Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File:                     pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier:          cUBaebeS/XNDxMpAdmxdiojmxKu5NI1SiiArRZ293cM=
Subject key identifier:   07:8D:59:15:23:EA:0A:29:5F:E6:46:5A:B8:16:42:A7:90:22:62:C8
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer:       /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial:       01962E98B28A5979927F7E3A8A7AA18EDD3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: 4cGekZXdY+I+4xHNFw0zCfZQqGN/nddUBqFU+QERQ/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b2:8a:59:79:92:7f:7e:3a:8a:7a:a1:8e:dd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=078d591523ea0a295fe6465ab81642a7902262c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:9a:e2:cb:d8:a1:2c:d9:f7:f5:0b:2b:0d:
                    a8:96:41:6c:d8:ec:9f:b3:59:79:b7:50:bc:b3:ea:
                    c2:1a:3c:df:db:74:74:e4:0b:d6:0c:4d:17:48:e0:
                    a8:9f:d4:a2:cc:60:8a:8f:f6:26:d1:0c:c1:59:a6:
                    b4:78:05:59:87:31:61:32:66:66:fc:4a:e1:04:ba:
                    90:2d:dc:b3:7f:51:5d:85:40:ee:3c:f1:46:9c:0e:
                    17:e2:5c:12:3d:ce:49:03:57:35:40:cf:44:d3:a2:
                    37:1b:01:2d:cf:c1:a2:ce:c6:9f:7e:da:f0:93:f0:
                    2f:a1:e3:8c:a6:da:a2:36:fe:5e:71:ec:29:25:28:
                    e8:44:36:bb:79:50:f1:1f:85:8b:ac:27:d1:6c:86:
                    77:db:d3:73:53:aa:df:a3:24:46:1c:5a:b7:09:66:
                    31:bd:d1:4a:48:bf:61:be:49:98:cd:6a:a1:32:4d:
                    07:8f:1e:92:9e:02:dd:64:06:32:2c:6c:b1:98:b3:
                    94:64:f3:8c:a6:94:e3:88:36:65:9e:08:7c:5f:85:
                    53:b9:f6:c2:67:99:98:90:ff:54:0f:8d:73:bd:71:
                    5e:39:6f:b8:00:63:0d:cb:6e:c6:3c:8f:b8:80:93:
                    8f:35:aa:c8:30:56:d4:f9:ea:7a:a9:74:2e:91:fe:
                    85:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8D:59:15:23:EA:0A:29:5F:E6:46:5A:B8:16:42:A7:90:22:62:C8
            X509v3 Authority Key Identifier:
                keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:11:66:c9:c3:20:c5:dd:f0:53:56:b1:b9:31:18:b6:59:49:
         41:32:bd:6a:c0:59:d7:32:40:86:81:ba:35:26:19:9c:af:b1:
         5d:ec:7e:f7:41:48:a0:45:b4:01:46:fd:a8:eb:0c:c3:ec:c9:
         d0:ce:ea:21:a7:e5:f6:05:fb:e5:96:8e:f0:15:d3:a1:b5:91:
         37:c6:0e:22:ba:b7:95:7f:40:88:00:04:1f:27:7c:9c:b2:d9:
         15:b2:b5:04:ac:86:b4:a3:da:2a:21:17:b9:5c:44:aa:1d:49:
         f1:c5:63:21:6c:1b:9e:43:b5:94:c9:54:75:f7:19:36:6d:9c:
         a7:47:b8:24:85:41:a6:cb:89:52:9c:de:04:80:72:07:2b:9d:
         ed:64:9d:71:06:ea:35:fe:14:a2:c9:ca:0e:b1:97:7b:0f:72:
         90:db:4b:f7:23:06:fa:bc:7a:2e:d8:b5:36:7c:75:bf:26:29:
         ed:94:8b:89:34:e4:58:01:08:9e:53:32:b8:8f:45:0f:4f:56:
         20:da:e9:ae:ef:ab:e8:75:2b:f3:c4:56:73:a9:a4:1f:63:6c:
         f1:c1:39:33:0f:68:f7:f5:be:8d:7b:76:cf:c6:9c:28:08:2a:
         39:28:16:ce:ab:0e:30:f5:4e:38:06:41:10:04:92:b9:34:81:
         1f:ec:6e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----