Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
File:                     wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft (raw, json)
Hash identifier:          WujEjK2YOeljg3kX/REBMWUREexJ3P0dOPmlWNu+alM=
Subject key identifier:   9F:8C:59:35:3B:69:6D:B1:8C:D8:94:74:97:C8:A2:2D:0B:E0:81:95
Authority key identifier: C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D
Certificate issuer:       /CN=c12c072c35909d525322b027586bacfad119f17d
Certificate serial:       01962ECFE4C582B39FA39C911ED1141DC3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
Manifest number:          030C
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl (hash: 3X+dcuqZyuJjcgOqGKxBDOseDFhsrNxYhPGr18DvcdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e4:c5:82:b3:9f:a3:9c:91:1e:d1:14:1d:c3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c12c072c35909d525322b027586bacfad119f17d
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=9f8c59353b696db18cd8947497c8a22d0be08195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:ed:e3:96:7d:34:6d:58:a7:24:2b:04:2a:
                    b3:67:e6:40:a6:ac:b6:c7:6b:89:e2:89:c6:e3:a3:
                    b9:48:ba:9e:85:bd:82:82:d1:00:7e:81:70:b5:f9:
                    7e:4d:24:2c:2c:f4:44:8b:77:6c:1a:a0:ea:80:9a:
                    38:4c:ab:ed:56:47:fa:db:43:08:15:04:3f:2f:d5:
                    35:62:29:d0:5b:9a:97:b0:21:d1:eb:de:70:9b:f1:
                    c6:89:55:20:bd:7f:86:96:4d:11:21:17:66:55:e7:
                    cc:47:ad:3e:d1:4a:5d:06:39:a3:42:b3:06:8f:f9:
                    57:9d:cb:49:60:de:92:d8:22:64:e4:c2:12:a2:df:
                    91:78:8c:d7:f9:ce:af:c3:35:48:41:af:95:21:74:
                    3b:5d:45:90:15:e2:26:8e:18:69:8e:e3:ca:92:0d:
                    dd:18:27:ab:2c:34:33:ad:cf:56:ba:22:1e:e4:d5:
                    66:50:6e:7e:de:9e:37:78:ed:96:70:16:5c:9f:03:
                    02:1f:89:75:9d:62:c2:cd:d7:a3:54:44:1b:22:15:
                    b0:41:ee:2f:69:df:35:8a:fa:ba:79:cb:50:b6:45:
                    de:42:03:2e:57:79:ed:b5:ef:76:38:63:90:36:40:
                    78:b7:d0:71:56:b5:df:d1:fd:6d:c0:5f:a0:ed:cc:
                    ab:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:59:35:3B:69:6D:B1:8C:D8:94:74:97:C8:A2:2D:0B:E0:81:95
            X509v3 Authority Key Identifier:
                keyid:C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:79:29:1c:23:a7:6e:92:96:f2:6c:21:16:8f:8e:29:14:1d:
         f6:96:9f:ff:30:84:18:42:e2:3d:b8:41:2f:b5:aa:cf:03:95:
         5a:b8:5b:9b:31:a2:86:8c:ca:c0:b0:2d:e2:f8:e7:b6:c4:99:
         49:23:01:b4:ba:e0:eb:51:97:98:48:0b:7f:70:eb:2f:ee:c8:
         61:31:50:2f:5e:61:73:0f:48:a6:48:bb:f8:e1:60:28:5c:0b:
         57:ee:bc:c2:90:84:25:b3:0b:10:db:84:9e:d9:ba:ce:8f:3d:
         11:5a:14:d6:43:f6:22:6e:55:d3:da:65:c4:63:4c:53:0d:17:
         e9:9b:fc:49:f2:68:73:4a:bf:a1:82:45:c9:9f:97:4f:ae:a0:
         0a:c0:0d:44:66:dc:bb:84:31:83:95:47:ae:9e:17:8b:79:82:
         3b:78:aa:d3:32:ee:76:6d:71:85:7f:76:10:43:c0:a5:e4:ad:
         22:32:47:f8:06:f9:e1:e2:26:64:70:3c:8d:ed:96:81:97:a9:
         e9:79:7b:03:a3:e5:9a:e6:11:24:66:cf:e1:f0:48:2b:02:4c:
         46:00:c7:d3:12:03:13:65:83:29:f1:25:90:1c:4e:81:59:b3:
         b7:d5:05:ec:6f:be:44:33:4c:29:fb:6e:92:d8:67:2e:66:04:
         bf:a5:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----