Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File:                     WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier:          FPwpOgKQ+Z+sg+gmKeFwHwDQkCdTvpIo/dq+Ai0c8Jk=
Subject key identifier:   9D:58:1A:DF:8A:B7:60:2F:E7:32:D8:09:D9:3C:74:9A:6E:3E:CD:0E
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer:       /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial:       01962F751095F8E1F159B602955DA8B1183E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number:          11F7
Signing time:             Sun 13 Apr 2025 14:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:03 +0000
Files and hashes:         1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: o1NR9/sG0LIEX9ACxAAaju8iscJ16IJPXYDzwD83EIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:10:95:f8:e1:f1:59:b6:02:95:5d:a8:b1:18:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
        Validity
            Not Before: Apr 13 14:02:03 2025 GMT
            Not After : Apr 14 14:02:03 2025 GMT
        Subject: CN=9d581adf8ab7602fe732d809d93c749a6e3ecd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9a:8a:d7:c3:76:b1:42:86:ff:59:2e:96:3b:
                    5a:53:8f:cb:ee:bd:d9:4c:ef:09:a5:9e:6f:b3:de:
                    2b:7f:ad:2d:fc:28:85:0e:48:88:80:33:23:af:14:
                    1f:b4:61:b1:c0:54:af:d8:50:bb:9c:6f:88:e7:23:
                    c7:8c:32:bf:de:63:61:5f:b9:37:b7:64:b2:d5:ca:
                    76:d7:e6:bb:17:41:49:4c:22:b9:c7:bd:25:1b:90:
                    03:9d:4e:5e:1d:54:d2:68:89:af:7d:8b:e0:7d:26:
                    64:ed:8a:c6:f9:67:0c:8a:20:3d:7a:73:37:ce:8d:
                    7e:14:14:39:1f:36:83:8b:f7:bb:f0:8e:59:6d:dd:
                    86:79:b3:42:95:d1:f0:19:b3:f6:a9:84:e8:f6:b0:
                    8a:ff:8f:58:7a:f3:9a:03:35:b9:6d:3f:37:2d:31:
                    05:21:11:9d:02:2c:87:c4:a4:75:99:e0:cd:75:4a:
                    98:57:bd:34:ae:c6:66:a8:26:89:74:40:00:d5:4e:
                    35:85:19:10:4e:52:2f:6d:ec:4a:9c:d0:e1:b4:8e:
                    02:9b:dc:16:5d:fb:78:a7:6e:fa:14:80:7a:86:aa:
                    84:1e:13:88:57:5f:ce:ae:81:36:d2:02:93:b0:7d:
                    33:c5:83:5e:a6:f5:c9:ce:f6:ae:7a:99:3a:78:0d:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:58:1A:DF:8A:B7:60:2F:E7:32:D8:09:D9:3C:74:9A:6E:3E:CD:0E
            X509v3 Authority Key Identifier:
                keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:51:c5:01:98:1c:11:a4:c8:61:86:6e:99:fd:09:3f:52:73:
         6b:2a:81:7b:84:9b:ef:2a:58:d8:ca:5b:a9:64:dc:c3:29:be:
         44:90:9c:99:30:45:21:8a:bd:a6:5e:74:57:5d:1c:ed:13:3b:
         51:ca:92:36:e1:f9:57:06:80:62:fc:7d:f2:95:f7:89:84:d0:
         fa:81:2f:bc:cb:99:af:e3:19:81:ee:19:f9:29:52:e7:ba:48:
         b3:b3:70:1c:8d:d3:ea:41:32:a1:2d:60:1c:c9:aa:6a:07:ab:
         cb:d0:54:a2:b9:04:63:3f:91:61:2e:65:21:81:e0:e2:e4:97:
         4e:d9:41:0f:e8:49:ae:67:20:9f:0b:31:1a:33:8a:3e:7b:ae:
         48:d8:49:5a:32:3f:1f:83:55:08:e0:30:20:e6:54:20:b0:64:
         ab:31:0d:91:53:43:82:2e:f4:8e:63:98:c7:96:94:8c:6e:38:
         83:a9:86:42:ca:f5:21:5a:27:99:38:7d:94:b2:38:71:7b:c9:
         b1:43:6e:f8:b3:57:93:49:88:27:02:c3:67:8c:64:b7:da:e5:
         cd:1b:1b:3a:df:a0:5d:0e:1e:3f:c8:85:d2:fc:e6:c1:7a:d0:
         3f:10:95:34:b6:98:d4:98:2f:bb:e1:ea:95:d3:2c:3c:1e:2e:
         7b:d2:0d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----