Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File:                     wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier:          7Fog5s3n81lz7RRDTJJSmGwcvC1Ngq3hYbOPIVuveRw=
Subject key identifier:   F5:F5:F9:D5:AD:76:15:6C:8A:90:A0:99:72:E3:D6:A0:FE:F4:99:E5
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer:       /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial:       01962E997D1DB5036A10208373E39479AEF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: rVAjmN6168Vd5rUwrPctDqzVUQCHd2+fJLVUuMbRZXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7d:1d:b5:03:6a:10:20:83:73:e3:94:79:ae:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=f5f5f9d5ad76156c8a90a09972e3d6a0fef499e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:b4:a0:06:1a:0a:a0:b6:79:0d:70:8e:1a:
                    d3:da:27:6c:99:e9:4c:26:74:4d:78:dd:9b:1c:9d:
                    bc:97:d3:69:1c:7f:4f:51:2e:b4:af:85:ef:a5:b3:
                    a6:77:fc:e9:a3:0e:5d:89:7c:f9:a4:24:90:98:b8:
                    b8:4f:87:e3:02:d8:06:63:a5:bc:67:d6:74:d1:ab:
                    16:51:de:81:64:74:e0:7d:78:83:5b:29:9c:bf:7e:
                    b6:33:fd:07:7e:4d:cf:f4:3e:af:18:86:76:e5:fb:
                    f3:8d:6b:28:62:06:e6:35:e1:ce:df:ac:3f:c6:9b:
                    05:f2:f0:16:66:d1:ed:2d:55:44:7d:a6:2c:c9:0b:
                    7a:e7:2f:1e:36:2e:ac:1a:84:20:df:17:3f:ea:2c:
                    25:2d:5b:30:93:b9:a5:f5:7c:11:fc:43:d5:a5:90:
                    e3:94:fa:6d:88:05:c2:95:27:04:6a:08:74:67:b8:
                    a7:45:aa:58:08:f3:fc:b0:64:00:11:cd:df:eb:ba:
                    b4:40:0c:c2:8e:10:1e:5d:c3:06:ab:54:e9:76:57:
                    e7:b5:85:58:9f:bc:b8:8c:f9:0e:2a:05:11:fc:83:
                    b7:ec:3b:18:6c:07:5c:d8:c8:00:97:6d:ee:f4:77:
                    92:b0:e5:55:7c:8d:bf:71:1a:66:ff:d5:52:c1:11:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F5:F9:D5:AD:76:15:6C:8A:90:A0:99:72:E3:D6:A0:FE:F4:99:E5
            X509v3 Authority Key Identifier:
                keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:92:e0:ac:54:00:04:40:d2:01:99:75:d1:f4:71:9b:37:7f:
         ff:e7:fa:a8:00:1b:b2:77:f9:58:78:a4:aa:d3:50:77:0d:5d:
         38:04:a5:ee:e6:49:5c:f2:c3:60:48:54:ea:fd:86:e6:e9:53:
         ee:6a:75:38:9c:69:b4:03:f3:ad:9e:c2:3f:33:98:a7:80:e7:
         0b:ab:33:38:ae:27:88:f6:6a:70:05:9c:c2:6e:30:91:73:44:
         e9:61:1a:6c:25:c7:2c:68:7d:1d:6b:57:ca:55:fc:02:d6:b3:
         41:4a:00:c3:5d:44:37:77:9b:d6:9b:75:23:d5:f1:bd:59:11:
         44:42:06:94:64:fd:d2:7f:5d:38:6f:46:34:3a:8e:74:40:c8:
         c2:fa:9d:53:d8:80:2c:14:ed:ba:b3:fa:b2:75:ca:60:fb:d8:
         42:4c:e4:e5:f8:10:ea:d6:ba:c5:77:4b:0a:3f:f4:84:10:ff:
         71:84:49:b2:a2:b5:86:9a:14:21:19:e4:52:7d:78:66:8c:1b:
         8f:9f:e4:05:70:a0:00:68:a4:5f:5b:51:47:00:93:37:8d:02:
         83:b8:0f:2e:74:58:0c:70:01:87:12:8b:66:a8:c1:61:1a:87:
         63:ba:ea:4a:79:d7:d6:ef:58:ea:67:6c:57:0e:68:3f:59:c5:
         61:18:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----