Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
File:                     WZyb6F-CikOPCNH1CvrCUz0qbsI.mft (raw, json)
Hash identifier:          mwkisbUCWhM3EJYeNYeM4+wyyBPl9mQ2REbVnNM5hB4=
Subject key identifier:   83:2F:16:B8:5F:65:E8:C3:D1:80:99:5E:2E:CF:1D:D9:5B:A2:B8:7A
Authority key identifier: 59:9C:9B:E8:5F:82:8A:43:8F:08:D1:F5:0A:FA:C2:53:3D:2A:6E:C2
Certificate issuer:       /CN=599c9be85f828a438f08d1f50afac2533d2a6ec2
Certificate serial:       01962F06B3CACD27CB3DA4A3746BBE0318D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
Manifest number:          04BA
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: WZyb6F-CikOPCNH1CvrCUz0qbsI.crl (hash: QEoWEa94CRfIWy4wZWm6qTsRHfUZi8DwJO3RH/5yyXc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b3:ca:cd:27:cb:3d:a4:a3:74:6b:be:03:18:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=599c9be85f828a438f08d1f50afac2533d2a6ec2
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=832f16b85f65e8c3d180995e2ecf1dd95ba2b87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:8e:e1:98:53:ea:21:3d:04:f9:43:fd:54:
                    7d:ac:69:3d:55:24:3a:84:ed:08:ee:c7:6a:9b:40:
                    64:ac:f0:89:84:ae:d2:1e:4e:ca:a3:82:b1:8c:73:
                    59:51:b4:0a:a3:e7:73:e3:fa:0a:5e:fc:15:75:84:
                    df:06:3a:6d:49:18:49:15:7e:60:ad:d7:d8:c0:92:
                    b2:20:94:d6:b3:9f:a5:fe:7e:68:08:ba:2d:ca:77:
                    07:4a:f0:46:c8:a1:8b:cd:71:30:19:bc:d3:bf:4f:
                    bb:47:cc:ce:5a:f8:2f:ec:20:7a:7c:96:26:70:d4:
                    9d:9c:0b:77:c0:b8:b3:a4:8b:55:ff:50:b2:1a:eb:
                    19:e1:5b:d4:3f:6e:75:93:68:00:22:ef:d0:50:ae:
                    99:4f:5f:d1:e3:05:3d:d0:55:73:c5:fb:39:4d:d6:
                    3a:15:e8:d0:ac:75:f2:d2:ec:59:70:e2:fa:fb:5b:
                    62:3e:90:f7:a2:9c:12:79:b3:b9:f3:62:de:6d:23:
                    30:e4:68:5f:29:e3:af:61:b9:a5:a0:c3:62:9a:05:
                    a3:2f:ce:e1:84:16:a3:44:dc:7d:dd:5e:93:57:a8:
                    be:15:e9:9a:b5:d6:9a:d9:f7:59:6c:00:44:29:58:
                    56:8d:36:cd:a7:cd:a0:0c:4f:7d:f2:d9:f6:71:e4:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2F:16:B8:5F:65:E8:C3:D1:80:99:5E:2E:CF:1D:D9:5B:A2:B8:7A
            X509v3 Authority Key Identifier:
                keyid:59:9C:9B:E8:5F:82:8A:43:8F:08:D1:F5:0A:FA:C2:53:3D:2A:6E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c3:c6:0b:52:8c:9e:28:0d:56:76:53:ed:9e:3b:c9:bf:0a:
         74:77:17:9d:6f:07:f6:c6:02:d2:c8:24:98:d8:85:8b:69:08:
         ee:ce:49:0b:b9:3a:8a:66:82:65:fe:2f:d8:83:17:8a:0b:bd:
         7f:3c:2d:88:a7:cb:e6:14:5d:24:ef:70:29:a9:ab:52:c9:fa:
         a5:95:54:a9:d0:79:21:fd:a8:95:76:c5:d3:87:32:74:70:99:
         cc:b5:3f:cc:57:b2:6d:da:b3:e7:35:ad:f6:d2:47:21:f9:de:
         7d:2b:a9:db:a5:a4:e1:e2:e4:0a:5c:51:80:9b:0b:1c:e8:84:
         d2:6f:3f:4a:61:dc:40:7b:ba:b2:65:39:4f:8e:c4:39:3e:34:
         89:51:d5:56:f5:b1:5f:75:de:b1:81:a2:fc:63:86:27:cf:09:
         2b:1d:d7:6a:b3:98:d9:63:9a:4f:ab:c0:32:be:02:6f:55:9c:
         eb:81:02:bb:96:de:7a:a0:e5:89:0f:71:6c:2a:d2:ad:cb:c5:
         a9:78:67:bb:6c:6d:a1:44:e6:fb:65:20:9e:3c:49:8d:92:b5:
         be:75:37:8b:ca:ac:ad:11:21:e9:92:d2:5c:dd:48:5f:24:f2:
         7a:c0:ac:9d:84:50:53:c0:33:15:88:3a:e9:f8:58:4a:a1:91:
         48:4a:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----