Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File:                     wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier:          y+vVT6wZ+LOFjarVdqpsEZ10Yhw/MSvCF/qndZxjU9I=
Subject key identifier:   9A:95:13:C9:8D:7A:68:CE:69:9C:F5:4C:6C:FE:EB:F4:52:A2:9F:96
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer:       /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial:       01962E99AB8EFA827E9D79138A1DECFECCA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number:          0504
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: VlxFWJOWqwjuoSHTRvrYjkUoB1Q791sOb/3XhXRU6L8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ab:8e:fa:82:7e:9d:79:13:8a:1d:ec:fe:cc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=9a9513c98d7a68ce699cf54c6cfeebf452a29f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b7:1d:63:65:0a:24:bd:91:94:73:c2:4a:93:
                    c5:c5:63:10:2a:47:b8:05:50:90:0a:37:5d:26:45:
                    0f:9f:f1:de:ca:0d:dc:e1:9a:41:0d:96:e6:9d:ab:
                    cf:21:5a:a9:d8:91:bd:1b:88:d9:63:1d:e8:99:e8:
                    8a:47:db:e0:aa:77:fb:ea:1a:a8:09:79:67:56:fd:
                    74:d9:ab:21:a3:d6:10:4a:8f:ec:c3:96:06:da:7a:
                    2c:62:4b:03:5d:2d:12:8c:30:05:09:bb:c3:5a:04:
                    21:2e:6f:58:d0:4b:00:c0:3b:1a:53:eb:5f:6f:fe:
                    56:24:8f:1a:85:9a:41:8f:ea:f0:fe:93:2c:7a:ce:
                    54:dc:90:2e:81:6d:93:c7:ac:ce:a2:20:73:f5:d0:
                    11:23:c0:ca:de:92:f1:14:94:88:ab:c1:0a:b1:04:
                    f6:9a:20:10:d6:a8:cd:3b:20:39:07:9a:d7:ab:4c:
                    e9:49:98:89:93:81:ea:34:44:70:53:99:f9:fc:9e:
                    ce:fb:f6:91:2c:5e:72:ad:9c:45:49:c3:62:2c:c5:
                    50:d4:4d:ef:ca:ac:de:12:52:64:f2:78:22:a8:d0:
                    11:bf:5f:25:f1:ed:6f:b8:b4:69:0c:38:dc:cf:f3:
                    6f:b0:50:03:6e:79:67:ac:d8:98:b4:45:41:2c:e3:
                    50:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:95:13:C9:8D:7A:68:CE:69:9C:F5:4C:6C:FE:EB:F4:52:A2:9F:96
            X509v3 Authority Key Identifier:
                keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:44:6f:79:80:bf:62:5b:f9:03:21:c9:6e:83:80:e9:f2:f8:
         0a:91:ff:0f:99:93:06:35:6d:d6:e4:67:e0:36:28:e3:66:a0:
         3a:13:5e:b3:77:eb:ff:3e:58:61:da:18:37:2e:39:33:19:a3:
         c8:a4:9e:83:f5:3c:6c:4d:ba:cc:c5:cb:0b:14:f3:67:9e:12:
         5f:cc:33:96:32:43:06:75:7d:ff:ef:fa:79:d9:e0:8d:6b:7e:
         e2:75:2f:2b:c5:1c:ae:95:76:b3:0d:49:9a:6e:3f:9e:70:5b:
         48:5d:f1:7f:53:ff:03:cf:ce:59:ab:34:77:cd:93:bd:7a:ca:
         31:6e:0a:56:19:c4:df:6e:14:84:91:c7:00:f0:f0:92:8e:bb:
         85:14:ac:99:ed:0a:b8:e9:e3:77:19:05:df:77:95:73:52:d1:
         a5:df:7b:04:72:a7:83:c4:22:a5:22:b6:67:80:ce:4c:66:43:
         10:dd:a3:de:fc:c6:6f:ee:4f:b1:bf:f1:2c:0b:00:56:e1:94:
         bd:19:b4:f6:59:65:b7:02:39:ce:a9:da:b3:73:4c:51:20:38:
         e0:69:aa:a3:be:7b:dd:e5:50:91:68:c0:59:81:ec:de:35:c9:
         1b:9d:59:25:68:ce:e7:dd:73:1c:48:dc:76:5e:63:f2:48:38:
         57:98:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----