Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
File:                     wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json)
Hash identifier:          QOwygmWwxZeza9c74eYwXj97AZyykW4Q1B4SaxAbmYc=
Subject key identifier:   18:96:D3:83:79:F7:60:1A:28:23:0D:F4:F5:C5:A8:7A:FB:4B:6B:0C
Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Certificate issuer:       /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Certificate serial:       01962F74F2E460A0E63F61CEC9B95C1372EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
Manifest number:          0B55
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: NrF/Q65I5e/4a4f9RpAsXejqamZRymFhGV9Ksny1Wk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f2:e4:60:a0:e6:3f:61:ce:c9:b9:5c:13:72:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=1896d38379f7601a28230df4f5c5a87afb4b6b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:23:20:8e:95:4d:08:39:ad:9f:3f:b9:a9:
                    bf:3e:d5:6c:fd:38:07:32:da:bc:fc:bc:cc:d4:71:
                    29:31:1e:1f:fa:8b:db:e8:81:21:86:db:9d:f8:13:
                    73:a4:13:d7:e0:e9:55:7c:9c:a9:cb:e8:e8:23:5a:
                    fa:70:d4:0d:5f:b0:05:6b:09:3d:4f:d9:cb:84:1f:
                    97:d6:5d:10:c6:d2:7c:6f:31:db:95:ac:2e:91:83:
                    2f:47:c2:df:18:46:47:2d:30:15:79:e3:c9:1e:71:
                    3d:39:f0:fa:b6:56:c4:41:76:4e:79:1b:f1:1d:3a:
                    08:c6:c4:f6:18:4c:a6:c9:ef:19:71:e2:ff:48:25:
                    10:ee:01:b1:a0:41:68:37:02:08:74:51:85:3d:27:
                    dc:f8:de:4d:05:cb:f0:5a:90:32:b4:fc:0c:f0:56:
                    41:ac:02:0e:91:08:fe:c8:13:8d:4e:5e:c8:b1:08:
                    8c:b6:ce:43:d7:75:9f:d7:f2:3e:a9:61:81:c0:bb:
                    09:c7:96:1e:13:7f:bc:04:7d:d4:63:ab:b3:7e:7a:
                    b3:d6:d3:15:4b:a0:52:5a:02:80:4d:2c:64:a3:d1:
                    1b:3c:be:80:4b:31:49:64:0e:45:ee:3e:31:fe:36:
                    7f:3c:3d:79:9a:87:c2:a4:77:fa:75:4f:6b:d9:83:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:96:D3:83:79:F7:60:1A:28:23:0D:F4:F5:C5:A8:7A:FB:4B:6B:0C
            X509v3 Authority Key Identifier:
                keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:55:64:1f:d7:e5:91:f3:f7:7f:e6:b1:c9:59:bd:b5:da:ca:
         06:90:68:34:cb:8b:60:24:66:15:99:e2:d3:fe:7d:ce:e0:dc:
         78:6d:aa:c4:08:57:8d:75:7d:df:db:b8:5d:4d:8d:94:f1:95:
         fd:4f:87:61:76:95:b8:10:73:59:71:27:96:68:4f:6a:44:7d:
         b2:78:ae:bc:18:42:d8:85:90:70:a4:8d:bf:cd:ea:b5:22:8c:
         c2:15:61:66:74:d2:8d:3a:8e:2f:28:88:e5:07:c7:18:52:41:
         2c:fe:af:9e:7e:52:b1:85:3d:2b:5a:98:f4:b5:1e:32:60:e5:
         ca:bf:dc:a2:5a:b9:e7:60:e2:86:66:e3:6c:fe:82:3a:af:61:
         87:bd:fc:90:df:c0:a5:a6:13:26:6a:78:67:b5:fa:74:06:bb:
         36:5a:fe:8b:de:33:1c:3d:06:a3:65:a0:28:a4:f7:3e:64:78:
         5b:e3:86:48:33:04:57:71:4c:25:b7:28:c9:8a:d2:91:48:7f:
         ab:83:ba:5f:c8:c2:b1:5e:19:35:8e:74:5c:9c:fd:70:99:bb:
         20:f8:64:0e:7d:5e:4e:33:b2:8b:01:1e:44:6c:7d:9d:2e:c2:
         ab:50:b3:41:90:0a:37:e1:d5:e3:23:84:ba:fd:f9:7b:47:4c:
         30:c5:51:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----