Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
File:                     _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json)
Hash identifier:          n5f8guGjJq9lO5LQ/uRaTe/0G/zT8ndLRM4M2LmOsV4=
Subject key identifier:   75:62:09:A3:0D:91:C7:6D:D1:B1:55:C9:93:DF:35:5E:3A:8F:E1:77
Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
Certificate issuer:       /CN=ff0732a42328074701142221e3d46a29f296c29c
Certificate serial:       01962E2AC9B76413EBF18851F50A768A277D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
Manifest number:          98
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: wLOqTJ7XSGV0L/iVqqPMAFxtyv0PpSScQev+Ctf1MpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c9:b7:64:13:eb:f1:88:51:f5:0a:76:8a:27:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=756209a30d91c76dd1b155c993df355e3a8fe177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a5:1b:00:c0:f0:ae:20:c9:4e:89:18:df:1d:
                    2c:89:17:9e:72:34:34:13:7b:06:0e:e9:b9:52:01:
                    80:36:92:64:22:ef:53:1b:f2:2d:bc:32:1e:68:7d:
                    cf:69:44:9f:dc:db:dd:88:a6:d0:32:ea:5a:d2:e4:
                    c7:90:99:b5:b4:3e:4c:c8:ab:36:fc:df:57:f5:bb:
                    12:74:fa:40:1a:1c:69:a6:11:ee:d5:8c:03:bd:da:
                    56:0e:3d:70:72:6c:39:dc:e7:e7:6b:4d:83:60:4d:
                    53:cd:78:9d:1b:2f:72:3a:51:0a:b2:ea:8d:84:e0:
                    b1:cb:78:ed:b0:aa:6b:82:47:47:1f:df:c7:ad:a6:
                    0f:cc:fe:fb:d5:5f:61:77:58:5d:60:1c:04:76:34:
                    4a:c0:4b:16:6f:38:c6:52:71:e6:be:90:4d:27:0e:
                    29:2f:ce:f5:c4:6c:82:7e:f2:52:a9:f7:79:2d:fd:
                    7f:10:22:eb:7e:e1:e1:ab:9c:69:f6:ac:d5:98:1f:
                    fd:00:ba:2f:9e:5d:ce:02:86:84:c9:45:f1:f1:e1:
                    d5:a8:31:bb:8c:93:6a:16:92:aa:d9:1d:69:12:c1:
                    a8:a2:b6:25:ca:0b:72:8d:33:56:11:27:82:5e:b9:
                    19:7d:18:af:12:31:06:e7:5e:23:72:7a:16:eb:ee:
                    5a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:62:09:A3:0D:91:C7:6D:D1:B1:55:C9:93:DF:35:5E:3A:8F:E1:77
            X509v3 Authority Key Identifier:
                keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:6f:db:84:66:78:fe:f1:88:f4:b6:98:94:6b:1e:c4:86:
         23:e6:e1:18:1e:a3:d2:ff:29:0c:0f:6f:ed:97:16:b0:9f:ab:
         b8:36:4e:72:ab:63:4c:eb:ef:04:ec:13:b4:12:36:7e:c4:30:
         46:5c:c1:20:53:3a:3a:fc:f3:6a:24:20:c0:49:0e:3a:ce:70:
         65:6c:c0:92:e6:7d:d2:e2:16:c9:e6:4b:a1:d0:31:01:7c:01:
         ea:e8:23:25:f7:09:0c:14:f8:32:fb:67:cc:19:b3:73:4b:62:
         a6:47:50:9b:63:08:e7:a5:0f:60:ef:94:1e:e3:ca:a9:b9:32:
         0d:72:76:43:11:04:a1:6b:66:cd:d0:df:25:11:25:48:35:4c:
         82:e2:61:06:4c:5a:d1:4b:29:cc:cf:2b:cb:d8:61:09:70:9a:
         f3:4d:cb:35:26:d4:3d:e4:31:06:da:bd:00:1b:19:57:4b:0e:
         ad:c9:f8:a4:50:99:97:fd:22:66:d1:9a:36:c9:b0:25:91:31:
         bf:59:21:c9:42:c7:95:b9:16:41:16:e4:b3:f8:72:42:27:0d:
         6e:e2:06:c1:7f:bd:f0:af:b8:ac:a4:57:15:da:67:15:82:63:
         b0:17:fe:57:ca:2f:2b:a4:92:70:55:26:fa:11:64:bf:c5:78:
         11:45:d8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----