Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
File:                     wq8ZpG9azIz4_QNiSmG3koqBjNA.mft (raw, json)
Hash identifier:          RdfXIeKx73ohsD2BuB0WEHPi4PWwP3e3P5apGrSw/hc=
Subject key identifier:   E1:83:F4:CE:E6:6B:84:B0:BC:9C:75:4C:9C:30:CC:BF:BF:2C:22:DD
Authority key identifier: C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
Certificate issuer:       /CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Certificate serial:       01962E98DD88F1F0C31D46F9F34AACBAC5D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: wq8ZpG9azIz4_QNiSmG3koqBjNA.crl (hash: nGbcRRuLaq6FXLkXdt/New3I34EJRFG3ALaQcSnHQEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dd:88:f1:f0:c3:1d:46:f9:f3:4a:ac:ba:c5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=e183f4cee66b84b0bc9c754c9c30ccbfbf2c22dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e4:a4:db:31:2d:0d:00:fb:eb:2b:18:50:ac:
                    9d:0e:c2:94:14:c1:a0:a6:45:a4:2e:e5:21:d7:ea:
                    27:6b:32:6c:fd:c9:5d:95:99:a5:e7:3b:9a:09:1b:
                    a3:65:7e:cb:72:fd:fd:a5:67:93:49:5b:d9:1f:f4:
                    6e:aa:fc:28:b1:ab:3e:70:6f:5b:e6:25:fc:a3:fd:
                    1e:9a:dd:e9:e1:ae:82:4e:86:1f:6f:f9:db:5a:d6:
                    9c:00:cc:4c:ea:56:04:3f:27:c3:7a:d5:f2:13:cd:
                    0e:fc:c4:1a:aa:ab:d5:f4:d1:ae:e2:ed:d7:c6:9c:
                    b8:35:ef:f4:6f:00:0e:ad:c7:39:44:25:f1:19:09:
                    65:24:81:ca:f9:0d:ca:39:c7:94:3a:38:e8:9f:83:
                    fd:24:69:2a:cf:6c:e1:b7:43:0c:02:da:f5:e0:b3:
                    ad:23:ee:fd:34:c0:00:75:66:a4:b7:39:9f:b9:44:
                    3c:f5:40:fa:70:5c:39:2e:a4:40:af:3f:a3:ed:cc:
                    cd:20:63:5b:ba:1c:6f:36:3a:80:10:5d:92:4b:d1:
                    6d:c3:ac:f7:fa:23:47:e0:b1:e8:25:34:aa:33:e6:
                    85:c1:06:81:4e:31:43:68:0f:c7:1c:37:92:ce:88:
                    44:57:8c:c8:df:4a:ec:96:22:8e:1f:73:a2:d2:1d:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:83:F4:CE:E6:6B:84:B0:BC:9C:75:4C:9C:30:CC:BF:BF:2C:22:DD
            X509v3 Authority Key Identifier:
                keyid:C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e6:29:a2:c4:b3:36:92:ca:ae:54:e2:77:1a:e7:73:21:1c:
         43:0d:23:f5:7d:4f:23:48:74:d6:90:07:7c:24:83:7c:0e:9a:
         b0:d4:5c:2b:f5:f6:3b:27:47:d6:73:7b:73:e0:4b:47:6d:68:
         3e:9d:6d:a0:95:ac:f5:70:6f:d8:c8:6b:a9:e0:74:9e:f4:72:
         be:28:9a:8e:da:30:42:a3:71:b7:02:bc:33:46:12:b4:0d:6d:
         8b:8f:0d:b4:0f:94:29:0d:e2:5a:1b:ab:a6:86:94:41:28:68:
         75:ad:b8:76:44:43:d9:55:9b:e8:aa:15:8b:f5:c3:c3:49:ab:
         ff:0f:dd:de:48:30:a5:7e:78:1a:77:84:40:00:55:52:2d:ad:
         4f:22:61:0a:d2:4c:24:6c:be:01:ad:68:80:15:4a:3d:5e:95:
         bf:9e:79:e7:53:1a:94:55:1d:8e:a6:66:1d:04:c6:47:38:c9:
         e1:d2:ea:6e:1e:e3:36:42:4c:61:03:f5:9c:aa:e2:b1:29:49:
         e5:04:ee:49:b2:89:5a:c8:9e:bf:fc:97:d6:02:14:4c:d6:e4:
         b6:51:d6:7c:e0:92:5a:43:d3:0a:ed:53:17:1d:b9:06:5b:19:
         c2:b8:e8:20:1e:b4:92:b7:1f:a3:bd:66:5d:69:d9:48:c8:a1:
         5b:19:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----