Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File:                     iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier:          p5TvKBYiDiOVDMXGFK8jdJhOZ/lCH9xykF4zX9iofAg=
Subject key identifier:   58:3D:8C:A6:B6:70:D1:A8:9E:10:8B:4E:BE:E2:AA:67:55:29:02:68
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer:       /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial:       01962E99B40B6E1B8826F8110D801781B9E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number:          04D7
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: MoMFWHDiL1qrnA208kmJx5KQVLjd4u0LhUY8Dk70lYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b4:0b:6e:1b:88:26:f8:11:0d:80:17:81:b9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=583d8ca6b670d1a89e108b4ebee2aa6755290268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:69:6d:64:aa:87:fd:e5:40:a5:ad:41:56:
                    4c:0e:24:db:dc:81:62:30:5b:8f:5e:b8:b7:33:2a:
                    38:c2:d2:c6:89:17:c8:64:ec:9b:6a:79:83:44:fb:
                    2a:d2:96:51:52:5c:ed:61:6a:c7:bb:f0:70:99:20:
                    4c:27:e0:1d:56:18:00:2c:b7:83:20:cc:86:10:27:
                    cb:68:9e:b0:b0:f7:c9:97:9b:69:05:ef:bf:62:1f:
                    9d:6f:ac:1e:83:6f:a8:c9:bf:71:cc:e6:b5:af:25:
                    bb:d6:e6:e4:c2:87:3e:e2:8e:92:77:a2:72:5e:56:
                    fb:26:57:3d:d2:63:bc:ca:81:f9:99:81:38:c0:9b:
                    96:09:e7:e1:78:6a:88:84:f2:fa:62:c8:13:dd:1e:
                    f4:7b:d4:32:8e:bc:fb:15:77:63:b3:33:92:11:d8:
                    94:f6:d4:1c:de:7b:05:7f:e7:a5:f8:cc:00:1a:c5:
                    92:b4:01:c3:ce:4e:f3:e1:85:40:5e:c1:c9:61:90:
                    fe:a3:ed:37:f5:62:eb:9f:d4:d9:b3:1a:f2:4c:1b:
                    38:fd:a0:1a:7d:93:e0:86:e3:ff:43:9a:87:46:aa:
                    5f:c4:eb:e9:fd:a2:b6:fd:d9:b0:09:e9:83:cf:1e:
                    b8:c8:e0:d5:2c:ec:45:45:9a:19:84:0a:35:24:fc:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3D:8C:A6:B6:70:D1:A8:9E:10:8B:4E:BE:E2:AA:67:55:29:02:68
            X509v3 Authority Key Identifier:
                keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ea:67:9a:a4:a3:6e:8c:f2:ca:42:db:16:b5:eb:09:70:f4:
         40:5f:0e:ce:0e:ea:fc:7f:77:cc:b6:f7:59:7d:e2:5e:24:29:
         cd:8e:65:1d:94:65:43:42:db:bc:4a:cf:4a:35:fe:8d:a5:65:
         74:4f:6d:c9:46:87:e5:a8:e1:02:e4:ef:43:cb:9c:2a:2b:bc:
         45:59:9a:a6:97:72:c8:dc:e2:4c:84:c8:df:aa:ae:b1:11:a5:
         bc:c8:64:4b:00:92:1f:9b:a3:89:fa:69:63:11:eb:83:e5:4c:
         8e:af:dd:12:d7:62:4d:3e:92:db:85:be:97:9d:68:19:64:49:
         4d:3f:5b:76:f5:ee:2e:64:52:66:62:1c:f6:d6:05:fa:86:91:
         e0:5e:a1:ff:68:48:9f:18:d8:f7:77:e3:9e:79:22:df:05:9a:
         b5:df:f7:c5:91:06:5e:06:7e:f2:7d:b4:d0:c6:6b:74:f9:2b:
         05:2a:6b:76:11:10:87:2a:e2:51:a2:39:22:34:32:14:12:40:
         d8:36:40:e6:be:f8:be:79:6b:6c:e2:bb:7c:d9:82:a7:1c:c7:
         95:7c:a8:80:bc:ee:4c:a6:19:9c:ce:f7:bd:15:b3:b4:7a:80:
         40:61:b2:0a:b0:6f:56:c2:78:51:1d:ec:e3:01:d6:df:c4:ea:
         52:7b:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----