Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File:                     W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier:          w5/Sz97X9ULKLJSq2OuOeM0NUiAnYmqSAsDA9KU0h/M=
Subject key identifier:   F8:EC:41:14:AC:05:E2:70:D2:EA:18:5A:F4:BA:DB:30:29:5A:F6:65
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer:       /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial:       01962E9959934ABBE0ABE4124E19A707D032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number:          0136
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: xFtTcuFS96kdyudB5qKxqtjEMsf+oUzrZOz3WzY22w4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:59:93:4a:bb:e0:ab:e4:12:4e:19:a7:07:d0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=f8ec4114ac05e270d2ea185af4badb30295af665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:07:0f:b3:60:00:c5:33:22:37:0f:2c:61:
                    34:5b:cf:ad:7d:80:4e:d8:15:e4:2e:d2:d2:50:0c:
                    28:1d:95:ae:e3:19:2f:d2:67:51:d1:ca:fd:db:5b:
                    85:5f:03:61:24:19:8f:44:39:44:86:38:31:f8:ff:
                    b1:5f:a3:9f:db:a4:f3:76:5c:86:f4:15:83:54:a2:
                    71:c0:55:0f:ff:a1:4c:92:f5:d3:98:d3:9e:49:f9:
                    0a:da:60:1e:b7:03:73:aa:57:a4:be:f0:92:3f:80:
                    23:8c:2e:79:66:76:3f:19:7c:20:2a:a5:1a:bd:f6:
                    88:1f:61:dd:2d:25:3d:4c:e4:ee:96:7b:6c:86:73:
                    e4:c5:9c:32:42:e9:f7:a3:99:c6:10:6e:b0:7c:cc:
                    b9:c2:2f:63:83:b6:2d:3f:e3:ba:84:ae:73:d6:c7:
                    66:b4:af:ee:71:9d:c0:d2:8a:21:07:52:1e:7e:ad:
                    2b:0a:22:0c:26:0a:c7:b1:89:db:7a:13:4d:e4:51:
                    f9:f4:fc:8a:41:fa:c0:ad:c0:ed:6b:9f:63:e5:0e:
                    0b:f2:e2:ac:0b:78:6c:cf:08:83:1f:81:d4:d6:6f:
                    ee:18:9c:1f:cf:f3:e3:c0:7e:ef:27:c1:29:1d:30:
                    5e:83:b3:96:c3:91:90:b0:72:85:78:19:a7:9f:b8:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EC:41:14:AC:05:E2:70:D2:EA:18:5A:F4:BA:DB:30:29:5A:F6:65
            X509v3 Authority Key Identifier:
                keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f5:05:19:08:7c:2b:f5:96:f1:71:b1:74:ad:5f:2f:46:22:
         b9:77:65:60:90:b0:ee:ff:1b:fa:b0:0a:cd:9e:37:f8:6e:d1:
         96:b6:8f:ae:e6:60:f5:e0:33:7f:68:4f:5b:37:bf:52:2c:11:
         6a:ec:56:21:4f:d2:56:7a:0f:75:6a:f7:98:d9:ef:bb:f1:d1:
         cd:43:0b:86:c3:e7:43:3d:b8:47:38:d4:91:76:8f:ce:94:fd:
         c9:a6:05:11:47:85:d4:e6:e3:7c:0a:b0:f7:28:28:da:65:e1:
         07:40:aa:e3:7a:cf:61:9e:fd:2d:f9:41:dd:65:9c:36:bb:8a:
         ee:7d:05:a0:67:6b:1b:8e:da:1a:bf:e3:a4:7f:d7:ac:89:1f:
         4b:3d:70:f6:81:94:f6:b2:b4:2e:b4:1f:7a:77:81:66:d4:66:
         df:94:ed:45:1e:3c:35:cc:33:93:7d:13:db:b7:cf:6a:2e:63:
         49:3c:cb:44:7d:a8:64:c4:53:fd:a0:ec:40:77:69:61:36:b0:
         64:f6:36:72:e9:50:bd:f2:9e:4a:43:36:38:ed:96:22:ea:5c:
         fb:f6:9a:ac:a5:d4:63:6f:cb:5a:7d:dc:38:d8:5e:c4:64:21:
         64:3a:56:67:ca:11:89:99:0c:6e:30:0e:12:fb:2e:81:29:17:
         9b:85:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----