Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft
File:                     wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft (raw, json)
Hash identifier:          zD3N9f0c/isgpe6dw9r08uuuFcLmSrh4aa/p8skWP2Q=
Subject key identifier:   CA:81:41:D4:1B:23:0C:8F:1F:A9:D4:41:25:FD:13:9F:83:51:1D:29
Authority key identifier: C0:BB:F2:41:96:8B:65:B0:59:A4:CA:DF:E2:33:44:99:52:96:31:32
Certificate issuer:       /CN=c0bbf241968b65b059a4cadfe233449952963132
Certificate serial:       019546A2B8B4043D525459EA18609EC3151B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLvyQZaLZbBZpMrf4jNEmVKWMTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft
Manifest number:          0453
Signing time:             Thu 27 Feb 2025 09:00:24 +0000
Manifest this update:     Thu 27 Feb 2025 09:00:24 +0000
Manifest next update:     Fri 28 Feb 2025 09:00:24 +0000
Files and hashes:         1: wLvyQZaLZbBZpMrf4jNEmVKWMTI.crl (hash: UuXwSQ4Qmas+udSYJKw9/yt3l1giv9MpKsq4hcYp654=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:a2:b8:b4:04:3d:52:54:59:ea:18:60:9e:c3:15:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0bbf241968b65b059a4cadfe233449952963132
        Validity
            Not Before: Feb 27 09:00:24 2025 GMT
            Not After : Feb 28 09:00:24 2025 GMT
        Subject: CN=ca8141d41b230c8f1fa9d44125fd139f83511d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:01:9e:91:8b:b9:4f:a9:29:f2:81:3f:8c:
                    28:81:7b:bf:6a:f9:12:ed:50:12:3e:05:32:96:fb:
                    e4:15:10:fa:eb:ce:8a:64:53:04:40:d8:44:10:2d:
                    ea:a3:82:0b:f2:8f:44:23:91:cf:05:36:af:32:d0:
                    cc:12:67:0f:72:eb:ff:db:96:cb:e6:eb:15:10:8e:
                    c1:99:82:d3:30:7a:30:37:69:3c:f0:8a:42:71:a6:
                    24:ae:7c:10:70:22:bd:97:41:fd:4a:95:32:fb:74:
                    17:3f:ae:78:df:7a:1f:19:ee:7c:3a:f8:ce:22:46:
                    34:df:33:bd:cb:10:e9:b6:20:58:62:2e:05:9b:63:
                    c0:5c:7a:60:5f:61:7d:4a:d4:ea:09:23:60:30:74:
                    9d:60:93:a4:36:42:46:86:75:b2:7c:3a:57:f8:2c:
                    bf:b0:2a:57:8e:33:86:c9:9b:1a:06:28:b7:47:07:
                    a0:30:9f:46:f0:93:64:05:eb:f2:12:2a:52:5f:f5:
                    fe:b7:f8:fc:50:1e:94:51:ee:b8:ab:35:c2:b9:7a:
                    0a:11:93:c0:8b:16:da:e1:29:91:a5:6c:21:25:82:
                    61:10:62:42:c8:04:ec:2a:87:a5:24:31:c7:7e:67:
                    9c:c8:86:2e:0a:ec:07:26:70:10:b2:86:d8:99:14:
                    5b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:81:41:D4:1B:23:0C:8F:1F:A9:D4:41:25:FD:13:9F:83:51:1D:29
            X509v3 Authority Key Identifier:
                keyid:C0:BB:F2:41:96:8B:65:B0:59:A4:CA:DF:E2:33:44:99:52:96:31:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLvyQZaLZbBZpMrf4jNEmVKWMTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:26:08:42:0d:a9:ac:8d:c7:6a:95:72:b2:1f:3c:fb:27:71:
         a7:ba:6b:7a:0c:2b:e0:5e:1d:8f:62:eb:c0:66:c5:ae:e2:ae:
         23:45:12:02:89:52:f4:07:14:26:9e:ab:7a:af:e4:07:78:f9:
         17:33:16:1a:f9:f4:17:38:73:31:5d:0d:01:d7:0f:dd:94:a9:
         c8:4b:6c:34:7d:ab:89:51:63:66:d4:99:71:d7:b7:cf:d1:e6:
         12:6b:31:94:f8:8b:07:25:c0:67:3d:bd:7e:27:47:f0:87:b5:
         27:a1:1d:81:dd:43:0c:ce:46:4f:a1:32:af:aa:44:59:fe:c6:
         74:0f:c4:db:70:7e:8b:eb:44:4a:5e:92:27:42:77:d3:58:4f:
         a6:3d:50:50:dc:1e:f7:22:d4:2a:a2:ea:4e:3a:99:1c:53:39:
         00:9f:44:35:de:55:a2:cd:aa:a2:d4:0c:95:66:82:14:36:5b:
         de:31:5f:c9:48:be:ab:38:4d:84:c1:f5:8c:be:11:40:a5:5b:
         97:2f:8f:a5:bf:56:46:8a:09:aa:d5:e2:a2:fa:ab:ed:80:0c:
         0f:60:3a:6c:e9:ab:e6:6d:62:6b:6f:df:4e:8f:c9:35:0c:9c:
         f6:95:42:3f:fc:b3:97:ac:8a:2f:fb:27:d3:42:dd:cf:7e:10:
         a9:53:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----