Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
File:                     WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft (raw, json)
Hash identifier:          LK0kw4EfBWTHfn6pGD2MK6fegY2DRMVHBvBvkVZ13x4=
Subject key identifier:   A8:51:B6:4C:20:1B:A3:02:22:6E:AE:FD:9B:55:1E:5F:12:77:C5:D3
Authority key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
Certificate issuer:       /CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Certificate serial:       01962E999CF737E3667C7CCC6C38147D2BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
Manifest number:          0915
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl (hash: 3ERRz7akcb8vHOMBYFL4BmIGifYwyPISut18ts8GGyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9c:f7:37:e3:66:7c:7c:cc:6c:38:14:7d:2b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58afedfef67918490634be4e2b75c11b70c2ea2e
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=a851b64c201ba302226eaefd9b551e5f1277c5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c0:8d:54:4d:92:34:d5:a3:2c:e2:4c:e1:ea:
                    97:26:8f:8e:89:40:07:45:f1:13:e1:31:a5:6e:52:
                    c6:d7:65:f0:ea:f5:d2:3b:4b:8a:28:f9:07:65:7d:
                    d9:cc:a3:cd:12:0b:a5:25:8a:90:66:c9:65:e7:73:
                    70:c0:a8:16:89:21:7d:ac:09:f0:cf:89:77:88:bc:
                    a1:27:09:fc:d3:47:d2:f0:92:8d:7e:b6:4e:3f:23:
                    00:5f:bd:31:af:93:64:70:ef:5b:b0:1a:51:70:8a:
                    22:15:d1:93:7e:a7:ae:1b:8c:f7:a7:0c:4f:f7:f5:
                    5d:0d:0a:7e:0e:34:e4:ed:12:75:b3:99:0c:c7:80:
                    16:38:18:9d:f7:de:f4:da:7b:ff:eb:9d:c8:77:47:
                    68:fc:68:fd:b4:a6:c9:66:93:a2:77:dc:6b:cf:35:
                    22:a3:a8:82:cd:2e:df:2f:33:a5:28:b5:71:b6:b0:
                    48:bd:5f:9b:4a:9f:27:47:bf:a6:90:dd:84:b7:37:
                    eb:22:55:5a:50:54:6d:59:eb:63:ef:6e:64:fb:d6:
                    f8:dd:06:fb:6c:89:21:ee:6f:40:73:b5:73:ea:43:
                    c0:d0:45:f4:fd:49:5a:35:df:d1:65:67:34:ca:bf:
                    0a:32:36:7b:04:e3:da:e8:0b:a5:5a:33:64:e3:37:
                    aa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:51:B6:4C:20:1B:A3:02:22:6E:AE:FD:9B:55:1E:5F:12:77:C5:D3
            X509v3 Authority Key Identifier:
                keyid:58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:59:91:0a:78:d1:52:b8:3d:e2:93:27:80:5f:82:75:45:
         3a:a1:8d:d3:f2:6c:28:f7:72:b5:d1:85:c7:9a:a4:1c:75:b6:
         04:ed:39:79:0f:d6:64:25:17:ae:02:26:9b:d6:b6:ca:37:a2:
         a6:fb:14:08:cc:5c:ce:55:e0:ca:73:8a:8f:09:0d:a0:5d:d8:
         7d:c4:4c:4f:5f:18:a9:8c:dc:f5:58:2e:6a:6a:69:9e:4f:99:
         fc:85:09:97:95:8b:41:64:89:2f:d7:c0:05:6b:e2:bf:c2:4e:
         c3:a5:73:fe:19:7a:67:5d:e4:d9:1c:e1:e6:ca:24:cd:b0:30:
         67:03:5a:d5:67:d5:d7:2a:b8:8c:89:25:3f:b4:d0:b4:ae:39:
         cf:c6:04:19:fe:21:ec:b1:09:09:c8:aa:b9:cf:72:ea:ef:40:
         d7:e8:2e:df:30:cb:2c:b4:dc:a6:b4:66:90:c8:2b:39:a7:6c:
         ff:72:64:d2:d6:df:af:a9:d0:2e:c8:8b:44:b8:8d:2b:c3:a5:
         2f:88:00:10:0b:30:36:c1:73:13:e6:25:bf:fb:f5:e2:1d:6c:
         db:b7:3d:4f:ec:8e:6f:88:4a:ec:b7:50:1b:57:9c:bc:1f:18:
         b1:9d:6b:38:c2:af:76:f1:f5:32:d9:07:24:92:68:0c:3a:6e:
         44:92:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----