Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
File:                     MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json)
Hash identifier:          zrELfkrNG+ja4i57/wfvzygdqqmgcV+a0vhH//Fr1KE=
Subject key identifier:   87:58:6E:3E:53:87:36:EC:B4:45:4A:73:92:1B:03:10:4D:8A:5A:4A
Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
Certificate issuer:       /CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Certificate serial:       01962E99726428CC82CE70108EF73B9AA9C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
Manifest number:          144A
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: 2nBFBOBOko7rbPo6NrRT/u2ARNW182vSZczQBnOGqlk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:72:64:28:cc:82:ce:70:10:8e:f7:3b:9a:a9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=87586e3e538736ecb4454a73921b03104d8a5a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:91:20:60:33:16:1d:27:02:5a:af:4d:ef:
                    76:4f:68:f0:56:6b:24:5f:81:5b:34:00:d4:f5:93:
                    bc:c3:fc:99:57:ab:59:f9:74:d7:6a:50:b2:95:cf:
                    bc:ab:95:bc:6c:8d:c8:a3:63:8d:c3:4d:12:08:ce:
                    51:69:61:87:83:33:71:e5:ed:87:e7:fe:d9:24:dc:
                    e9:2d:f3:f5:e2:dc:89:17:87:10:d0:85:b4:0d:14:
                    15:a4:44:3a:da:48:29:f7:36:bf:28:14:91:c2:86:
                    b5:80:45:b3:35:90:7c:e9:8d:f6:eb:55:07:51:99:
                    c5:69:58:9e:fc:8d:60:8f:7c:18:17:e7:c4:83:7e:
                    ec:4f:22:df:b1:fd:30:07:db:30:40:ab:c0:4f:4d:
                    98:4b:52:af:5d:46:d6:17:9e:56:3a:17:7e:fe:bf:
                    2d:ba:5e:00:50:ac:0f:96:34:2c:06:bf:0b:34:b0:
                    05:cc:41:c1:04:a4:1f:50:55:38:cf:8e:2b:bc:bf:
                    b7:63:93:14:78:4d:5a:44:ad:60:2e:22:3d:10:57:
                    c3:87:af:bd:c5:94:e1:fa:0d:9e:c9:ff:dd:74:74:
                    ff:97:dd:d8:22:6c:9d:69:26:da:0b:2f:e4:65:d7:
                    0b:58:e6:49:05:80:4e:03:92:3b:84:f7:cb:63:7d:
                    9e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:58:6E:3E:53:87:36:EC:B4:45:4A:73:92:1B:03:10:4D:8A:5A:4A
            X509v3 Authority Key Identifier:
                keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7e:97:af:23:1d:5b:19:b4:db:0d:e2:3e:36:1f:37:f5:3f:
         ce:19:32:36:93:c0:10:e9:a1:7f:fe:0d:00:13:d2:28:64:6d:
         67:24:9b:68:8c:95:1c:b6:2c:26:4c:b3:21:9a:ed:88:34:92:
         f7:89:91:51:59:71:b3:37:a0:54:48:7c:f4:b5:13:7b:bf:0d:
         61:e3:54:a4:73:de:ff:09:c6:82:3e:7b:9d:68:3f:dd:05:3f:
         8d:21:98:92:c1:b8:bb:a3:e0:9d:37:3d:4f:ff:1f:d5:90:8a:
         f7:db:1d:4b:ff:57:cc:45:26:88:6c:34:f0:a0:bd:db:10:6a:
         02:95:18:16:20:8e:4a:78:a8:e3:48:69:81:bc:87:b6:7b:05:
         9a:bb:86:f7:4d:3e:0f:9e:d7:30:b0:74:40:7b:94:ed:cc:61:
         31:9f:ac:19:dc:90:15:49:b1:19:94:18:ee:5e:33:de:e2:5c:
         94:87:39:78:77:d4:cf:b9:78:79:2f:05:37:e0:d7:49:c8:47:
         68:57:0c:22:db:5a:fc:2d:0d:17:c1:1e:7e:0f:b7:89:3b:ef:
         ec:e3:2d:2a:ee:13:42:90:bc:7d:2f:76:fc:11:28:11:42:a2:
         f4:01:15:22:77:4f:cd:73:89:eb:15:45:07:0a:15:56:94:39:
         af:51:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----