Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
File:                     Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json)
Hash identifier:          AgWwdCFmp5EBhN81nKbWJJnFvQ9MPJWJQewhUvJEEeQ=
Subject key identifier:   03:21:8C:26:9E:B3:C0:7D:BA:6A:03:B3:31:2D:7F:D2:D3:A5:97:6D
Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
Certificate issuer:       /CN=5a293defbef10d73cf11f2be8655588eda68a44c
Certificate serial:       01962FAB822D12270B55C9E49D91D6BFF17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
Manifest number:          0A
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: kTwhslqnPg077WuxSdqpK9GV4rDLzgKDALNLC7z5Z7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:82:2d:12:27:0b:55:c9:e4:9d:91:d6:bf:f1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=03218c269eb3c07dba6a03b3312d7fd2d3a5976d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:73:02:fe:af:72:44:96:96:b4:8a:c8:43:
                    19:85:fd:68:2f:f1:aa:1a:45:c0:a4:cd:d5:84:73:
                    e4:fa:a9:9d:0d:87:f5:49:e7:d0:27:33:1b:93:94:
                    ba:86:71:94:a8:fd:cf:ff:89:2c:f3:36:58:c2:15:
                    e1:c1:5a:01:01:59:6a:09:22:8f:74:e8:8e:69:5d:
                    2e:8d:7a:18:e5:cf:39:41:e9:c7:5d:23:74:f9:b6:
                    ed:cf:a2:6c:82:6f:ca:d8:e9:73:e6:df:10:65:7d:
                    22:ba:5c:70:35:86:4c:28:56:ad:0a:cd:99:57:da:
                    d7:3b:6e:f8:08:0e:69:e1:6a:7e:ba:f8:81:df:3a:
                    34:c5:f3:51:21:6b:ba:fd:07:c8:cb:aa:e7:35:1f:
                    aa:1f:97:50:38:87:07:23:db:76:d6:1d:77:e5:b0:
                    92:4d:6a:29:62:71:0c:c4:cd:3c:de:10:6c:68:43:
                    c0:01:99:58:06:dc:d7:b2:1f:6d:d6:43:16:80:90:
                    a4:ac:5e:7c:a5:c3:a9:53:ae:43:67:e0:06:5a:34:
                    55:1c:3f:79:78:5c:b5:e7:d5:79:a0:e7:10:d8:67:
                    31:5c:c6:5e:29:7b:8e:f6:b9:f4:88:ad:8d:eb:2f:
                    3a:c7:6d:a0:5e:9e:2b:ff:fe:70:8b:cd:2f:84:fd:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:21:8C:26:9E:B3:C0:7D:BA:6A:03:B3:31:2D:7F:D2:D3:A5:97:6D
            X509v3 Authority Key Identifier:
                keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1f:de:d4:4c:75:64:58:1c:af:69:0b:b7:01:2f:86:1b:97:
         f2:b4:a9:fa:5f:1b:94:10:4d:b0:7b:09:d9:30:f9:ea:1a:05:
         6e:d7:23:fa:50:cc:7f:ee:83:db:7c:fc:4b:21:c5:2c:05:87:
         90:c1:28:0a:99:9e:84:93:ff:38:d8:4d:16:dd:10:ea:52:3c:
         8a:b5:00:5b:14:63:63:fe:3a:60:24:4f:4c:14:7e:bf:54:af:
         34:90:72:46:d4:19:d1:a6:39:2a:7e:bd:42:dd:5c:92:79:29:
         f7:b3:e7:be:0a:12:39:79:28:43:f5:e4:e5:64:21:13:27:84:
         21:4d:dd:59:a4:23:9e:51:af:43:7f:be:4e:0f:7f:e0:ee:e0:
         3a:82:11:f2:64:90:f3:1c:7b:e6:b1:69:af:41:a7:03:8b:4b:
         81:ed:11:1b:81:bf:db:75:a1:93:a9:87:8d:dd:a1:4f:49:43:
         96:f0:38:34:a7:2c:98:6a:ff:55:2d:42:c3:13:ba:df:f9:25:
         06:5f:b3:5b:a1:2f:04:11:82:d9:f5:83:21:fa:f3:dc:f8:96:
         db:20:a0:69:4b:52:90:2a:bd:de:c9:5a:35:91:36:d6:1a:d0:
         88:c3:d1:b6:ee:36:e3:85:6a:d6:ff:94:55:bd:91:fd:17:dd:
         be:23:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----