Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File:                     0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier:          5U/Ih2WCAaVohWy9MEiBMZaXZSv5PQh68CAX9UNaKjM=
Subject key identifier:   50:DE:E5:93:AA:F9:CB:2F:30:CD:8B:DA:36:55:0A:19:DC:FB:A8:18
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer:       /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial:       01962F74CBC87A09BFD29775222B2E9251FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number:          11A8
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: AFuMdvaswWAPeB2yNv5CMhh4cOKvpJxnKpb45u9tGeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cb:c8:7a:09:bf:d2:97:75:22:2b:2e:92:51:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=50dee593aaf9cb2f30cd8bda36550a19dcfba818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:93:44:58:95:91:ef:c4:9e:c2:98:34:0a:
                    ff:e3:aa:a1:1c:39:1b:bc:5d:a0:fa:52:b5:a7:be:
                    bb:0a:c6:dd:6c:77:26:f8:bc:45:a3:00:2b:ee:d8:
                    77:24:5b:1e:6c:46:d9:f8:4a:4f:8d:73:a2:64:ce:
                    ac:35:77:83:bd:bd:6a:ed:ff:4a:bf:1d:74:86:dd:
                    d9:ac:16:40:a1:99:49:84:94:dc:d9:9e:9f:7d:ab:
                    2f:5f:38:ed:b6:ef:78:6d:08:11:6d:55:0f:0e:0c:
                    43:fd:f8:dd:0b:a7:ac:4d:38:db:ed:42:64:40:82:
                    da:e8:70:a2:0d:ea:85:4a:fa:6b:3a:7d:06:89:bd:
                    40:5d:48:24:33:b6:9f:d8:29:9d:8c:00:32:ca:89:
                    a6:29:3f:14:ca:83:0e:d1:f4:05:8f:b6:18:77:de:
                    26:0d:40:fa:01:63:51:68:62:13:8b:08:52:cf:ef:
                    6b:7a:8b:91:86:46:58:9d:9f:0e:a4:46:be:de:eb:
                    2f:fc:1a:ad:21:df:55:91:6e:1d:81:99:09:bd:91:
                    ee:a8:c4:51:cd:28:fc:b5:a8:1e:98:d6:ad:67:d6:
                    0c:ec:ee:44:9d:d4:c3:9d:b9:37:05:39:48:18:0a:
                    ba:08:81:aa:57:10:b6:82:8f:fb:0c:77:3a:05:87:
                    33:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DE:E5:93:AA:F9:CB:2F:30:CD:8B:DA:36:55:0A:19:DC:FB:A8:18
            X509v3 Authority Key Identifier:
                keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b7:9c:4e:59:78:4f:73:04:01:d5:e0:0f:47:20:de:51:81:
         fb:4a:ac:db:7c:0c:40:08:8d:f2:43:1a:a5:51:21:a1:97:86:
         6d:5c:3d:73:1b:a2:4b:70:5d:01:d7:81:b8:be:9c:5e:3c:62:
         21:61:ca:c7:c2:f4:05:49:3c:cc:3b:86:81:1b:4e:f5:2e:c7:
         33:10:85:a6:0d:46:a0:14:c8:cb:11:c1:d6:13:79:14:bb:6d:
         44:a1:63:52:91:79:e9:3a:14:94:52:fe:40:d8:01:45:7a:92:
         66:65:b1:7e:0d:50:d8:bb:11:5a:6f:d9:7c:6f:3c:5c:77:23:
         6b:77:9e:e4:ca:46:52:53:37:2f:1a:31:ae:cb:57:05:5c:55:
         ea:28:c9:f2:fd:e9:87:7b:32:31:7f:12:08:fd:e2:6c:64:5e:
         ac:4c:94:8b:c4:32:98:a0:28:e3:dd:1c:ce:9a:a2:98:57:38:
         21:25:3f:aa:d2:a3:c3:98:91:d7:9f:37:ea:43:e4:56:be:3f:
         32:cb:2c:b1:50:73:78:3f:cd:90:eb:bf:65:a0:7c:b0:f4:a5:
         64:1d:b8:70:e0:3a:35:1d:f1:af:0f:60:5f:5f:0e:31:bd:4f:
         04:d4:ff:e3:49:9f:cd:c6:db:a7:80:18:38:34:43:ef:32:ed:
         41:95:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----