Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File:                     WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier:          ugReSrI+F0GzgUgMx72GPGnxKEt1jybLBy3u/juiiBo=
Subject key identifier:   9B:55:9B:ED:6D:B9:8E:56:AD:1B:2D:18:8E:CE:90:B8:55:52:18:FE
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       0195E04699A8CB3309D31F7DAF8AE2D6322D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number:          14CA
Signing time:             Sat 29 Mar 2025 05:01:17 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:17 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:17 +0000
Files and hashes:         1: 0m6Zs8TtQ0noHtuYMEIz7RlZ7FM.roa (hash: SY6YBaXw8ZDaB1rXBNbn1lkSJOuF9LQILLzywGY4QG4=)
                          2: UZBTwDwhsdeE6L8tM7LMgk2vcQQ.roa (hash: c7iWfc2h0xfZuOGmHIC37VdlCYWmVoLvyubnSxmqlrQ=)
                          3: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: GazlobjI2Fvb+mAuhX0//mzVuOGwCGD3DS4hWfF4q5k=)
                          4: a0heAr5Tdh28am-YWZ2LDUI1i-I.roa (hash: 4Riercylxh3jedSptQ6f+cc+w6P5hj4cNLgG2FwgmtI=)
                          5: gw7B96UShjsyHnq6pn1ZB8lO3nw.roa (hash: weKIf0S7rCXr80VHrw+niMSn5bWUOaoN4oVmKk0/npM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:99:a8:cb:33:09:d3:1f:7d:af:8a:e2:d6:32:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Mar 29 05:01:17 2025 GMT
            Not After : Mar 30 05:01:17 2025 GMT
        Subject: CN=9b559bed6db98e56ad1b2d188ece90b8555218fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:23:ef:83:fd:95:3f:96:e7:46:8c:e3:95:
                    fe:eb:5a:ca:bd:98:e1:5b:d2:f2:8d:64:f2:f9:c8:
                    ab:fc:1d:7b:9b:0b:a0:a9:27:42:05:57:dc:b6:e6:
                    c5:ce:a6:8d:ee:b8:a3:1e:53:b0:c5:0a:ed:dc:bb:
                    c5:a0:96:32:c7:b6:1d:23:3c:a2:9a:09:a5:ff:6f:
                    83:f0:fd:da:d6:94:96:24:a4:0d:27:c8:37:9a:35:
                    ba:9a:9b:79:11:5a:17:3d:99:24:4e:00:61:b4:31:
                    50:6d:4e:a7:7a:07:fa:89:db:2b:ed:45:b4:c3:70:
                    2f:a6:e8:4d:5d:78:3e:fd:73:ca:14:bf:74:38:84:
                    12:6f:29:f1:cd:23:f3:16:db:c8:ec:10:cf:76:28:
                    e3:11:06:84:08:0d:58:2a:8c:04:4d:fd:e5:9e:72:
                    bc:36:c7:2a:24:9d:83:e9:bd:55:e5:70:6e:98:7c:
                    9c:a6:6e:fe:8e:f1:82:4d:29:12:8d:bd:18:d7:af:
                    54:95:71:69:81:57:a6:d7:b2:3a:f9:dc:f1:57:b9:
                    e8:b7:f1:2f:f9:69:30:13:f1:6d:7c:43:3f:2e:7a:
                    48:22:4a:73:c2:ae:fc:6f:1a:5d:2f:5a:1e:9e:9e:
                    f6:18:83:e6:28:b2:2c:ea:53:8e:bb:ff:1d:d7:57:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:55:9B:ED:6D:B9:8E:56:AD:1B:2D:18:8E:CE:90:B8:55:52:18:FE
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3e:0f:a8:d6:15:24:12:0b:5b:cd:93:55:10:f5:fb:4b:4d:
         0f:d0:02:42:73:ff:94:9f:27:9d:7a:dc:10:ea:82:a7:b8:1c:
         77:1f:8f:fe:b5:51:e3:fd:42:61:66:5f:0a:a6:68:23:38:ed:
         0b:ee:76:1f:56:f4:30:10:e9:30:b9:89:ff:4b:e7:6f:7c:b0:
         dc:32:48:ed:2d:a0:d3:8d:6d:c4:47:66:8e:6c:1b:0f:fe:95:
         57:cb:af:c3:d0:3e:0e:af:5e:87:3a:ec:65:bc:df:40:89:94:
         68:b6:fc:7e:fc:57:e6:7d:bc:61:fd:97:63:18:0e:47:71:f1:
         c8:e4:fe:03:8e:49:ad:a7:bf:d2:38:f3:ff:13:1c:62:06:b9:
         ab:b4:7f:4e:f5:58:28:2e:70:20:c4:0a:82:b4:63:90:0c:09:
         d3:c7:cb:05:d5:99:e5:3c:38:8f:81:bb:20:f4:c4:cf:6a:2a:
         aa:17:3b:2b:1a:b3:25:8b:e0:12:62:e0:8b:f2:4b:a1:e0:68:
         d8:68:af:db:8e:ba:3d:bc:26:2c:ff:42:92:3a:ed:f2:17:ae:
         ba:58:6a:67:f0:34:5d:03:50:cb:74:52:d5:ad:58:1e:ca:ba:
         81:51:fe:3d:41:65:ca:11:1b:ab:81:08:14:4b:df:60:36:08:
         b8:dd:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----