Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File:                     WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier:          F2yHh7nAA/YM2LlQAE5IqPY/vX3bLg5TDEFsi+kWKZU=
Subject key identifier:   46:96:7D:C6:F9:9E:D9:BF:8D:BA:B9:EA:D1:8C:B3:08:8E:D2:72:41
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer:       /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial:       01962F0644B99B8DC1999B6C9B0FFCAFFD94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number:          0846
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: jJ/GToTjPt7+LH89/LIgEKPmKW/l5VTvXbYJ8hsfBF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:44:b9:9b:8d:c1:99:9b:6c:9b:0f:fc:af:fd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=46967dc6f99ed9bf8dbab9ead18cb3088ed27241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:65:ab:4d:de:c3:ae:e7:e7:85:f9:83:75:cf:
                    89:f3:6b:fa:79:72:43:b5:73:8d:bd:17:eb:e8:bb:
                    85:a0:dd:61:e1:af:1e:8a:03:00:f7:aa:b4:56:23:
                    6c:38:21:3a:9e:c5:56:87:1c:84:de:af:38:81:e1:
                    0e:d3:10:65:de:24:17:e9:94:f2:2e:e0:36:49:85:
                    a7:53:06:02:88:25:d9:8c:83:ba:31:e1:da:1a:4e:
                    1d:7a:37:5c:74:b1:ef:6b:38:90:10:64:8d:cd:9f:
                    10:8b:e8:13:e7:38:eb:40:8b:e9:d4:b2:1b:f2:1f:
                    00:78:45:87:8c:1b:ef:2a:51:06:52:2a:a3:1a:47:
                    d1:84:a5:8f:5a:f4:ca:2c:06:19:4d:9b:4b:9f:f8:
                    53:06:a1:38:31:96:15:b4:7a:14:86:1a:82:2d:94:
                    f6:9c:5e:c7:0a:47:01:a5:cb:76:81:e0:73:9a:07:
                    5e:08:8c:1a:1b:e6:32:e1:01:24:bc:ed:97:d1:a9:
                    0e:12:b4:87:8b:e9:b3:2e:33:b2:5a:43:29:c3:04:
                    fc:a3:7c:56:70:ad:c7:55:cd:99:4e:4e:8b:ee:d7:
                    4c:05:de:7f:5e:ef:3f:8a:da:f4:1f:bd:33:d3:a5:
                    e3:87:b2:28:29:57:6e:c8:ab:e8:8d:cd:f9:e0:c6:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:96:7D:C6:F9:9E:D9:BF:8D:BA:B9:EA:D1:8C:B3:08:8E:D2:72:41
            X509v3 Authority Key Identifier:
                keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:99:f0:f6:ad:45:ec:49:0b:ab:f1:ca:ca:57:e8:4f:9f:c9:
         7b:9b:3d:c6:40:a9:3c:01:48:66:6e:3c:62:5a:6c:db:40:7f:
         d8:fa:0a:6d:c6:f9:2d:0e:00:15:42:ee:b1:b7:1d:7f:7c:4a:
         be:a7:45:f2:f3:6c:80:3f:47:4c:d1:1c:1e:cc:55:d7:a2:dc:
         e5:19:ba:d3:85:cf:29:fa:7c:09:c2:bd:f6:7d:9e:b1:39:46:
         69:87:fc:06:b9:66:a6:be:cc:4d:b8:07:7f:da:e5:3a:2c:f9:
         0c:90:21:b8:de:83:86:4e:e9:bd:4d:2b:49:14:64:09:cc:73:
         1a:0a:e0:d9:7c:5e:51:04:19:fe:df:cb:d0:b3:74:81:4f:84:
         2b:7d:99:41:c7:aa:96:72:a9:50:4c:21:3b:65:a8:4f:8e:0f:
         74:d4:db:70:47:a2:1d:bb:80:75:9c:86:7a:91:d9:dc:b8:4a:
         55:63:fc:03:cd:64:47:70:74:cf:56:2d:92:3a:b5:b0:03:3d:
         d7:cb:b8:88:87:29:91:8c:c8:12:00:17:d7:2d:b9:5a:5f:fa:
         f1:67:a2:e7:7b:77:3c:86:f4:a4:28:9d:0c:6a:0c:54:f4:ab:
         38:d6:40:3e:97:af:7a:e5:40:f9:66:68:d9:a7:61:41:f7:ab:
         a2:c5:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----