Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.mft
File:                     WM4ypXvUFp5b3bSYqlUH74NOR3I.mft (raw, json)
Hash identifier:          PR9jEbndoIhz8Zq+SwHGboso9dlICOB8Z2VkRdmwCHY=
Subject key identifier:   6F:A2:15:A6:E3:9E:37:D4:C8:53:4C:D3:68:A3:2E:E4:9B:F0:A1:85
Authority key identifier: 58:CE:32:A5:7B:D4:16:9E:5B:DD:B4:98:AA:55:07:EF:83:4E:47:72
Certificate issuer:       /CN=58ce32a57bd4169e5bddb498aa5507ef834e4772
Certificate serial:       01929835466F4FB450E177B9AA842AD974A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM4ypXvUFp5b3bSYqlUH74NOR3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.mft
Manifest number:          0A7A
Signing time:             Thu 17 Oct 2024 02:01:20 +0000
Manifest this update:     Thu 17 Oct 2024 02:01:20 +0000
Manifest next update:     Fri 18 Oct 2024 02:01:20 +0000
Files and hashes:         1: FUhjZPGoL6CtMuucf-Ta_yQE1CI.roa (hash: dCcjppMdb5Pzpw37G/jwO4MaQjiK1DyLni6Weqi69eE=)
                          2: WM4ypXvUFp5b3bSYqlUH74NOR3I.crl (hash: +LWtQDsKhIyszYyat0/5DoThrxXyNH48IDOGMFZ1w/M=)
                          3: _KeLkpPXzyVQSlc-Y8eZxer2imA.roa (hash: M/Bt7/Uq1ZL7QI4mRE5BJhJruYGy89AQk6nTaAKEh74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:98:35:46:6f:4f:b4:50:e1:77:b9:aa:84:2a:d9:74:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ce32a57bd4169e5bddb498aa5507ef834e4772
        Validity
            Not Before: Oct 17 02:01:20 2024 GMT
            Not After : Oct 18 02:01:20 2024 GMT
        Subject: CN=6fa215a6e39e37d4c8534cd368a32ee49bf0a185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:c6:4c:8a:fb:da:86:38:02:16:b0:ba:09:
                    2b:ce:ba:aa:46:07:4c:93:fb:8b:cb:34:a3:16:4c:
                    d4:1f:31:4b:cb:7d:9a:ad:02:63:b6:fe:c9:da:b1:
                    ad:00:41:fa:02:44:78:4f:ac:c5:56:21:37:21:e0:
                    16:dc:37:a1:a2:32:ad:05:36:71:3a:56:bb:4c:0c:
                    67:a8:18:0f:73:08:01:47:95:9d:b7:a6:27:91:82:
                    e5:3f:ce:2d:eb:2a:28:59:bb:55:af:7a:5e:c2:55:
                    3b:60:6e:ce:04:b3:50:7a:11:c4:c6:39:5b:06:e3:
                    53:40:23:9b:26:bb:cb:b2:3c:e8:e5:ef:e9:9a:02:
                    5c:42:bf:9c:e4:56:5d:57:fa:2b:27:ad:b8:dc:e0:
                    80:17:66:f7:c3:18:17:8b:01:b5:31:ff:ef:3f:3f:
                    b0:e0:50:2a:fe:1b:16:b9:50:78:d4:22:e6:cb:ad:
                    6e:c8:63:a8:8f:a8:65:5d:35:2f:aa:21:5b:8e:68:
                    f0:e7:9f:44:28:a7:c2:4b:9a:44:2f:74:89:96:83:
                    3f:71:2f:d0:50:3c:4b:96:41:ee:d1:ac:9b:18:8f:
                    a6:b8:f5:1b:6e:73:59:94:2a:8c:5b:d5:75:5f:f4:
                    2e:06:d1:b9:9c:c6:f5:6f:ad:89:0b:8f:50:b1:41:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A2:15:A6:E3:9E:37:D4:C8:53:4C:D3:68:A3:2E:E4:9B:F0:A1:85
            X509v3 Authority Key Identifier:
                keyid:58:CE:32:A5:7B:D4:16:9E:5B:DD:B4:98:AA:55:07:EF:83:4E:47:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM4ypXvUFp5b3bSYqlUH74NOR3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:02:02:b8:da:98:da:d1:43:9c:17:d6:be:9a:03:1b:77:19:
         64:70:e4:d8:79:9d:fb:a3:2e:c8:63:ae:78:8a:ed:e3:e2:85:
         c8:10:a5:aa:57:c9:13:64:f7:0f:c6:a9:44:0f:99:1a:f2:77:
         dc:5f:28:3c:b5:51:14:c5:a0:de:ec:67:a0:e3:2e:bc:b4:bc:
         8f:a1:bf:58:e5:b5:81:58:38:8b:01:58:64:48:2a:75:6d:d3:
         d5:ba:de:a1:56:ff:57:4f:13:44:28:cb:af:a8:0e:65:2e:ec:
         ed:8e:d6:0e:55:b5:c6:3d:59:64:ab:96:5d:31:8d:36:56:36:
         e0:f7:93:63:f2:66:94:fb:bb:ac:e1:ac:a8:6b:f5:3c:01:6b:
         3f:8e:2c:8a:cd:75:4e:0d:99:28:89:51:b5:6d:67:5d:bd:fd:
         83:12:e7:d4:4e:41:dc:d3:82:f8:59:35:2b:62:d4:b6:5b:2a:
         f3:0a:42:72:95:67:4f:92:f6:12:f3:75:20:11:a5:2b:df:b0:
         99:8f:fb:a0:96:cf:63:a4:c5:6c:a5:3e:81:3c:82:79:a3:78:
         7a:35:b3:3e:1d:0c:40:1f:89:f3:7f:cd:ac:18:e0:e7:dc:c5:
         6f:38:a5:ce:7d:6d:56:ec:8a:c5:0e:02:66:10:c0:91:3a:3e:
         01:84:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----