Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File:                     wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier:          GT7R9K7YMTclH1pEx9JjIOwzBY1YAarUa6cJhP/SB6g=
Subject key identifier:   68:AC:62:D1:95:88:FD:9E:1A:0B:D0:79:86:F6:07:9C:4D:9E:CF:77
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer:       /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial:       01962E61B33E9BFD22ECDDD97003B7EB7C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number:          0683
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: 1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa (hash: T6hhaFtSwM402ZP8Qb9OKu3BkFQRH+gZ6KFIIvNDI0M=)
                          2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: O1iDKmz9ISM8qVOJ69cFmbPIMIqGuvRllA4iRcFkbyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b3:3e:9b:fd:22:ec:dd:d9:70:03:b7:eb:7c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=68ac62d19588fd9e1a0bd07986f6079c4d9ecf77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:a1:7d:ca:cd:c2:a3:74:80:6c:98:3c:49:
                    80:e4:81:e0:79:f1:19:11:84:10:db:44:31:d3:59:
                    49:25:62:f7:89:22:6d:36:94:3c:78:de:a9:23:4f:
                    99:55:49:fd:a2:de:d0:f0:a0:e5:e0:9a:6e:32:dc:
                    60:ce:4c:40:19:f5:2a:a4:df:28:7c:8c:a0:7c:be:
                    cc:04:d8:dd:92:c6:df:f1:9a:0a:50:68:88:64:60:
                    bd:a8:e4:72:19:3c:38:29:1c:1c:6f:20:68:04:92:
                    19:a6:97:37:84:8f:16:5d:92:2d:8e:52:95:76:aa:
                    c1:e7:be:49:c7:ce:6a:85:3c:99:d5:80:3d:25:b7:
                    6f:8a:0e:d8:56:54:17:0e:88:51:e4:aa:38:96:76:
                    fe:9c:b1:65:e9:ee:e4:a0:08:22:65:1d:18:e8:31:
                    23:14:51:80:66:d6:42:57:c2:dd:ce:0e:87:b6:52:
                    ff:dc:c0:8b:66:60:90:a3:c9:99:92:22:cf:d2:2d:
                    c2:75:f4:bc:0c:bd:a7:01:b4:b5:8b:15:a8:01:4a:
                    0d:ea:c4:22:a7:25:46:69:68:c0:d0:dc:0d:4a:06:
                    32:03:3f:28:ac:22:05:2b:22:7a:44:4b:fe:20:88:
                    79:1c:54:15:f8:5b:ca:c8:da:d9:49:01:7f:32:d9:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AC:62:D1:95:88:FD:9E:1A:0B:D0:79:86:F6:07:9C:4D:9E:CF:77
            X509v3 Authority Key Identifier:
                keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f8:a3:38:5a:d1:3a:e0:7a:1c:ed:5f:46:bf:84:4c:30:92:
         9a:d8:3c:98:99:fe:45:f6:5c:4f:73:c0:68:1d:f2:eb:f7:af:
         5f:f7:a6:8b:4d:1a:bf:7b:bd:c5:b1:4c:ea:c4:d6:9f:3b:af:
         30:ab:c9:26:be:18:0b:c8:a5:36:93:db:13:30:3f:e6:25:4e:
         8a:93:d1:50:1e:66:0c:ab:23:33:90:d1:04:96:bf:43:b0:4f:
         bc:0e:40:5d:10:8d:3d:0d:21:c4:c0:31:f3:2c:ad:4f:62:eb:
         e6:15:49:80:5f:6a:fe:99:b5:9f:65:59:bb:68:81:7d:92:da:
         5d:ce:21:35:89:82:ea:e6:2b:38:5c:23:3d:d4:cb:9b:a6:d0:
         25:11:f9:1a:bc:61:55:d6:f7:1c:f4:12:15:ea:fb:8f:ce:6b:
         36:2e:92:92:a4:7f:98:86:ce:78:66:8d:cb:9e:5c:68:2e:f9:
         f4:57:28:4c:9b:46:41:90:45:53:08:f4:9b:95:f4:72:04:80:
         84:3d:b0:a3:75:c4:58:b2:e5:ea:1e:93:77:7f:da:4c:e2:2b:
         9a:58:4a:f3:76:df:83:47:b0:dd:0d:7c:03:ab:5c:15:45:40:
         42:b9:06:da:a5:fa:a5:57:2e:ea:53:7f:30:6b:d3:eb:f4:c8:
         0e:72:b1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----