Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
File:                     wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json)
Hash identifier:          MuWuSvTiZLn4UQXN7mqcacS7zHWCJyG3HgIdhrJd1+w=
Subject key identifier:   ED:A1:E5:7A:7C:BB:EC:7E:D2:15:DA:A9:63:AC:C1:B1:C2:60:70:26
Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Certificate issuer:       /CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Certificate serial:       01962DF3970B4CBE11E681770D7F22FE3E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
Manifest number:          0B0A
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: iZKSbxxvkYUseQJnlTkWIE+0GXRFHTUDhTZH4JHEEwU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:97:0b:4c:be:11:e6:81:77:0d:7f:22:fe:3e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=eda1e57a7cbbec7ed215daa963acc1b1c2607026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:13:b9:7b:45:71:e8:2f:c0:ce:86:5d:70:
                    19:d4:e7:a5:66:c0:51:42:6d:6f:3e:99:9b:4d:50:
                    7e:b0:31:4c:27:26:ea:01:c8:b9:4f:0c:ed:41:95:
                    ae:d2:17:e7:97:68:be:34:77:a4:24:ee:92:c7:eb:
                    f9:05:f4:87:67:49:84:9c:4a:9a:c3:6e:e6:d1:6d:
                    f2:51:6a:1d:e6:4b:ee:dc:72:11:80:c8:4b:48:f0:
                    a8:c8:f7:f6:b4:8f:06:fc:14:61:bc:8e:7a:d9:8e:
                    d4:38:6b:a6:cd:82:92:53:49:19:5a:bc:cd:ef:d7:
                    4e:74:b1:0d:d8:0c:5d:05:62:10:ce:6a:3f:8f:55:
                    74:5e:a7:53:00:67:e4:ac:aa:1d:f0:ac:e6:9e:4d:
                    bb:3d:9e:68:f4:44:44:08:55:64:6c:16:57:38:6d:
                    db:ab:4d:3d:09:b8:5a:77:6e:48:6a:b4:1a:f9:44:
                    cd:a2:9e:13:b9:41:46:84:f5:7a:22:dc:6a:24:17:
                    e5:cc:85:64:f1:3d:e2:25:22:46:4d:c2:7a:b4:38:
                    4d:83:da:dd:12:cb:75:65:35:d4:80:0f:27:6b:bc:
                    0b:58:c9:14:c4:89:70:93:bb:d6:b2:fd:79:f3:ab:
                    53:b0:5b:78:71:40:89:de:a0:4e:0a:f7:88:3b:c3:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A1:E5:7A:7C:BB:EC:7E:D2:15:DA:A9:63:AC:C1:B1:C2:60:70:26
            X509v3 Authority Key Identifier:
                keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:92:b0:52:9f:43:30:10:28:e2:a3:41:aa:eb:c4:78:68:0e:
         8a:e3:a1:85:39:c0:57:dc:0b:d1:9e:d0:e1:76:5d:c9:5e:88:
         64:70:7b:4b:45:6b:6b:21:fd:53:f1:39:c4:d2:8a:78:c6:cb:
         8f:3a:a8:00:85:97:9f:7c:32:8a:0e:a8:3d:ab:93:66:e0:be:
         71:d1:6d:d1:3d:90:c9:43:f9:e6:fe:6f:a2:7b:23:27:69:eb:
         b8:6a:1b:58:f6:f2:87:7c:93:72:f7:84:e6:35:cb:7d:0e:2a:
         7f:3a:f4:43:16:8a:8b:ae:7b:43:28:4a:d8:3e:2c:2b:37:60:
         e9:06:7b:87:9a:94:17:cc:ed:5b:c2:07:7d:ec:e5:fb:13:27:
         7b:7b:42:91:d8:9a:0f:98:32:38:46:11:2a:4e:8a:27:b0:e8:
         71:6b:c4:82:61:67:d1:a5:03:85:35:13:92:b9:e6:c9:7a:c3:
         ae:b2:ec:9b:85:0f:b4:38:36:ca:33:b2:c3:5b:f3:3d:fc:5a:
         dd:fa:0b:8d:b7:7f:f9:84:f8:1d:ec:0c:b7:10:b0:dd:1f:e4:
         ec:7e:b2:9d:23:61:ad:22:cb:ed:1a:05:12:c3:41:de:f2:fa:
         2c:8a:6b:7e:ed:fc:ad:7d:c7:1b:e5:09:0d:c5:90:75:eb:b5:
         ea:b9:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----