:37:f5:bc:ec:e5:
                    01:ea:05:16:3c:44:7f:46:cd:46:5d:08:54:f4:45:
                    e7:f6:be:ca:48:67:eb:50:55:3c:e6:e4:a7:ae:89:
                    83:b8:bf:7b:58:08:2f:f5:d7:36:89:bc:63:da:cb:
                    cb:f6:ea:08:7a:99:24:6d:07:6c:eb:53:6e:e9:3f:
                    4f:2b:ba:2d:bb:1c:75:ab:5c:a1:f8:85:31:c8:1f:
                    bf:c0:48:6e:4b:d6:aa:72:a6:d6:cf:b7:02:61:ee:
                    cd:c5:c1:05:8e:81:b2:b1:d9:97:9a:96:9a:d4:8b:
                    5c:98:ba:3e:82:eb:d3:05:2b:fe:d6:44:72:2d:1a:
                    96:40:61:d6:c2:66:41:20:1d:ec:1b:3c:53:67:b6:
                    ad:ca:24:69:4c:73:9d:c7:cc:ba:58:50:21:9a:4d:
                    f6:6d:15:de:c2:48:35:12:a0:eb:16:6e:ef:24:a8:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1E:39:58:F5:0B:91:51:A4:5C:9D:8E:24:30:99:03:D5:48:00:45
            X509v3 Authority Key Identifier:
                keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fc:bf:8f:7e:d4:b9:8e:3d:cb:eb:95:65:83:7a:ed:a0:cb:
         ff:a1:a5:fd:f1:51:ed:f4:c5:d7:e6:ed:0e:4a:2d:68:b5:d8:
         07:7a:1a:ca:98:ca:1e:88:52:6f:cf:71:b7:59:cf:40:1e:7e:
         59:dc:1a:63:98:8b:fb:14:e7:32:a7:80:00:5a:2a:e5:0c:b7:
         9c:c6:15:e4:29:5f:b9:a0:94:2c:89:bf:fa:29:0e:bd:e5:94:
         f0:e6:1d:18:89:05:4f:4b:d6:97:ff:70:87:55:91:e1:c4:b9:
         67:e6:c9:a5:bb:8c:f3:c4:a0:b5:b5:12:c2:4b:01:8c:b8:34:
         d3:bb:1c:33:9e:74:8a:a7:29:eb:71:81:7d:7e:1d:68:ed:b7:
         99:83:7e:e6:10:4a:41:20:e3:f5:88:de:b7:4c:a4:0a:91:d0:
         b8:f9:4f:f6:a7:87:43:8d:c5:ce:d8:d4:59:03:5f:01:98:e7:
         97:89:c8:14:49:1b:b1:da:33:30:54:f3:b1:fd:fc:c4:9e:f2:
         48:ad:b3:b2:0f:91:cb:94:c3:dd:c7:46:25:e9:da:68:5e:31:
         2a:43:63:a1:c4:11:13:30:6d:ff:4f:dd:d9:86:69:f9:d7:dd:
         6c:35:ef:bc:f2:ad:d4:fb:6f:cc:d2:32:44:cd:e3:e7:7d:05:
         81:8c:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----