Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File:                     w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier:          wS3l0aJGCmo+8YUgmw+glvFR6b2A7PHDDAc7QnQ8ivo=
Subject key identifier:   FF:FD:FC:88:07:00:ED:53:F8:6D:4E:24:C9:5F:50:B4:EA:3E:5A:F0
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer:       /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial:       01962FABA0E35A6718E23F46ECFD211A81CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number:          04A9
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: KY0apkLKqreQFMlIxBeTBiKpTKS6aS3fws/SBiQR674=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a0:e3:5a:67:18:e2:3f:46:ec:fd:21:1a:81:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=fffdfc880700ed53f86d4e24c95f50b4ea3e5af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c4:f8:b9:c1:b4:75:c4:dd:94:42:24:b6:27:
                    4d:c2:e9:c6:06:cd:8e:24:52:5f:5f:61:98:42:e2:
                    5b:c4:7e:1f:6d:0c:f7:b7:bb:05:f7:0f:a0:10:c6:
                    8e:74:07:58:6b:bf:98:55:7e:cc:2d:ab:14:8b:f3:
                    c7:f3:b6:64:74:23:ef:a2:27:bf:ea:ab:91:1f:8e:
                    dd:db:02:2d:22:31:38:41:57:ab:f1:c1:a8:49:69:
                    a4:80:5e:c1:fc:df:dd:f7:39:a6:58:7f:72:9d:a0:
                    78:34:51:74:3a:82:26:8f:1f:04:8a:79:e8:c9:51:
                    79:01:bc:fb:fb:f4:11:66:2c:ec:5c:bd:e6:9b:79:
                    ae:1f:b9:b9:5a:67:be:d1:d5:f6:e8:06:46:4b:1b:
                    57:f9:23:3e:35:8c:f2:31:b2:cb:ad:59:ef:d6:08:
                    82:b0:59:89:d5:ef:4e:68:7a:21:39:63:51:b4:73:
                    ff:2c:ea:20:03:75:64:18:d8:7e:66:12:0a:fa:8a:
                    71:3c:7e:f8:99:2f:c9:28:45:c5:94:80:9c:58:1c:
                    94:85:18:fd:c6:14:b3:f5:a2:87:a0:c0:80:ee:a4:
                    e4:5b:e7:be:c5:2c:af:ef:a1:82:f2:e0:ee:66:c1:
                    f1:e9:91:2d:f3:80:e0:3f:85:e5:3e:e3:68:94:ad:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:FC:88:07:00:ED:53:F8:6D:4E:24:C9:5F:50:B4:EA:3E:5A:F0
            X509v3 Authority Key Identifier:
                keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:94:3d:cf:d3:2e:3a:d6:94:17:e9:ad:44:ed:bb:b5:1e:
         04:c6:bd:fb:87:8c:cd:6b:1b:14:d4:ef:5b:2d:a4:53:9b:05:
         ef:bd:32:5e:76:4c:67:48:ac:7e:43:19:e7:4c:14:0f:08:6f:
         bc:06:5c:b5:ba:70:de:78:ad:33:ed:d7:10:42:fc:c5:05:26:
         66:df:3d:86:36:c3:0d:89:f2:5a:e4:d8:05:e8:90:25:eb:d6:
         9c:ec:24:47:3b:66:95:e1:b8:7b:64:ed:31:64:bb:54:61:3a:
         9a:3a:ba:38:61:44:17:ae:54:96:05:31:6d:47:20:65:78:74:
         64:a0:ea:88:7e:e0:37:d9:f3:4a:87:f0:fc:fd:8b:33:93:20:
         f6:8e:54:f9:7a:9e:7e:50:97:0f:98:84:bc:1a:df:18:1e:78:
         01:39:28:47:95:5b:b2:e3:72:0c:7c:e3:05:14:e4:93:bd:80:
         58:77:b5:38:80:cb:45:cb:14:78:bd:aa:2d:4a:2a:a9:01:8d:
         b5:b1:f7:9c:5c:e2:fc:a6:2a:88:9b:e2:9c:d3:27:49:8d:d7:
         df:4d:5f:b9:c2:69:22:05:5e:e9:b0:1f:f7:3a:a0:93:bb:0d:
         cb:de:d8:b5:81:30:ea:8c:16:a1:09:19:e5:9e:03:e5:15:5e:
         91:1d:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----