Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
File:                     WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json)
Hash identifier:          nfQsDBE5Mq5kUKVqH7SvboXf+u0tq7PdcRyMPQbiwL0=
Subject key identifier:   A3:42:BA:8A:68:B0:BD:FB:86:45:A2:1D:52:C3:58:E0:92:76:10:AE
Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
Certificate issuer:       /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Certificate serial:       01962F74857DDAC13CD16FD180FA7E57AB28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
Manifest number:          0D79
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: smmEPhqhs8QKyPcAxs59qb0cdFZuRlxzdMNo+CGB4l8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:85:7d:da:c1:3c:d1:6f:d1:80:fa:7e:57:ab:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=a342ba8a68b0bdfb8645a21d52c358e0927610ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:ac:68:a1:2b:b2:03:0e:67:47:aa:14:6b:
                    34:b5:b9:7e:8b:c2:dc:ec:90:93:a5:60:78:f9:8a:
                    55:9f:24:b1:8a:01:8a:84:cc:31:dc:0f:df:ec:a7:
                    58:f7:d4:a0:47:35:5e:06:bd:0e:c3:b6:a4:43:03:
                    0c:40:0b:4c:f0:11:f4:19:8e:47:a7:7b:23:49:ed:
                    39:30:14:64:95:8d:74:d5:9e:a2:aa:89:6c:2f:59:
                    35:aa:86:db:9d:21:ff:64:0e:bb:d4:a5:8e:e0:dd:
                    3e:f3:cd:44:52:56:1e:b7:fe:27:e0:f1:44:ae:6e:
                    3f:10:d0:7f:d6:19:43:0a:32:c1:e4:d9:33:fe:fc:
                    94:17:ed:9d:f2:7b:9c:78:fe:5a:4e:e4:6a:1a:61:
                    00:9f:b4:aa:ad:da:9a:fe:c1:f3:9b:f1:ec:e4:4f:
                    78:6e:3e:c6:70:3b:ba:ea:f8:37:72:8e:5f:c1:4e:
                    aa:5b:19:93:b3:4d:e7:3f:49:d7:d3:fb:54:d6:5d:
                    f4:05:17:c1:e6:96:95:05:95:61:32:9c:70:22:80:
                    10:af:d0:22:b3:31:5b:a5:99:1b:cd:e7:6c:66:06:
                    1f:b4:88:c3:32:5b:99:f0:a5:6e:10:41:cf:e0:bc:
                    d9:f4:78:70:be:4e:db:6c:c0:a0:6d:13:08:da:ae:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:42:BA:8A:68:B0:BD:FB:86:45:A2:1D:52:C3:58:E0:92:76:10:AE
            X509v3 Authority Key Identifier:
                keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:dd:dc:c7:85:ed:a3:2f:ae:10:64:0b:c9:08:b4:b8:6f:33:
         2c:37:89:1b:08:02:4e:64:41:e1:8b:58:c7:49:52:3a:5f:21:
         01:75:82:27:15:b7:c1:9b:65:f4:30:c4:81:97:2b:42:bf:de:
         17:5f:34:6d:95:7a:ae:fc:7a:fd:cc:4f:f0:ec:e7:36:bd:20:
         89:d5:d9:82:99:2f:57:81:b8:d9:5a:d5:af:42:c4:fd:5c:77:
         91:63:7b:36:e1:de:5e:25:21:ae:6a:50:7d:f5:0f:f9:7e:18:
         c0:7f:a7:8c:64:55:15:36:6b:b0:0e:33:aa:2e:c2:95:81:f1:
         42:5f:e1:5a:91:b4:ee:ff:3c:79:ac:d7:c6:f8:b2:37:64:ff:
         1f:1c:b1:37:a4:3f:43:5f:af:85:97:ac:b8:e2:4b:8e:53:c0:
         a2:93:37:39:ad:41:83:60:a3:b8:17:8d:10:70:91:15:89:ad:
         69:b4:22:c5:89:d3:4d:db:cc:f7:98:13:3d:47:75:59:da:dc:
         1c:81:07:9e:58:b1:73:a9:11:b8:4b:a6:4c:01:c5:95:bd:5c:
         1a:59:96:cf:4a:7c:76:0a:be:27:26:ae:00:7e:01:93:44:51:
         82:10:e1:20:c3:af:90:5d:54:ec:86:ac:d0:87:26:d8:cd:df:
         97:2f:05:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----