Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6979b5-5a93-4233-9abc-09a368e693ff/1/wTP57cPI4o8RNVPC8n1G2bK8lzY.mft
File:                     wTP57cPI4o8RNVPC8n1G2bK8lzY.mft (raw, json)
Hash identifier:          X6rAsdFnbjFDqupkZQnxWAayw8RBTFq48l3dgNkB20I=
Subject key identifier:   11:A5:30:9A:F8:95:A0:FF:4A:20:51:B9:83:8E:64:59:E6:F7:F3:21
Authority key identifier: C1:33:F9:ED:C3:C8:E2:8F:11:35:53:C2:F2:7D:46:D9:B2:BC:97:36
Certificate issuer:       /CN=c133f9edc3c8e28f113553c2f27d46d9b2bc9736
Certificate serial:       01962E98765E1641367E083686A7AEBE016D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTP57cPI4o8RNVPC8n1G2bK8lzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6979b5-5a93-4233-9abc-09a368e693ff/1/wTP57cPI4o8RNVPC8n1G2bK8lzY.mft
Manifest number:          06ED
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: wTP57cPI4o8RNVPC8n1G2bK8lzY.crl (hash: PAI0l5LhBzC8u++4O/O2T+iP2gXAYa//+SfkfFuJlYo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:76:5e:16:41:36:7e:08:36:86:a7:ae:be:01:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c133f9edc3c8e28f113553c2f27d46d9b2bc9736
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=11a5309af895a0ff4a2051b9838e6459e6f7f321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e1:3f:0c:ce:b0:b6:26:c8:b7:fd:42:bd:10:
                    86:cc:20:80:76:24:c8:75:dd:60:c6:8f:f1:70:c3:
                    92:14:73:f2:b2:a1:2d:97:c9:1b:17:dc:15:07:72:
                    e4:ea:fb:01:fb:61:11:4a:21:8a:fd:9c:2f:b7:cd:
                    ce:3f:eb:29:df:42:25:3f:94:cd:51:b1:38:0b:96:
                    a7:a1:39:29:2a:86:9d:29:f6:63:c7:4c:af:2f:8a:
                    64:d9:67:78:1c:00:9c:c0:5b:81:48:cb:36:e3:f8:
                    86:45:27:80:cc:4a:4e:8b:1c:2f:26:81:10:a7:5f:
                    be:ae:a2:51:49:23:45:e1:e4:51:19:6e:4e:31:f8:
                    2b:c1:4d:88:6e:c7:50:1c:83:ce:90:a3:7c:6b:aa:
                    41:d1:55:0c:20:a9:88:96:f3:f8:21:9d:fe:c7:fc:
                    3e:8f:c9:2b:02:08:11:a8:a0:bc:73:8e:13:ab:49:
                    68:8e:ef:57:b0:fa:c9:12:e7:ca:63:68:cf:db:05:
                    ee:a6:fa:31:dd:30:94:00:5b:08:6f:5e:aa:31:42:
                    87:5d:9e:a1:31:6a:3d:f5:55:07:3d:3e:77:f7:42:
                    d8:27:42:03:9d:e5:41:be:13:ea:5a:cd:30:70:75:
                    76:a3:ae:b0:40:67:96:1d:85:1c:e4:c2:cd:b4:b8:
                    c5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A5:30:9A:F8:95:A0:FF:4A:20:51:B9:83:8E:64:59:E6:F7:F3:21
            X509v3 Authority Key Identifier:
                keyid:C1:33:F9:ED:C3:C8:E2:8F:11:35:53:C2:F2:7D:46:D9:B2:BC:97:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTP57cPI4o8RNVPC8n1G2bK8lzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6979b5-5a93-4233-9abc-09a368e693ff/1/wTP57cPI4o8RNVPC8n1G2bK8lzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6979b5-5a93-4233-9abc-09a368e693ff/1/wTP57cPI4o8RNVPC8n1G2bK8lzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f3:88:da:81:02:8a:df:e1:e0:30:5a:40:ae:1e:ba:f1:f6:
         b4:7e:f8:9a:2b:c5:c8:bd:16:9a:a1:51:2c:8f:b9:e2:64:b2:
         64:5d:0c:8a:75:07:81:7d:ed:04:30:12:bb:cf:6f:49:4e:14:
         76:72:ba:1e:ec:2d:11:72:ce:a6:bf:23:da:32:07:ac:5a:31:
         c4:1f:a8:3c:c9:d9:1d:3d:7c:b1:f3:dd:6d:c0:a0:37:1d:72:
         51:3e:de:bd:a1:28:20:66:cc:e7:6c:8d:b7:99:ff:20:29:85:
         32:95:56:22:30:db:97:4e:87:ce:a3:78:25:eb:f4:9f:b5:1d:
         53:ec:e2:0a:29:1c:45:0e:fb:1a:3a:a8:63:e3:cf:d0:3f:10:
         a8:c4:ac:9e:d0:1d:75:91:7b:5d:c3:e8:f5:ea:59:f7:c4:97:
         0f:e1:d0:04:80:dc:3e:2d:9b:25:69:76:25:8c:b5:c5:63:ee:
         f8:06:4e:47:fd:86:e6:e2:af:d6:82:50:b1:ed:a4:10:23:01:
         a0:5f:55:8b:97:72:c3:c3:31:9f:e9:54:bc:07:c6:db:88:51:
         4e:00:a8:04:d2:02:a2:99:56:7a:13:76:d5:0e:46:9c:40:ae:
         5d:e5:85:e1:12:03:56:80:f3:b5:2e:21:f4:f4:9b:38:ff:08:
         3a:aa:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----