Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
File:                     Wy17v8Kblv03I3vOZ4bFO604D70.mft (raw, json)
Hash identifier:          6MhC67jgrpusc++uT6gZuk9z15ZZwQsCZxEJ05KHWT8=
Subject key identifier:   E9:F8:47:2F:56:BA:7E:D6:AB:9A:D4:14:E2:1E:89:6C:5A:E8:38:22
Authority key identifier: 5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD
Certificate issuer:       /CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd
Certificate serial:       01962F74F0C6B8936419F5DD46F990DFF4B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
Manifest number:          BC
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: Wy17v8Kblv03I3vOZ4bFO604D70.crl (hash: Fs182RW5kaALPfC7Bgd2lR1dtaNm3Md6PJh/8sGu0Z4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f0:c6:b8:93:64:19:f5:dd:46:f9:90:df:f4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=e9f8472f56ba7ed6ab9ad414e21e896c5ae83822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:ad:0a:3d:12:f6:b7:37:0e:b2:62:15:64:
                    78:30:d6:ae:6b:48:51:5d:00:52:be:a4:bd:3c:60:
                    a6:47:ad:64:de:a2:46:14:84:39:49:ed:8b:d9:e4:
                    94:7f:63:30:d6:5c:f8:2c:47:ae:79:8c:34:23:48:
                    81:87:f9:69:2c:c8:29:87:d6:26:54:bf:aa:d1:b0:
                    3c:86:ea:bc:e1:1d:d5:05:26:93:b8:4e:85:f6:7e:
                    8b:6f:4f:96:78:25:c4:09:1a:e4:52:b9:af:70:53:
                    6d:72:19:4a:88:50:19:31:a4:94:df:73:3f:9e:96:
                    1b:ed:d2:27:75:b7:49:26:5b:7f:67:16:b7:5f:2e:
                    84:17:5c:ac:bf:c4:c8:5f:a9:7f:72:31:11:97:96:
                    bc:c3:8d:5f:97:3c:71:02:4e:b9:5e:58:00:a1:c1:
                    43:63:02:bd:c3:51:13:80:70:20:ac:01:4e:39:42:
                    54:1e:e5:4f:ea:8e:48:d4:7f:ca:3f:df:34:5a:e4:
                    66:93:6c:e0:a9:a6:4c:d9:29:bb:17:77:c1:47:66:
                    fd:2e:eb:62:ae:38:47:31:e9:60:c9:bc:c9:7f:92:
                    52:9a:09:a5:94:72:36:63:7a:5b:66:92:69:85:d8:
                    aa:36:c9:5b:3b:5d:c3:a4:1d:8f:3c:26:f1:d4:6e:
                    86:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F8:47:2F:56:BA:7E:D6:AB:9A:D4:14:E2:1E:89:6C:5A:E8:38:22
            X509v3 Authority Key Identifier:
                keyid:5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b1:aa:8a:5c:ee:70:09:bd:d7:0c:25:46:5b:9b:4c:80:b4:
         42:2b:c7:f8:34:15:34:f2:dc:4c:6a:3d:95:ad:bd:23:f2:b9:
         25:e6:aa:70:af:8e:48:49:e3:44:db:0d:39:97:ea:6f:f3:e6:
         31:8a:a1:01:8d:1a:f7:b6:61:8b:bf:16:b7:ed:5b:b2:d1:15:
         6b:77:72:49:c2:b4:3a:b4:8f:fd:36:2d:ac:6b:59:ac:66:ed:
         21:6f:45:cf:e6:68:1d:54:85:08:de:ec:68:36:1b:2c:92:5b:
         56:40:1d:a5:38:89:76:6d:01:63:26:1a:6c:cc:73:cd:c9:2c:
         bb:b2:eb:c9:67:0a:68:29:f8:22:ca:17:82:17:53:c2:7c:98:
         be:3e:7c:66:d1:8d:55:08:59:1f:77:12:c9:13:01:5d:dc:c1:
         0b:6c:18:95:e5:ca:b5:b5:14:53:e3:f5:b4:d6:d2:d6:47:20:
         7d:4e:59:0e:69:68:c4:cd:31:61:6a:cc:45:f8:bc:a4:df:fe:
         4a:2d:a1:52:c9:6c:5e:29:35:fc:94:e4:65:18:41:47:2d:ff:
         5e:6b:db:f0:64:34:e6:9a:4c:77:a3:1c:0e:fe:7c:ac:7b:4e:
         5e:81:cd:a6:f9:70:f7:2e:aa:17:7c:36:41:8f:a0:a0:f7:04:
         ab:4f:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----