Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
File:                     wmsHYHZubMcjnCdVotDTn74U7Xg.mft (raw, json)
Hash identifier:          MT4eNmO7Dc8LZvwbJ8y4bUGKjmzDxn1b+75LLtBF+H4=
Subject key identifier:   37:1D:F3:B4:17:87:EF:29:4A:D8:54:10:8C:01:B1:D0:3B:07:DD:BB
Authority key identifier: C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78
Certificate issuer:       /CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
Certificate serial:       01962E9885766A0F701324FA0C331F541081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
Manifest number:          08A4
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: wmsHYHZubMcjnCdVotDTn74U7Xg.crl (hash: wV5ivUct0gG8yjaEW4qVAziNFK7nRu0BsJtcbum0nOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:85:76:6a:0f:70:13:24:fa:0c:33:1f:54:10:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=371df3b41787ef294ad854108c01b1d03b07ddbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:aa:6d:df:19:2d:38:df:11:5c:df:82:97:
                    8f:f8:de:c4:4e:da:4b:f0:1c:92:88:39:0a:1c:62:
                    ff:65:f8:6f:8e:03:6e:6e:92:45:5e:8a:b3:5a:bd:
                    3b:c6:b8:c1:fe:06:31:15:4b:61:a3:06:da:a3:f9:
                    ca:76:51:4d:73:b7:0d:dd:62:6a:25:cc:fd:23:66:
                    e5:c5:73:8e:78:e2:95:52:68:ff:c5:33:16:ea:27:
                    be:4f:4f:a4:a5:92:ee:41:2b:2a:94:dd:84:01:7e:
                    02:40:28:08:bc:48:37:f2:b0:a7:72:45:9b:32:74:
                    69:a7:9e:f0:e7:aa:eb:36:54:fd:aa:e1:a9:ec:41:
                    59:3a:98:fe:e0:06:16:4e:3f:11:d7:b5:1e:97:e5:
                    25:06:71:ab:0c:7e:6c:2a:40:d8:94:be:81:92:85:
                    8f:1d:92:d1:86:9c:86:c9:cc:74:25:d2:6f:fc:63:
                    79:c4:a4:78:c7:d6:76:85:b0:9e:d6:ae:10:0f:38:
                    a4:e3:65:63:ba:4d:2c:a4:cb:f6:fb:ec:8b:21:38:
                    e8:8d:2a:91:d1:31:1f:e5:29:e7:1f:0a:00:b0:d0:
                    d2:1d:9a:84:0e:5d:20:ed:3d:ed:8e:12:e9:51:04:
                    9b:8a:24:66:61:3f:b1:6c:af:70:f9:70:1b:de:4d:
                    da:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1D:F3:B4:17:87:EF:29:4A:D8:54:10:8C:01:B1:D0:3B:07:DD:BB
            X509v3 Authority Key Identifier:
                keyid:C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:51:bb:bc:bc:3a:67:b0:54:19:a4:01:6f:6a:aa:72:49:c2:
         2a:78:a9:6b:d0:03:f9:0b:4f:e1:03:83:f3:4c:6b:c7:13:ec:
         0a:e7:e8:6a:de:5f:f4:7f:f7:8b:f2:18:39:37:16:d1:dd:b7:
         3f:fe:0e:ba:68:e3:6b:fb:dd:ff:6b:61:1d:f1:26:fc:cb:2d:
         b9:2f:a2:0b:17:49:d8:6a:56:cb:34:f6:0d:b4:8b:71:23:9a:
         c7:8e:6d:bf:2d:33:cf:c7:91:f9:7d:41:83:f2:8a:12:f6:91:
         7f:f0:0f:e5:7a:a9:b0:03:3a:7d:2e:0a:64:ea:f5:2a:ad:e8:
         97:75:1b:19:1f:39:24:c6:81:f7:1a:aa:f0:fa:d6:8f:b7:ed:
         51:f9:b1:b1:69:84:13:78:94:c0:ea:ff:78:df:90:b1:d3:00:
         bf:08:06:a4:76:dc:e5:cf:05:55:9a:2c:63:68:57:d8:b0:74:
         ab:44:69:3c:f3:ea:08:b1:9f:31:94:a3:16:44:3d:5a:4d:e2:
         b9:8c:ab:2b:a6:cb:d4:5c:22:41:ef:1d:d5:1f:57:0c:bf:93:
         5b:2e:c4:ea:f1:77:1f:1f:f5:bc:bf:2b:46:65:a7:04:49:60:
         07:23:3d:a2:27:f5:57:6a:25:0b:c0:be:32:1f:23:88:80:5f:
         00:67:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----