Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File:                     wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier:          SF4UD7CFK508+m7Nrlub+9euZkxR1Py59cbLz4NsAIE=
Subject key identifier:   C0:D1:C5:B3:82:BF:6F:D5:97:C4:57:45:4C:97:82:7D:45:3F:27:59
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer:       /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial:       01962E98B63ABCD655794B83799557FD939C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number:          0763
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: lxUboo6nDcWAQU/pXjs87Taa5sdQp1tYBbjlGwVg1PU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b6:3a:bc:d6:55:79:4b:83:79:95:57:fd:93:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=c0d1c5b382bf6fd597c457454c97827d453f2759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:b4:df:c6:75:1f:48:3d:a0:e4:43:58:23:
                    91:dd:a3:b5:89:49:f4:59:a4:f3:7a:f3:25:e1:08:
                    7b:39:ac:2b:b0:00:64:d7:fb:86:2d:bd:e7:81:3f:
                    f4:ea:a2:18:e4:c3:43:24:23:db:74:8c:9a:b2:3c:
                    18:8c:db:7c:26:4f:fa:de:1e:c9:3d:25:ea:a5:5d:
                    32:69:1c:ea:fd:a9:c8:95:5a:c1:1a:f6:b7:30:8b:
                    ed:c7:77:04:75:1d:57:1c:28:6d:74:15:2f:d6:06:
                    3e:92:c8:92:41:3d:06:3f:1a:7e:98:7d:72:d7:ff:
                    3d:74:35:1a:03:89:3e:78:db:85:b2:d3:42:61:21:
                    77:4c:e7:a3:4f:94:b2:76:24:eb:bf:b8:ea:cc:c7:
                    6d:d9:93:c0:01:cb:4d:5e:8c:a4:5f:c0:99:8d:80:
                    ee:27:eb:cc:25:0b:14:d8:66:13:5c:fc:3e:79:71:
                    57:f9:ab:51:d3:28:d9:1c:01:d2:2a:bb:eb:de:c5:
                    5e:3b:ec:5c:dd:97:01:40:f1:47:96:eb:fe:4c:c9:
                    17:1b:64:1b:52:3f:16:9e:e3:53:03:ef:aa:4d:c6:
                    1e:64:ba:cd:ab:aa:47:e1:19:f0:85:23:be:f9:c7:
                    39:bd:7f:54:b4:ae:65:19:7e:e5:c9:7d:5c:c5:48:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D1:C5:B3:82:BF:6F:D5:97:C4:57:45:4C:97:82:7D:45:3F:27:59
            X509v3 Authority Key Identifier:
                keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:39:b6:22:14:b3:c9:1c:aa:00:a9:cd:8e:8f:9d:4d:9f:
         7f:dd:0b:6f:04:6c:74:06:8f:76:dd:9e:19:a6:00:20:bc:cd:
         c2:bc:a1:9c:68:cb:41:8d:ad:78:2b:48:d4:6a:f2:be:3d:ab:
         9a:cf:b1:fa:d4:53:55:3a:6a:61:3f:12:0a:02:5d:ef:07:c4:
         6b:d9:ac:d1:68:0b:bb:5f:d4:ad:78:56:d9:2f:e0:c8:eb:e1:
         32:16:fb:ec:c5:fe:61:4f:77:3a:56:64:65:3e:24:5b:93:6c:
         28:d8:e3:0e:89:e5:5d:e0:ff:ea:e0:aa:92:e9:f2:a9:a3:5e:
         27:3f:57:b7:76:56:c6:e9:75:c7:55:4e:b5:20:29:53:3f:9a:
         00:1c:b8:6d:43:3b:ca:53:16:53:a5:0d:4a:88:78:fe:b2:66:
         c4:22:c8:d9:ee:b0:b5:36:44:fd:6f:14:7c:04:81:14:e9:36:
         91:d9:5a:b8:45:cd:fb:0c:5e:4c:e6:b6:92:e0:dc:66:9d:17:
         c5:ea:2d:f9:6c:26:03:a2:c3:85:29:b2:4f:d3:26:42:e5:78:
         62:41:46:02:08:9f:ce:f6:34:0c:b8:49:d4:a6:09:e3:57:d2:
         30:da:ab:ab:fc:91:c1:73:79:0b:52:c3:81:02:84:3a:88:0a:
         41:8c:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----