Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          BSV1woI+Ai/3OSCvrfdubZNqU8Mt+meudXEFHwA/KRY=
Subject key identifier:   21:E7:46:50:C2:23:73:8D:C7:D8:6F:19:AD:E4:2D:50:B0:C1:E0:9E
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       0194BD85A485E05C57C26632E3E56F70CC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 18:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:39 +0000
Files and hashes:         1: 21Z7HmrOxiobds8TxVCgw76jX2Q.roa (hash: Skfph10GmJAF2gm8sQyaNWU8Upk0+888zHd0gic3TYc=)
                          2: 6BYQ4By2tJL3cWm4L-BQSWyvJS0.roa (hash: 3sAvJeopcRq49xZNtMv2qbQCEldVQVML4/pl6Sm3s88=)
                          3: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: Z0z4RcPuNpmQa3MR+Gv1qWZwLe7rooEhdrnzSW6bFIg=)
                          4: Y3EPCVedITqwlsI8tq2oHmV74uA.roa (hash: NApSJnbDytNl9MdnnM7AVghalmDl36hhBVDmwSTO7A8=)
                          5: n6_io3-KaLYhuJtZiy1MeoUuNbk.roa (hash: nSbtIazJ2SXxi9u2NxxSLPcqXno/gu6gZmKKyNsxgLg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a4:85:e0:5c:57:c2:66:32:e3:e5:6f:70:cc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Jan 31 18:00:39 2025 GMT
            Not After : Feb  1 18:00:39 2025 GMT
        Subject: CN=21e74650c223738dc7d86f19ade42d50b0c1e09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:86:fb:92:b3:37:0e:39:d5:0a:a2:69:54:
                    7c:13:fd:9d:d0:7d:d0:6b:22:2b:62:3a:7a:8c:8d:
                    14:70:73:89:aa:6c:d8:6a:d2:2c:28:10:9d:4d:3f:
                    34:ae:d2:f5:f1:46:93:78:cc:f5:9b:10:28:19:d7:
                    6b:18:cd:e3:59:09:5d:8a:4b:f6:f4:b3:89:3b:01:
                    9a:b4:71:2e:2c:28:6b:43:77:08:7b:33:05:c2:2f:
                    62:c7:15:64:ca:81:6f:1b:e8:ca:6b:e8:68:5c:ba:
                    1f:d7:30:9f:43:98:c2:23:fb:6a:ad:a7:7b:fa:aa:
                    fe:e9:a4:f2:6d:07:54:8c:2c:62:72:2a:96:eb:99:
                    7e:e3:54:3b:1d:03:72:02:0a:7c:9a:8e:2a:31:dd:
                    20:a2:7e:8b:c4:19:23:01:30:b6:98:48:4e:a9:39:
                    8b:4a:09:1a:04:69:d9:e8:c8:dc:5c:df:ac:7c:e5:
                    8c:09:0d:9c:89:8f:2a:bc:24:5a:45:a4:ab:0d:d4:
                    f7:14:66:97:7b:a4:fe:e5:72:af:f1:0f:9f:76:f4:
                    06:4c:35:a5:9a:71:86:99:e5:88:81:c2:d8:d0:33:
                    11:91:44:bf:23:cf:ba:86:a6:23:dd:24:54:85:fb:
                    20:6f:f3:af:17:7a:3a:14:70:0b:fe:ec:1a:30:53:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E7:46:50:C2:23:73:8D:C7:D8:6F:19:AD:E4:2D:50:B0:C1:E0:9E
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:27:cf:0d:7e:75:6b:09:05:61:a3:f6:fb:b6:c7:9f:ca:
         df:d7:3f:5a:cc:63:62:f1:1a:ab:f7:f6:32:1f:12:7e:a2:b7:
         1b:f2:ba:44:5a:92:1b:f7:aa:d7:95:65:66:2e:4c:08:e4:61:
         37:47:86:6e:ee:d9:60:49:b6:e5:96:89:84:07:a7:8a:68:6f:
         63:f2:b7:32:10:d7:83:6d:e7:9a:db:2f:a4:00:2c:f1:66:de:
         cc:20:9d:2d:ba:64:6a:ca:33:0a:b4:81:89:12:7c:0d:21:a2:
         a4:cb:1f:42:11:46:89:0c:c2:2c:02:06:53:20:3f:df:00:35:
         61:68:cd:5b:03:4b:ff:35:79:93:18:3e:fb:04:42:b8:1b:64:
         52:3c:2b:1e:ff:75:37:a1:19:0b:0a:7e:1d:6c:3f:e3:e1:fb:
         91:80:9d:52:07:87:9b:86:a8:5a:f5:2a:85:4d:f9:48:c5:be:
         c0:90:55:f1:b8:6d:22:9f:4f:b0:fa:af:28:a4:f2:fa:7f:f2:
         d8:f9:fa:4d:4c:db:b2:53:61:38:a2:10:c5:ae:3d:1d:8c:30:
         48:80:5e:aa:eb:9b:28:c8:36:64:fb:1e:26:c7:ac:15:fd:bb:
         69:f0:7a:d5:0d:b2:ad:1f:7e:6a:a0:e2:0d:eb:22:de:e0:49:
         5a:9b:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----