Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File:                     cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier:          v7gHhC+aXzlbcysyVcXdA3otdbaKKyErApk7A6LaXgc=
Subject key identifier:   A3:DB:FD:1A:2D:79:45:B0:66:97:F5:2C:0B:D5:02:09:72:9B:74:16
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer:       /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial:       01962F74EA9496790237AF590E43F2141151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number:          0185
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: q4EDsrvAuS0/JUDwxiES+LemddtzIRgAQ6Q0GyXQXI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ea:94:96:79:02:37:af:59:0e:43:f2:14:11:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=a3dbfd1a2d7945b06697f52c0bd50209729b7416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:1e:b5:23:08:48:33:7a:a2:d8:d9:19:93:
                    4c:31:7f:42:3d:f4:18:a9:7e:e6:9b:4c:8b:a5:f6:
                    6b:7e:e9:73:9d:30:66:62:fd:1e:f7:53:f9:17:93:
                    53:ef:9e:3c:b6:fd:a8:79:7a:39:1b:e4:aa:29:6f:
                    9a:a7:a4:a0:27:b8:19:49:72:28:7b:0e:69:db:7a:
                    67:12:4f:1f:f6:a8:a9:bc:6b:e6:a8:06:2b:a7:aa:
                    0c:36:95:89:a4:bc:92:c4:d3:28:dd:b1:e5:5b:e9:
                    da:d2:ef:ae:bc:b3:98:57:69:21:20:ea:f7:ea:67:
                    f3:d2:8c:28:3f:31:0f:eb:36:cf:db:8c:c7:6a:fa:
                    4b:bd:45:9b:a9:a6:e7:38:9c:3c:08:2d:b8:7b:9c:
                    95:7a:a3:32:13:e0:72:a0:0c:49:29:66:6b:ca:20:
                    d8:b1:dd:a0:f7:8a:d2:cc:4e:25:39:33:53:44:f5:
                    69:d2:50:38:2d:cf:5a:6b:2e:ff:40:28:d4:33:b2:
                    4b:29:e8:98:99:ed:11:3f:84:42:9b:d9:0d:c6:fe:
                    79:f0:10:82:39:a2:04:8a:6e:bb:a7:40:ca:0a:16:
                    19:95:0c:34:e0:8b:3b:c9:81:5b:66:00:2f:03:4e:
                    48:e5:aa:60:45:08:65:f2:fe:dc:e1:25:09:a3:bf:
                    29:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DB:FD:1A:2D:79:45:B0:66:97:F5:2C:0B:D5:02:09:72:9B:74:16
            X509v3 Authority Key Identifier:
                keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:58:5a:0f:25:db:c5:07:ba:1f:74:c7:a3:e4:2c:a2:53:5e:
         19:5d:e5:06:36:73:c8:7c:8d:98:a1:84:8c:0c:c4:7f:f3:cd:
         13:e1:89:0a:d6:39:ea:b8:14:1f:53:15:b6:99:27:4d:fc:4a:
         89:17:ea:5e:80:c5:6b:a2:f6:28:c0:4c:87:cc:7b:f2:03:f9:
         b6:cd:c1:5d:f2:24:06:a5:6a:bb:fe:a0:a9:cf:d4:6f:d6:f9:
         b2:bb:83:48:b4:fb:56:8b:16:8f:2c:af:48:2f:a6:10:be:31:
         94:76:c1:15:d1:4a:50:8b:3b:4d:74:19:1c:cf:d6:19:0e:2b:
         09:95:4e:33:1f:57:a7:1d:5d:fb:d3:b3:d9:c3:36:70:95:87:
         4d:9b:58:39:64:b2:df:32:c5:9f:ea:a5:89:f7:bb:b8:95:79:
         1d:f8:f6:57:82:60:82:c0:07:4d:0d:4e:83:21:e8:45:58:8b:
         1c:b1:b1:19:c7:38:cc:5a:78:82:22:d0:b5:33:29:81:b8:bf:
         cc:6b:98:17:4a:95:7c:5b:3c:2e:cd:8b:90:15:9e:91:19:af:
         d5:6e:62:11:0d:76:83:85:23:0f:18:e2:b0:fa:36:ef:4c:af:
         b9:fa:84:4d:ba:a3:43:b4:1a:b5:c6:9b:18:62:7e:13:5b:92:
         60:6d:b2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----