Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File:                     wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier:          NOKFOUtnP1Bk5W5TW6yyhPCwa9vUXuUFRxivA2otsgA=
Subject key identifier:   BF:1B:EA:16:99:A5:C1:CD:AF:87:85:A4:60:B4:DC:0A:95:AA:F6:44
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer:       /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial:       01962E989E65C93B05C168FD5B390C547737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number:          0F93
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: fcYl5TtsVt0IBtbqCrbZ0MjQELKojf6bBLdsFUwWCec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9e:65:c9:3b:05:c1:68:fd:5b:39:0c:54:77:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=bf1bea1699a5c1cdaf8785a460b4dc0a95aaf644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:9f:09:5a:bf:c7:98:71:d4:80:bd:64:a2:
                    5f:8a:c4:0b:5c:9a:90:b3:88:26:bf:d0:e5:7f:55:
                    35:b5:ed:ce:32:ec:a9:0d:7f:29:fe:b8:44:9f:f1:
                    44:82:b0:a2:31:44:09:91:c7:f9:7e:a7:06:65:64:
                    69:3f:81:7b:e8:3e:79:b6:9b:2e:b8:95:0d:6d:90:
                    4c:32:86:53:ac:3a:91:e1:01:e2:fb:19:73:54:f1:
                    3e:98:ea:5f:57:21:38:90:ef:e3:cd:37:b2:07:68:
                    af:b1:25:0e:76:77:24:08:09:ff:96:3a:5a:e9:43:
                    64:e7:9f:0c:35:d1:83:97:c8:2d:7f:f9:3a:ad:d6:
                    90:dc:0b:68:11:f1:18:62:c7:57:ce:7b:cd:85:fe:
                    60:f0:ab:43:93:08:1f:92:7f:9b:23:47:61:79:a9:
                    b7:e8:6b:32:38:63:14:e3:0c:1e:5d:ef:2b:d8:b1:
                    79:60:91:7a:7c:d9:9b:0a:d2:9b:c6:92:f7:6a:0e:
                    34:5e:ef:1b:f2:38:70:4a:0e:28:e6:3f:1b:7d:8e:
                    cb:53:48:b7:65:4f:5d:f3:56:5a:42:cf:8a:48:1a:
                    73:5a:d1:ae:ad:44:d7:b1:a7:b3:d2:90:52:17:33:
                    52:d5:58:b5:27:a9:ea:b8:9c:25:78:bf:c3:21:af:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1B:EA:16:99:A5:C1:CD:AF:87:85:A4:60:B4:DC:0A:95:AA:F6:44
            X509v3 Authority Key Identifier:
                keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:99:12:4b:e8:d9:ae:2a:dc:4d:b1:ab:d8:d7:d8:6a:d4:3e:
         be:46:72:b2:2c:2a:20:7d:b8:54:c4:09:6b:92:1f:3c:bd:98:
         b2:e8:70:f0:d4:24:08:9c:80:b3:c2:a2:56:f2:df:68:a4:32:
         7a:7c:99:77:6a:04:4a:c8:34:82:3e:9e:87:9a:9d:95:7d:a2:
         23:fd:aa:27:32:9d:e5:0e:df:75:3c:3e:3c:cc:1f:79:61:fd:
         b7:ed:12:cd:24:56:bd:70:2e:62:ab:e7:23:cb:57:20:51:1b:
         6a:ea:f9:e7:52:66:10:90:45:10:73:44:e3:d9:29:1f:ba:48:
         66:60:f6:20:e1:6a:06:81:7a:46:6b:76:78:5f:9f:a9:11:65:
         a9:e9:f1:6f:66:53:64:7f:3a:9b:14:da:27:8e:63:e8:0e:ac:
         ad:30:5a:5f:f2:65:c5:cc:e4:7a:8d:56:54:be:82:0b:1e:71:
         9f:da:e4:eb:c2:1c:41:5c:0b:97:07:f5:d1:65:ce:0c:ef:7c:
         ea:92:db:ec:8a:d6:9d:31:bc:1d:61:9e:39:58:88:ef:d9:15:
         70:c6:22:cf:2f:c0:1d:0b:46:35:ad:7f:0d:46:32:96:e3:9a:
         36:b8:3b:fb:44:04:be:61:e2:73:e5:c9:61:44:66:65:13:16:
         7d:c7:2a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----