Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
File:                     wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft (raw, json)
Hash identifier:          vvn1fjSQ76poGX8ZHMhgIO7mQ9RjW8M4TWjH4wG6Olc=
Subject key identifier:   72:89:79:01:D1:1D:36:88:2A:25:36:81:8F:77:F7:B3:0A:83:69:48
Authority key identifier: C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09
Certificate issuer:       /CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
Certificate serial:       01962F74254E09C327F84A888CE47539FD80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl (hash: QxiJRDf6BbBqw9u0BQGMWth/jsIgzuceR9mH8piL+yQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:25:4e:09:c3:27:f8:4a:88:8c:e4:75:39:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=72897901d11d36882a2536818f77f7b30a836948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:73:c7:15:53:aa:0d:47:c1:1d:55:69:ff:
                    3a:0a:97:ac:90:9f:34:7d:c8:c6:c8:1e:21:7d:5d:
                    38:3a:08:d5:77:97:f9:e8:b4:47:9d:95:22:0b:01:
                    ea:cc:f8:26:ec:67:9e:82:fd:a3:53:ab:41:85:a0:
                    43:d2:48:a5:4e:b8:e9:36:34:55:0f:df:fb:91:e7:
                    13:34:05:29:a3:04:de:fb:13:bf:14:75:52:3f:fd:
                    22:e9:2f:14:2f:08:78:f9:d6:21:4c:55:be:39:57:
                    ff:ab:02:97:0a:91:f5:0f:49:f3:f1:af:e9:67:e8:
                    b4:d7:7d:f3:1c:d5:f5:e1:04:18:61:7d:be:42:36:
                    be:ba:3b:9f:65:d5:cc:b3:a4:cf:41:4a:8b:2c:14:
                    b0:e8:66:88:2c:17:e0:f8:74:39:f2:0c:44:67:56:
                    b9:7e:66:30:23:e7:79:5b:95:f6:14:47:c3:21:12:
                    97:5f:83:21:f6:b4:52:3a:e9:26:be:30:53:11:ce:
                    36:69:b7:a3:2b:08:d5:fd:ca:bc:c9:d3:fa:b1:38:
                    28:6a:74:1d:0d:ad:e5:c7:ee:b1:a5:45:35:d5:d7:
                    7a:65:b1:0d:6e:9e:f7:db:b8:25:cc:1f:c0:25:d0:
                    e3:8a:9f:d3:c9:e8:b2:ad:3b:ed:9d:4d:b9:b5:14:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:79:01:D1:1D:36:88:2A:25:36:81:8F:77:F7:B3:0A:83:69:48
            X509v3 Authority Key Identifier:
                keyid:C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:44:a8:39:1b:bd:00:31:53:d9:20:77:56:63:bf:61:fc:3e:
         fe:e9:27:62:45:1a:3c:7c:66:7c:1b:98:a6:61:2b:9e:52:b3:
         b9:db:7a:a6:c7:35:97:67:c2:21:57:41:d4:49:50:02:f6:30:
         f3:2d:df:17:8c:b2:b2:a0:5a:64:44:ba:82:8f:a9:06:98:4e:
         75:f0:ab:f9:5e:21:d8:95:ee:97:b3:70:76:68:e5:30:af:3b:
         f2:23:c5:0c:54:6c:d8:86:2f:3a:68:cf:e0:15:19:bd:b6:3a:
         89:96:65:67:83:db:64:ea:72:16:68:73:c7:e1:12:fd:91:96:
         d0:22:4c:63:9a:de:02:38:de:ac:1d:54:e9:20:37:13:c0:81:
         31:87:e3:fb:30:ed:04:30:74:e4:ef:0d:88:e3:4c:a6:9e:c2:
         d9:d4:1e:a4:61:9a:06:63:7c:c3:5b:4c:1b:dd:5d:49:36:5b:
         8b:da:07:35:cc:f7:dd:2f:47:d8:ac:b1:0f:8d:05:f9:e0:b3:
         42:70:90:f7:3d:d1:58:a8:9e:8f:1a:e2:e3:66:d3:e8:17:75:
         17:00:de:14:c4:ea:2e:d4:8a:2c:3d:49:9d:d9:3b:f4:4e:0e:
         4c:c0:0e:f7:a3:01:80:29:d2:b0:8f:1f:a6:48:51:f2:51:48:
         f7:a1:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----