Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
File:                     w5JjfwbbxBhtlQKakrKbMOn0lA0.mft (raw, json)
Hash identifier:          c/eykMzQTh9i+Q9ZqLFfESpuMXJ1RPIpNS3aZ8ZcwLY=
Subject key identifier:   6C:52:D7:D6:15:CE:AD:5D:6D:E2:77:43:87:65:F8:36:54:2C:31:8E
Authority key identifier: C3:92:63:7F:06:DB:C4:18:6D:95:02:9A:92:B2:9B:30:E9:F4:94:0D
Certificate issuer:       /CN=c392637f06dbc4186d95029a92b29b30e9f4940d
Certificate serial:       01962E2AE5CB19A068E3EC35E2A90ABD41DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
Manifest number:          0262
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: w5JjfwbbxBhtlQKakrKbMOn0lA0.crl (hash: nR0DjA/vlMpwZd4CqTUPUCrxowaFsrE1K+0lH5feOCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e5:cb:19:a0:68:e3:ec:35:e2:a9:0a:bd:41:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c392637f06dbc4186d95029a92b29b30e9f4940d
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=6c52d7d615cead5d6de277438765f836542c318e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:ae:39:3b:fd:ca:fc:2d:7a:9e:04:f8:89:
                    9e:7e:82:75:3d:28:56:8a:28:29:86:de:6e:e6:50:
                    1e:3f:35:26:af:e9:34:dc:4c:ae:d9:a7:d5:24:d8:
                    60:e8:4f:86:f2:5a:e9:63:96:70:d6:ca:f8:d9:27:
                    24:ab:56:19:33:b6:25:e1:61:db:68:fd:e8:c8:87:
                    02:03:95:4c:91:29:1b:d6:9e:9d:3b:b6:92:25:b5:
                    ec:6b:26:ac:6f:1f:ae:1f:12:93:58:a1:d3:4e:f0:
                    35:3a:ee:2d:6b:e3:67:46:97:77:04:71:83:fd:41:
                    5c:75:61:83:37:60:fc:5a:d3:73:7d:37:0d:7c:82:
                    f0:d1:cc:3c:9e:59:58:43:79:bb:7e:9b:af:21:62:
                    77:2c:cb:d8:d2:32:ef:2e:06:f6:b9:4a:90:5d:4b:
                    04:a3:11:85:c5:4b:41:5b:9a:cc:8e:31:67:04:b6:
                    0f:30:9a:07:dc:ba:e5:8d:51:f2:3a:7a:e2:ae:17:
                    ec:18:14:00:75:b6:2c:31:75:1f:08:0d:f6:21:a7:
                    b2:43:15:d1:64:48:23:c9:c1:e3:40:2b:d4:b2:3d:
                    ec:ab:25:8c:0f:d3:25:82:33:d4:65:9a:47:17:c8:
                    74:e8:ab:96:a5:57:22:76:3c:30:68:1e:96:e7:45:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:52:D7:D6:15:CE:AD:5D:6D:E2:77:43:87:65:F8:36:54:2C:31:8E
            X509v3 Authority Key Identifier:
                keyid:C3:92:63:7F:06:DB:C4:18:6D:95:02:9A:92:B2:9B:30:E9:F4:94:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:82:0c:ff:2a:69:b2:89:a7:2a:8d:ec:32:7e:9a:25:91:
         c8:1c:b9:c6:48:46:97:cf:e6:cf:3b:de:e9:b3:cc:10:d2:95:
         90:2d:ce:5d:2e:89:07:dd:a7:14:56:6f:e4:d0:2e:65:5c:67:
         26:d8:a1:59:42:79:a0:c3:27:e0:71:bd:db:e3:28:11:14:26:
         f2:65:77:ff:a1:ae:79:84:70:09:d1:1b:3c:f9:44:97:2e:8a:
         5d:f3:ac:71:15:aa:b6:98:b6:a6:33:03:36:9c:98:7c:c8:ac:
         1b:f8:aa:5e:f4:f1:ce:d5:3f:4e:b3:ff:e7:46:53:b8:ed:64:
         5c:66:a9:6f:99:9a:f7:c9:f6:91:32:d8:c7:e3:c7:e1:5a:56:
         97:46:5f:98:35:3a:11:44:c5:26:6c:a1:a7:b6:43:04:20:dc:
         a2:78:e2:71:39:1a:4e:4d:08:3b:9b:a7:3c:5f:05:43:09:e8:
         18:78:f5:aa:92:06:7d:3b:1b:01:0f:c0:f7:fc:39:6f:f3:1e:
         fc:9a:a4:95:01:76:22:9b:63:37:2a:9d:45:c9:e5:6b:c5:40:
         45:6a:7c:01:c4:11:ad:13:5e:f7:1d:4b:6e:01:37:aa:8d:bd:
         34:b2:73:7d:4f:9a:b3:a1:88:4d:80:26:a9:51:ca:b8:55:39:
         13:35:fb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----