Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File:                     Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier:          Lwd1XVC6Uqm+upFx4YSwBlazFX/qg2ycQ4MoLzlyHEw=
Subject key identifier:   32:FE:B4:C7:CD:A4:F6:9E:8B:CF:84:E1:CA:6A:CB:7D:8B:3A:DE:FF
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer:       /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial:       01962E9969CA66EBAA08F430B5D0DE143BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number:          0960
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: y5x7FRYew/sS6iYVdZ3HzXx7l8ttVBNXVUzmxmrJGoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:69:ca:66:eb:aa:08:f4:30:b5:d0:de:14:3b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=32feb4c7cda4f69e8bcf84e1ca6acb7d8b3adeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:e5:d3:56:37:a7:d5:79:37:a4:7f:b6:48:
                    60:7e:90:7a:48:81:55:78:fb:d6:48:2b:88:30:6d:
                    0c:b7:1d:be:ff:44:08:06:8c:92:27:9c:7e:11:62:
                    9f:5f:5a:a9:d8:b0:6d:1b:3a:5f:16:38:b7:70:5d:
                    93:48:44:32:6e:3c:7c:b6:e3:07:26:f7:50:15:4b:
                    a1:f7:f1:83:c5:0c:01:39:e2:c9:2d:10:a2:a9:25:
                    3e:74:86:b9:79:27:c4:73:d0:dc:86:9b:39:42:a1:
                    9e:e6:41:bd:32:cd:48:73:58:33:65:1d:74:d2:64:
                    2c:27:1b:be:70:f6:39:a6:d4:28:d3:6d:f8:3e:88:
                    3f:27:40:67:b0:1d:f4:fe:26:21:f9:fb:5f:7f:99:
                    bf:9d:47:d2:ad:93:d8:d0:60:1d:a3:0a:50:53:34:
                    39:d8:96:25:74:a0:f4:28:e9:0f:e7:ce:c0:3e:b6:
                    1e:9d:5f:45:9c:6d:a6:7e:dd:f6:72:01:b4:23:af:
                    f3:5e:dc:0c:81:eb:e1:9f:a6:42:3b:3d:84:f4:99:
                    38:28:7f:30:a3:4b:f3:90:93:d1:ff:28:3c:f4:ee:
                    2b:27:bf:41:ce:ba:aa:13:e7:ad:f0:ba:63:96:af:
                    87:36:41:a5:17:d4:aa:b1:0e:dc:04:9d:a8:1e:6e:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FE:B4:C7:CD:A4:F6:9E:8B:CF:84:E1:CA:6A:CB:7D:8B:3A:DE:FF
            X509v3 Authority Key Identifier:
                keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0d:ee:99:ff:78:6c:a8:ac:53:dc:e2:6a:ba:b7:65:8a:4a:
         c4:1c:0c:dc:75:fe:cc:1e:66:12:93:95:9f:f5:97:70:bf:8b:
         0b:bb:b8:2b:04:c0:b1:32:b5:4a:e5:ae:4c:4c:a4:75:99:36:
         18:23:f9:16:90:6e:f3:ad:e0:44:b7:6c:75:f0:d9:7c:f7:10:
         44:c5:4b:b3:b0:8f:08:41:80:b6:ac:a2:fa:0c:3a:ee:c7:1c:
         1c:ba:5c:3f:fa:09:8c:55:ba:b0:e7:18:b8:9f:5d:da:8c:34:
         95:db:3c:ee:b7:e0:49:ef:6b:64:e1:21:5e:54:e7:5d:4f:8f:
         35:af:09:ec:b5:17:5f:bf:15:fd:d3:d2:ea:40:1e:79:95:d9:
         8c:50:1b:01:79:2a:36:a1:5d:1f:83:79:01:e2:2a:08:93:67:
         15:24:e7:b5:e8:37:69:4e:20:21:25:70:a5:d3:b6:e2:38:18:
         ef:92:06:64:05:5a:7f:3f:20:94:1e:04:92:41:20:6b:df:ac:
         32:e1:d9:cf:3d:ea:12:16:73:10:e6:4d:bc:97:ed:2c:d0:e8:
         4f:d4:31:f6:9c:19:08:d8:e4:c5:2d:64:54:93:ca:2f:7f:b3:
         8b:9d:7e:35:44:36:de:eb:da:17:9d:28:6f:73:de:85:e4:b3:
         89:a9:0e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----