Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
File:                     1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json)
Hash identifier:          3yGTjuERk+GWFe3+pBk6l5D8S99EAiQkBNmPI7dQeq4=
Subject key identifier:   BF:FF:A0:A5:A7:96:41:60:28:7E:C0:FB:FE:BC:B6:CE:5D:2D:37:5F
Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Certificate issuer:       /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Certificate serial:       01962DF3CE78A8F0CF76CFC510166FCD3D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: cBANm/dKgnL0lF8GJUnkwOPA/du4u/A4JI7Swyi72Xw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ce:78:a8:f0:cf:76:cf:c5:10:16:6f:cd:3d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=bfffa0a5a7964160287ec0fbfebcb6ce5d2d375f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:56:f0:a1:54:cc:8d:6e:54:37:90:f1:15:
                    4e:31:10:c4:9d:2c:11:b6:4b:33:fa:c7:2e:11:de:
                    dd:1a:a3:a1:02:7b:db:8e:08:67:41:c5:4e:dc:50:
                    8c:89:25:a8:52:45:56:a4:56:8d:28:ac:e3:7d:10:
                    ea:2e:16:13:61:09:70:34:70:e2:32:69:b4:64:fd:
                    32:4e:06:f7:a8:59:f8:31:7d:6a:e2:b6:05:9d:40:
                    41:be:79:02:cd:aa:1b:89:c1:0f:b6:e2:89:4b:52:
                    3b:4e:06:d9:66:92:ad:42:ac:31:d1:95:ad:89:dc:
                    dc:fe:ea:51:f4:7b:34:9d:c4:ba:98:a2:cb:4e:da:
                    9c:e3:35:a6:41:8d:96:34:74:03:75:48:49:78:d7:
                    d6:00:d8:0c:e5:fc:ba:4d:0b:97:18:c8:f9:0a:de:
                    37:5f:47:91:53:b3:59:86:e6:5b:0b:f3:4a:87:de:
                    df:d6:f4:f1:9e:e0:a4:09:76:d9:cb:fd:3c:a1:f7:
                    db:07:e1:b3:6a:a4:ed:12:ac:2f:46:82:86:63:a8:
                    7f:17:c4:1f:ca:72:37:47:cb:53:1c:ab:ae:f9:0a:
                    61:32:4e:8a:af:3a:81:26:8b:be:9f:5b:f7:a3:be:
                    b7:8d:9d:13:5f:32:7c:ff:48:1d:4d:1e:22:e2:6d:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FF:A0:A5:A7:96:41:60:28:7E:C0:FB:FE:BC:B6:CE:5D:2D:37:5F
            X509v3 Authority Key Identifier:
                keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d3:19:0b:33:d1:5b:5d:3d:90:27:63:8c:df:c1:31:ec:66:
         2e:ab:74:c2:99:04:5e:81:b1:09:01:89:81:b6:fa:90:5a:dd:
         15:12:6e:18:f4:18:d9:58:25:c3:b6:aa:c5:af:20:93:ff:52:
         5a:2a:d6:72:67:4b:86:ea:db:00:ec:b9:37:33:a5:b2:22:de:
         59:79:97:6e:57:3e:63:9a:d7:df:9d:3c:9c:3e:f9:ec:79:eb:
         01:ed:5d:e2:d1:98:2e:84:43:70:ee:ca:e9:42:68:27:d3:23:
         cc:cc:a6:2b:b2:f1:d2:5d:20:80:5c:77:ba:e2:bb:e3:e0:aa:
         16:21:54:80:70:16:86:8a:c3:32:56:cc:2e:68:06:e9:db:41:
         a3:c9:30:56:f2:77:01:54:98:86:33:f0:79:37:a2:42:90:23:
         6d:1a:cd:63:c3:c5:15:b2:de:14:97:90:8d:09:e5:88:76:03:
         b5:ce:19:11:1b:92:7f:5b:97:bc:e3:33:08:69:b1:f7:91:f2:
         3c:40:94:cc:9d:af:0c:74:15:38:d0:67:28:9c:f4:3d:f3:64:
         bb:0f:37:4d:34:32:d5:e7:51:9c:05:71:3b:f8:52:1e:e4:de:
         e8:45:4b:2c:ab:cd:d2:59:23:b3:14:24:26:f1:40:99:7f:f3:
         84:23:54:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----