Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
File:                     wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json)
Hash identifier:          SD6SQKhWfCW/6QoCJAPEsiUeI716A9UDck0ZjmBeot4=
Subject key identifier:   DA:1C:6B:97:54:8A:50:39:67:F9:A3:D5:65:66:8C:B9:01:C5:B9:71
Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
Certificate issuer:       /CN=c2a986da35f17104e8b116526f8063157a16db97
Certificate serial:       01962DF39AF5682017BEFC17047F2B46308B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
Manifest number:          0F82
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: +jm7o+GZHvxTgVHnXSLN5gSsyHednFMmUBWT6Tuv5ow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9a:f5:68:20:17:be:fc:17:04:7f:2b:46:30:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=da1c6b97548a503967f9a3d565668cb901c5b971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:00:26:80:bc:45:9a:86:77:72:5e:d4:fc:
                    e8:bd:c6:99:c4:09:ef:a4:07:86:6b:1c:3f:d7:ac:
                    f3:f3:1e:06:72:b1:92:5d:96:4a:9f:7f:30:6b:62:
                    8d:c4:89:23:b5:bb:8f:27:1d:a6:af:55:0d:89:6b:
                    e1:b8:a3:ea:60:f7:66:7b:5c:bd:e5:8a:1c:84:a5:
                    d7:36:f6:88:cd:71:87:ec:56:22:4a:1a:37:2e:f4:
                    14:57:23:2a:73:c7:90:96:a7:d6:62:ed:84:02:bb:
                    5f:37:62:f3:ce:eb:84:41:5b:83:a9:82:ef:ce:e5:
                    16:e9:1d:df:7c:5f:97:ab:50:1d:05:a9:70:79:2a:
                    84:91:95:65:16:8f:e1:a7:b7:d5:56:e0:5f:fd:29:
                    51:37:5b:33:a1:a8:a1:56:f1:d7:f4:90:f2:0d:db:
                    02:71:b4:33:a7:81:a9:c3:7d:cd:1e:3b:26:66:85:
                    85:f5:3c:7f:9b:ed:0d:86:a0:74:29:d7:97:cb:ba:
                    3d:d1:cd:dc:0b:3f:5a:58:04:3c:a0:e7:c8:fc:eb:
                    ca:2d:6b:02:1d:c7:40:cc:b4:ea:71:6f:3c:c1:8f:
                    cc:b2:cc:8a:ef:33:df:41:1f:aa:fe:93:ea:71:05:
                    cc:be:a0:3d:8a:1e:95:6e:12:0f:a7:e6:50:15:f8:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1C:6B:97:54:8A:50:39:67:F9:A3:D5:65:66:8C:B9:01:C5:B9:71
            X509v3 Authority Key Identifier:
                keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:4a:67:c3:e6:c5:f6:8e:93:a5:c3:87:0f:82:b5:53:6c:fa:
         ba:43:03:e1:f5:50:d1:51:24:66:a9:bb:ca:a3:c3:db:45:1c:
         a2:e0:af:1c:4e:4c:8e:2e:35:93:ff:22:a5:7e:f0:27:0f:ad:
         36:81:10:0d:7b:d8:72:b1:59:71:5b:f3:59:dc:e4:da:dc:b6:
         b6:cf:cb:40:a8:36:9e:04:e4:d7:ee:d4:1c:76:e0:51:28:48:
         df:e3:10:52:34:7e:66:94:2f:49:24:88:17:eb:fc:6a:cd:25:
         89:84:1e:55:2d:78:e4:5a:22:30:2a:a7:29:38:e0:83:51:ca:
         03:40:ec:df:80:6c:d8:62:c5:d9:e8:fd:e8:f1:65:12:a5:a1:
         19:2f:e5:3a:51:16:40:08:00:ee:06:ad:4f:44:e7:3d:33:bb:
         b0:36:5a:27:1e:f9:8d:34:af:e6:e1:61:50:1f:55:a8:89:bc:
         48:0f:b2:db:d0:b9:6f:65:27:04:0e:84:f0:8f:20:d6:24:50:
         d3:bb:e9:6e:11:c3:42:ee:9f:d2:1e:46:62:ef:c1:e6:cc:ef:
         47:24:a0:f6:65:23:6c:7e:6e:74:f8:7c:4b:0e:4c:fb:87:e7:
         45:7e:5f:93:14:f4:fd:d0:53:80:76:22:44:4e:06:78:74:f6:
         df:76:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----