Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File:                     wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier:          UDftv7KycIISbL/lIOHdfgGzqX0U4r1pugcdGoHrncc=
Subject key identifier:   8F:FE:38:1E:CE:5F:A3:61:D9:BC:DD:AD:8A:3C:51:41:21:06:D5:15
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer:       /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial:       01962E9977186C071F5CC779C3F6025708D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number:          0B50
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: ttL0CpmjPWlOULBiJEkRL1fgC7pnXzT7JR+WS975rPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:77:18:6c:07:1f:5c:c7:79:c3:f6:02:57:08:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=8ffe381ece5fa361d9bcddad8a3c51412106d515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:3f:15:37:6f:fa:c0:ec:73:5d:02:ee:8a:
                    cc:84:18:df:b3:49:2c:58:68:5c:b5:ee:16:1a:0d:
                    4e:30:91:93:e3:95:50:cb:82:4d:8e:c7:7a:f3:7b:
                    0c:87:d0:35:69:da:1b:a4:a3:80:fe:f8:a7:b5:2a:
                    23:e8:2d:fd:bd:38:91:41:82:b5:a0:d3:18:ea:6a:
                    ff:92:39:cc:e2:7c:b9:42:78:f0:f8:15:bf:28:5c:
                    a2:87:b7:61:44:3f:b7:e1:d8:2c:15:b5:16:96:c7:
                    f2:08:34:a6:29:ce:0f:93:33:f1:bc:00:3a:b5:5f:
                    9c:1f:44:ac:67:98:51:10:d0:da:42:72:dd:d0:92:
                    db:7b:15:1e:56:97:10:97:35:46:ce:be:56:4e:26:
                    d4:11:19:11:0d:92:8b:06:72:63:71:bc:10:74:01:
                    57:ac:28:a2:03:88:6c:60:ba:a5:58:05:f2:5d:86:
                    d8:8e:fe:a6:8e:ec:f7:68:cd:c7:c1:d8:10:10:b8:
                    37:29:4e:ea:14:60:5b:a7:8e:ca:94:6f:03:13:07:
                    b9:95:11:85:5f:de:07:c0:24:21:70:79:5d:cc:06:
                    fa:e4:63:6d:e7:2e:51:18:98:09:c4:b8:d6:1d:aa:
                    6d:25:60:15:ff:71:9d:0f:21:70:69:a1:f6:d8:8c:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FE:38:1E:CE:5F:A3:61:D9:BC:DD:AD:8A:3C:51:41:21:06:D5:15
            X509v3 Authority Key Identifier:
                keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e8:51:1c:24:84:ee:36:a0:5e:59:20:42:82:73:29:ac:83:
         02:9f:5c:a2:4a:5e:34:d6:bc:d2:3a:71:95:4b:13:52:af:7d:
         f2:b9:21:ad:4c:f2:1f:32:5d:12:01:56:e2:56:65:b4:4c:66:
         08:59:18:1b:da:03:cb:b1:74:5f:71:b4:a3:4a:bb:98:c4:e3:
         26:43:29:ce:cf:ad:c6:f2:e7:df:8f:2a:6d:c4:30:e3:80:2f:
         a5:db:58:3a:48:0e:7c:de:ae:8f:76:63:84:32:0b:74:3e:0c:
         3a:39:bf:68:ee:9d:76:73:8c:2d:28:18:bc:0c:c3:3f:4a:0f:
         91:bc:53:19:54:a5:f3:f3:9b:e0:bb:21:f3:3a:c5:ef:b4:24:
         a6:c0:87:6e:bf:48:b7:bd:49:15:86:91:f7:89:0f:b5:09:4b:
         14:0e:53:e5:b6:ae:ae:89:9e:37:4e:a9:e3:f4:62:30:66:fd:
         ae:e1:40:de:f0:bb:f0:04:cf:a3:8c:bf:11:b2:db:e1:9c:89:
         9c:15:8c:7f:54:18:30:15:39:21:0f:6f:4c:c4:a4:35:13:85:
         09:4a:0e:55:78:09:e5:9d:ad:80:29:4f:e3:2d:6d:cc:dd:06:
         37:c8:f5:39:0d:da:3b:f8:4c:9a:76:e7:04:da:a3:4f:dd:c9:
         ea:ba:af:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----