Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File:                     dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier:          wjzZc5mxRk7ndH2PxV4w7KTuAaZnrkp0SWGEfZZFgVA=
Subject key identifier:   CB:80:DD:1B:F9:DB:16:E7:9F:BD:7B:D1:50:CC:F9:2F:05:41:44:2A
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer:       /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial:       01962DF404704B60D32FE3C6DC52081D91E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number:          128E
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: 9QJAgmxDSl5/DTbcZZYcAWLCfeXogMV7GJiAbwSe4m8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:04:70:4b:60:d3:2f:e3:c6:dc:52:08:1d:91:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=cb80dd1bf9db16e79fbd7bd150ccf92f0541442a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:a3:22:0c:60:e9:dc:c0:ca:40:16:f7:76:
                    14:56:c0:25:32:57:e1:e2:e2:57:c9:bc:a1:7f:56:
                    17:06:93:c3:fa:77:58:5a:3b:05:09:80:f1:9c:d6:
                    37:a3:67:dd:99:7b:f8:27:49:81:09:2e:8d:23:cd:
                    59:66:23:67:a2:88:c1:15:93:b2:a6:c6:f5:8d:7a:
                    d2:2b:83:13:3d:bd:3b:cc:6e:8a:99:8f:c6:b2:af:
                    9f:e1:5b:a4:08:9f:16:49:6f:8d:9e:bc:90:08:f0:
                    bd:aa:b5:f6:a7:58:d3:11:1b:06:b7:e6:c6:2b:3e:
                    25:b6:62:f1:02:4e:84:9c:cb:fa:6e:4f:aa:22:39:
                    12:30:86:25:ac:b0:50:17:44:5e:e1:88:bb:fc:31:
                    3a:1e:bf:35:3c:6a:8d:c2:54:83:05:0b:19:6e:de:
                    a6:5e:ae:ae:bc:f0:96:24:a5:dd:13:eb:8f:a1:8d:
                    5a:b5:6a:30:6f:bc:f3:a1:16:e5:19:d7:c3:0f:12:
                    cb:44:78:45:d3:f7:07:b9:b9:af:ab:52:d7:59:9c:
                    3a:be:dd:c0:28:36:31:49:6d:b0:d8:a8:41:1f:9a:
                    da:c1:62:7e:52:34:ff:a6:07:d0:3c:6d:da:2a:f8:
                    9e:9f:57:87:bf:95:98:a9:16:ce:ff:43:95:c2:36:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:80:DD:1B:F9:DB:16:E7:9F:BD:7B:D1:50:CC:F9:2F:05:41:44:2A
            X509v3 Authority Key Identifier:
                keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:52:b0:10:8a:4d:dd:e9:08:3a:e7:1c:b9:8f:f7:65:94:20:
         21:b5:9a:de:fb:8b:fb:07:6c:62:de:56:c0:da:7a:48:9d:dd:
         db:19:c7:99:8d:69:bf:f3:3e:7b:26:8f:d7:b4:5a:df:1d:cf:
         47:42:ed:60:a8:c6:81:60:55:9b:fb:9c:3b:d3:49:2d:ca:6f:
         00:25:8d:4c:b6:d4:bf:c5:0c:7b:62:5e:3f:73:26:a5:3e:fa:
         52:5e:7d:7e:b4:3a:8a:38:30:3d:ba:8f:cc:a0:ef:3d:61:1b:
         06:de:07:da:b8:c0:b3:2b:40:a5:b4:5f:97:3d:83:d2:4f:16:
         50:ea:3f:92:fb:7d:b8:ea:e8:93:22:b8:68:ea:71:15:32:c9:
         85:ad:31:56:20:8c:85:7c:e6:a9:67:dc:e4:fa:c2:37:10:b1:
         46:9b:e9:54:92:95:76:95:df:23:2f:1b:7c:1f:fa:0f:4a:0f:
         5d:b0:77:3b:b4:67:13:17:f4:9c:84:8d:5e:16:fa:2c:2b:fb:
         e4:67:07:ba:1b:3c:9d:2f:f5:b9:47:3e:62:88:0c:c7:cf:07:
         7e:1d:a3:f9:0d:0f:45:72:3f:8f:aa:1b:26:a0:d9:4a:34:cc:
         b7:da:fb:aa:33:5d:14:d1:b2:78:44:a9:d5:3c:fb:0d:02:7a:
         c6:3d:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----