Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          cxqIuQgqAbOuz7F6dFNRSWChkRquatu1f25A+EKpWTM=
Subject key identifier:   82:86:18:E7:11:36:A3:B0:1B:F3:24:42:18:FE:92:D1:2F:48:84:11
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       01962FAB7CF9A83FC8304BA56A657D90C09B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          021C
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: 7Mmb5ZRsB9m8oInge4JVYHrP4Ew.roa (hash: NBi3hLwQwbGQATz90wDw9LkVn07LZS1piVwE8dvvsug=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: rSPh3vrhIdGdwY8qeH6rBudVuyWvURhgA3ee+/xG/8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7c:f9:a8:3f:c8:30:4b:a5:6a:65:7d:90:c0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=828618e71136a3b01bf3244218fe92d12f488411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:d6:8a:9e:77:27:1d:14:b0:1f:fb:29:83:
                    08:98:b5:1b:ba:9a:74:4c:16:b0:92:89:5f:7e:f2:
                    86:6b:96:37:85:41:ec:69:37:e3:58:c7:ac:81:19:
                    49:5d:34:34:1f:a1:45:86:b5:70:bc:d1:78:ad:03:
                    ac:4b:58:4a:56:20:3e:f1:8e:3e:d8:5a:12:fa:01:
                    e2:68:44:59:53:30:04:c1:eb:2a:07:15:fe:ee:72:
                    1a:a2:12:f9:4f:f6:eb:f5:4e:df:f8:b6:9b:09:19:
                    55:c0:27:a1:27:f5:7e:bd:02:a7:23:aa:cd:56:aa:
                    7f:20:2a:69:42:e2:cf:45:d4:d1:ed:d1:4f:54:b3:
                    9e:dd:93:b3:20:51:a5:93:d6:bb:6b:bd:4e:52:b1:
                    a8:53:01:4c:3b:a3:b0:78:73:79:18:2d:1e:f8:aa:
                    b8:b9:eb:d4:ee:6f:e6:f7:71:73:7f:2b:d4:17:b9:
                    bc:7e:0c:c6:0e:89:b5:3c:e9:ef:50:4a:1d:23:3c:
                    6f:3f:4d:14:96:a9:a9:8f:fc:23:e6:3e:f5:ec:11:
                    a9:08:e8:06:e6:28:40:40:1a:5a:b6:00:37:46:d7:
                    75:e7:70:1d:7e:d9:5e:38:f8:c6:ea:f6:2d:50:95:
                    86:e4:b7:67:c3:57:59:bb:02:39:7b:d9:11:b1:4f:
                    9c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:86:18:E7:11:36:A3:B0:1B:F3:24:42:18:FE:92:D1:2F:48:84:11
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d7:34:e9:aa:cb:ce:36:34:ff:ff:57:0e:cf:2b:09:ed:0e:
         fc:0c:61:f5:9d:05:ad:3e:ab:04:51:07:2b:3a:c6:ea:e2:d8:
         6f:41:b1:60:3a:82:8a:86:00:a5:7d:61:d8:7c:be:50:fa:c3:
         31:76:83:30:d9:43:d4:e2:70:6a:a3:fa:a7:19:97:4c:92:b9:
         2b:f2:d5:d0:87:64:8a:40:0f:25:b9:43:6d:dc:43:39:11:b0:
         8c:f3:10:4e:51:a5:f4:91:4e:56:a9:d8:31:87:fd:c7:28:6f:
         8d:d8:e9:e7:ec:b4:0d:d1:b1:65:7c:aa:63:6d:4b:bf:10:4c:
         9b:ca:1d:6e:17:ca:74:29:a3:3c:0a:47:d4:a1:89:be:c1:8d:
         ab:70:66:1f:23:34:94:d5:3e:bb:f6:b5:4b:89:88:55:b5:1c:
         90:66:83:ef:f0:22:6f:7a:bd:4d:f0:d9:f9:6d:2f:88:73:c8:
         12:8f:b5:0f:10:ef:7e:3e:69:58:25:0a:01:b5:9c:8f:3b:2d:
         e9:e5:da:f3:2b:db:04:ed:63:dd:97:2e:f4:66:51:e0:fe:23:
         af:ea:38:15:bc:71:5e:04:df:ca:a4:0b:c7:ae:e1:f2:8a:8a:
         02:d8:58:c0:9c:e9:ac:01:e2:4c:de:9e:25:7e:67:37:6b:41:
         1f:7b:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----