Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
File:                     wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft (raw, json)
Hash identifier:          MjlExooai2L9RUwhFPGB0KCS4IxCtV0VeWnjrPc5/ZU=
Subject key identifier:   8B:C4:53:FD:BA:11:07:08:AE:C3:BF:A6:06:22:44:AB:E3:5D:B2:E8
Authority key identifier: C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
Certificate issuer:       /CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Certificate serial:       01962FAB5804400715DA8B5F3397DE7F03F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
Manifest number:          0222
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl (hash: XAYNm+3e/squMf7L17SnTCOwpBHVgK0Lr7gxPTr7Ikc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:58:04:40:07:15:da:8b:5f:33:97:de:7f:03:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=8bc453fdba110708aec3bfa6062244abe35db2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:db:cc:51:7b:7f:62:f2:68:e3:0d:c6:d9:
                    3e:7a:04:fd:2f:ca:69:cf:d3:96:b8:5f:90:f3:a9:
                    f7:d1:33:d9:3c:86:96:63:8c:5c:f9:98:b9:4c:16:
                    f5:85:a8:8a:03:de:35:2e:88:34:09:33:58:74:50:
                    2b:0b:c6:b8:64:fb:ed:0e:87:6a:3c:dd:67:0c:73:
                    65:84:b6:cc:e3:39:15:82:d8:d3:aa:b1:e6:5f:ca:
                    cc:74:be:02:88:bb:4f:cc:c8:fc:58:86:06:cd:bd:
                    93:a1:ac:60:57:4b:6c:7b:ce:f2:f3:25:f6:83:10:
                    e3:68:e2:19:b2:fe:01:22:33:3f:44:0e:e6:ff:c6:
                    56:cf:0d:54:a0:d7:96:d0:e5:78:bf:90:c9:50:f2:
                    e6:aa:fe:61:1d:c7:51:79:dd:a4:e9:79:2a:d9:df:
                    10:3b:71:b3:c0:bc:c4:88:cb:ff:02:be:89:e8:96:
                    78:06:0a:99:3d:62:85:5f:47:1a:80:d3:1f:b4:c6:
                    fa:b2:64:a5:34:7f:71:7a:80:24:93:a7:02:d3:13:
                    88:08:a4:14:b2:72:83:9a:48:c2:1f:8c:a8:28:ed:
                    d4:7d:f5:c1:21:0c:74:15:24:16:06:87:e7:42:fb:
                    a8:bb:e3:fb:a3:36:73:bc:3e:39:91:9c:50:60:f4:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C4:53:FD:BA:11:07:08:AE:C3:BF:A6:06:22:44:AB:E3:5D:B2:E8
            X509v3 Authority Key Identifier:
                keyid:C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:09:11:3c:2e:5a:bf:09:17:b0:cf:6f:4b:69:3e:f0:95:10:
         72:6e:5a:7a:55:8b:1f:d4:92:5d:e0:92:26:de:de:99:62:c8:
         dd:31:ef:42:08:fb:5d:33:db:91:5b:52:9e:c1:bf:fa:af:dd:
         8f:18:e4:ed:21:0d:67:ef:cc:30:4d:e6:b6:62:4f:44:8b:79:
         7c:71:b7:7b:a2:f2:8d:a5:f9:0c:eb:e3:71:2a:41:47:1a:10:
         09:b8:e3:72:2e:a0:da:f4:fd:ae:00:3a:eb:08:37:ca:c4:2b:
         3f:62:bb:64:90:ef:9a:74:ac:ab:49:98:6b:0f:a2:80:f7:02:
         12:31:fc:de:30:22:51:cd:83:da:a3:d4:f2:fc:e6:38:df:09:
         fb:95:0d:f9:15:d8:32:83:3b:f4:c2:25:d8:47:d7:87:1b:0b:
         52:52:60:d6:99:fb:f8:df:2f:1d:9f:92:83:fb:27:7e:13:9d:
         a2:28:ab:a6:80:5f:69:02:88:f9:4a:2a:f2:42:1e:5e:67:0e:
         e8:ff:5e:9d:a0:d5:45:ea:dd:c5:d2:db:d8:20:c3:ab:a8:ab:
         d0:e6:3d:fe:cf:d6:15:f8:e3:59:8e:91:86:e8:3b:3e:4b:1e:
         0b:51:e2:bd:94:94:49:ce:fc:eb:e2:a7:7b:ae:c3:3b:5c:7e:
         62:3f:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----