Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File:                     wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier:          scjZDIO1FXs67ZVWHev4Od4+3Xb71Yc4ymugPWTkecA=
Subject key identifier:   D8:84:B1:EB:4F:02:4B:7F:6B:FF:B6:2B:C0:B6:96:C3:7F:06:74:2D
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer:       /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial:       01962E987E1EF58576514053599A40F78FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number:          0BDE
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: e7q69DkQ+zrTchl5ygyzAxso9n7akb22AUWBQ/6rjNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7e:1e:f5:85:76:51:40:53:59:9a:40:f7:8f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=d884b1eb4f024b7f6bffb62bc0b696c37f06742d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f2:64:2e:32:56:b0:8d:3d:e2:e7:3b:60:93:
                    01:4b:1b:d2:9d:28:d8:74:2d:d9:5b:d6:b7:df:1d:
                    40:e5:9c:b9:f5:9d:35:a6:41:75:ba:ae:a8:09:77:
                    59:19:c2:7f:4c:24:e3:28:c8:a4:cd:6e:28:92:e3:
                    7d:db:2a:6f:e0:ab:2f:12:9f:ba:75:f8:2c:30:b3:
                    1c:b1:a0:4d:bd:7b:64:59:81:64:35:b5:54:a1:67:
                    06:3a:14:18:26:9a:2b:76:12:6f:78:13:bd:5b:15:
                    20:1c:78:72:7c:15:ba:4b:e3:2f:be:ef:9f:06:cf:
                    0e:b5:af:14:14:7f:80:b5:30:59:57:b9:0c:08:44:
                    7b:18:45:22:6c:1e:e9:4a:ab:e3:ef:24:20:3c:de:
                    0b:23:93:b8:0b:1c:c1:50:02:aa:68:6e:90:f0:16:
                    0d:8f:67:46:3c:8d:1a:60:c6:1e:41:0e:83:9c:20:
                    d8:e1:af:1c:12:fa:a6:51:11:9b:5c:6c:29:31:09:
                    c8:41:53:d6:02:e8:3a:0a:13:b1:0a:e7:51:ab:ca:
                    a6:dd:b8:80:7d:e9:e5:67:db:a9:4f:2d:dd:c1:30:
                    5c:f0:eb:bc:e2:2f:a3:f0:b1:75:83:7a:38:22:64:
                    08:56:06:a0:e3:f8:04:64:96:40:f4:9d:69:96:d4:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:84:B1:EB:4F:02:4B:7F:6B:FF:B6:2B:C0:B6:96:C3:7F:06:74:2D
            X509v3 Authority Key Identifier:
                keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:aa:ba:53:05:08:8c:77:f9:41:7d:00:aa:d5:5c:ab:04:3a:
         d0:dd:d4:d6:4d:49:eb:fc:40:b4:07:d3:5a:20:85:28:24:4e:
         c9:51:91:2e:d7:5b:50:b2:94:20:b5:4b:01:4c:bb:50:2a:d9:
         96:f0:5e:1b:df:34:c9:92:78:c3:f3:8f:11:0e:b8:45:86:e4:
         47:a2:4a:0f:c5:ce:fa:3f:09:ce:6e:ab:43:7f:23:f7:8b:e2:
         a1:69:a6:f1:eb:ac:74:0f:f0:4a:2e:f1:0b:34:4a:ac:0e:03:
         4b:9b:91:76:2b:7f:92:ed:ed:53:f1:dd:19:b7:84:e4:82:3b:
         f8:56:bd:98:2e:85:71:c2:d3:9e:2a:1d:c0:6f:ff:fb:a1:c1:
         fd:16:84:46:76:f8:b7:e2:a0:3a:90:0d:e7:b8:fb:0b:6e:4a:
         72:14:06:31:03:28:f6:3f:4d:f2:0b:ca:f0:5b:c8:9d:2f:b2:
         9a:51:ef:40:6a:3e:2b:1e:96:4a:ba:c2:7b:65:c4:f5:b0:c3:
         90:4e:b7:b8:c3:b9:fe:71:22:36:3d:b1:9f:4e:e5:6d:02:cb:
         91:b6:68:23:05:ba:f0:13:39:7b:d4:18:81:29:ca:ff:88:f1:
         4f:92:ac:0c:55:e0:31:eb:e8:d0:f2:8f:41:1d:57:24:e9:83:
         49:8e:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----