Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File:                     wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier:          nWVi/fVp1PLEVYio1Of4/zQPBNpFe4Z8Utg5Avyb6m8=
Subject key identifier:   BA:A5:99:B7:3B:14:85:18:B3:1E:5A:B7:89:CC:C1:94:07:F6:37:ED
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer:       /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial:       01962F3D5102F5A92C1AB05486680419ECC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number:          0E41
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: 8nL1jbogpKiYUqA8WghBaT+RgcQz5kE69Tr66LnUzlM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:51:02:f5:a9:2c:1a:b0:54:86:68:04:19:ec:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=baa599b73b148518b31e5ab789ccc19407f637ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:ea:aa:48:a8:ed:d4:98:e3:a5:1c:76:71:
                    d7:e3:dd:80:10:0f:83:b8:55:89:c2:31:ca:41:c0:
                    5b:6a:57:b0:24:ae:d4:15:f3:72:28:84:77:15:22:
                    8d:da:4c:5f:d2:70:77:c7:86:50:c2:41:6b:01:fe:
                    e4:bb:12:ff:dc:0f:01:4a:67:98:b1:32:47:47:0b:
                    c0:b9:fb:c8:b3:5f:eb:50:5c:14:7f:9d:73:e9:93:
                    a3:14:19:1d:c2:cd:db:2a:fb:83:48:c4:10:bf:8f:
                    cd:7e:f6:24:a8:ee:93:66:62:05:13:7f:d3:33:1c:
                    eb:fa:ae:0e:04:23:bb:41:57:6d:50:0d:68:c0:ce:
                    e4:56:3e:03:09:ca:dc:05:95:ae:84:01:09:11:30:
                    0a:de:bd:a5:f7:ff:d7:af:34:5a:97:e7:5e:77:57:
                    ca:cd:3d:23:cc:3a:4c:65:ee:ad:5d:dd:d5:7d:2c:
                    65:bf:c2:85:96:d8:13:30:93:1e:80:b9:ad:50:a3:
                    3d:94:52:55:27:3c:c0:21:ef:0f:1e:43:0f:64:d3:
                    1f:31:10:ff:27:89:76:19:4b:a8:d1:1e:35:31:97:
                    5a:cf:e3:9b:b4:4a:2d:93:1a:36:98:d1:b4:da:0b:
                    4d:a5:b0:a9:21:09:49:9c:df:0b:20:70:bf:66:53:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A5:99:B7:3B:14:85:18:B3:1E:5A:B7:89:CC:C1:94:07:F6:37:ED
            X509v3 Authority Key Identifier:
                keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f6:5e:23:5f:6e:c5:a4:45:4c:39:bd:c3:e5:62:2f:30:74:
         d3:f5:66:a1:b0:dc:1d:07:f5:da:fa:2c:a1:8f:ae:23:94:da:
         14:2e:04:52:9e:d1:c3:55:b9:9d:48:33:3c:2d:d7:5b:24:9c:
         95:14:6b:ad:8e:27:37:cc:5c:18:1a:03:c7:65:2d:9a:9d:07:
         98:c2:58:c1:30:81:83:6b:c2:ca:e2:c9:9d:23:1a:16:61:ce:
         ad:c9:ca:29:24:89:13:6f:27:a6:ca:bd:97:73:93:07:55:b3:
         12:68:d2:db:c4:d6:87:ab:a0:05:21:d1:5f:97:d5:b3:7e:04:
         78:4e:68:15:ca:a3:67:e9:63:4a:0b:31:db:57:15:6b:33:d6:
         ff:16:7a:6d:e3:12:34:b4:35:5e:20:88:8d:16:0b:94:13:c8:
         ee:b5:66:14:95:d5:47:d3:5d:bf:e9:0d:e1:e2:7f:1c:1b:d5:
         f5:e7:7c:0f:a0:05:41:6f:eb:c4:33:df:5a:53:5f:23:b7:69:
         b7:2f:23:3f:61:7d:d4:39:08:1d:a0:01:1a:af:ab:a1:d4:33:
         91:b7:63:03:b5:48:8e:9f:64:56:01:9c:08:06:0e:da:c0:fa:
         bf:46:94:15:fb:af:cd:ae:9c:8c:a1:13:d0:17:e7:4e:86:f9:
         22:71:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----