Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
File:                     wtVzsWdwcfL9bUS4QBthISBZjM8.mft (raw, json)
Hash identifier:          sgru9Nold4+jJwELorw7igVbV4p+TK7EKaVo1nqQQe0=
Subject key identifier:   B8:27:DA:A3:3D:3C:D7:69:C7:13:33:30:C0:E7:35:31:EF:99:E6:F6
Authority key identifier: C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
Certificate issuer:       /CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Certificate serial:       01962E99033C6F266D33CC5A26906F4B3FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: wtVzsWdwcfL9bUS4QBthISBZjM8.crl (hash: nQfnr8AEwbksmKaTk/lFKYWNMtAa77BHXxE5wzKVMW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:03:3c:6f:26:6d:33:cc:5a:26:90:6f:4b:3f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d573b1677071f2fd6d44b8401b612120598ccf
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=b827daa33d3cd769c7133330c0e73531ef99e6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:49:53:36:60:8f:75:38:8f:67:85:53:7a:
                    f1:13:75:0f:f8:5d:1f:10:49:ab:07:38:bb:e1:7a:
                    5f:4e:66:6c:b5:14:a2:0f:35:69:43:37:db:6d:e5:
                    32:b2:e0:8e:2a:ba:04:1e:5c:36:af:4f:36:40:39:
                    3e:c9:8e:a9:36:08:95:4f:da:27:66:59:77:d2:68:
                    09:25:85:f7:4e:95:86:88:73:57:d4:1c:4c:40:53:
                    6f:ec:ae:95:9c:4f:ae:af:44:e1:7b:f9:23:e8:a0:
                    68:78:a2:f7:b4:c9:59:ab:29:38:d0:2e:43:58:62:
                    8a:57:f2:7e:a1:e0:dc:ed:50:dd:34:3f:0b:3b:fc:
                    86:6e:8e:f2:1a:28:14:bc:4c:20:57:17:f3:8c:d2:
                    81:04:9a:6a:21:1f:3b:62:70:61:52:8f:b5:6e:a0:
                    f2:5a:12:e9:b4:56:d0:54:3c:9f:eb:d2:41:2d:f7:
                    5d:07:3c:8e:6c:b2:f5:a3:01:47:c5:99:11:f9:17:
                    42:3c:34:04:cf:9f:2b:9f:63:c2:b3:9e:b6:2d:ef:
                    22:03:01:42:aa:8a:10:dd:68:9d:10:99:de:f4:fa:
                    82:53:a2:c6:f9:ba:39:93:61:19:da:d6:6a:b3:b4:
                    9b:48:fc:77:7a:38:5e:b7:6f:5c:18:54:aa:30:04:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:27:DA:A3:3D:3C:D7:69:C7:13:33:30:C0:E7:35:31:EF:99:E6:F6
            X509v3 Authority Key Identifier:
                keyid:C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:34:fe:cb:e0:6c:5b:4f:df:2b:b5:8e:2c:ef:79:ad:3b:63:
         31:d5:11:0a:e4:ee:b2:d7:d8:25:1b:c4:43:43:3d:c3:08:29:
         47:8e:98:c1:85:93:a0:bd:06:7f:c9:91:94:88:68:5e:01:6b:
         70:17:90:1a:80:a7:00:51:1e:eb:60:d7:11:12:1b:10:a0:9f:
         0e:43:ca:c4:c2:a2:9d:b9:2e:bb:09:3c:04:16:1e:ef:f2:9d:
         3b:a1:aa:57:62:4d:7d:93:e4:78:36:34:d8:83:52:f4:b8:49:
         bf:31:65:be:56:50:9f:7e:a8:a1:fb:4e:77:04:39:20:b2:01:
         d2:cc:4c:c9:14:a0:47:59:b1:f3:d5:84:b1:58:47:72:af:e4:
         6f:4c:ce:17:0a:57:bf:b4:1a:c4:a0:ba:1e:4f:84:d4:c3:38:
         1b:ae:be:5b:e1:e7:c6:ae:f1:30:59:13:d3:a7:54:e9:a1:3c:
         fc:6d:79:9b:0a:6e:ca:1d:7b:53:57:d2:06:51:ec:ff:8b:48:
         15:1d:53:13:14:a9:aa:d4:c4:b1:49:99:13:41:04:a6:c4:be:
         59:9d:9c:c1:ef:ef:ac:cb:d5:26:c7:a3:ec:4f:08:c1:fd:a8:
         a8:de:50:82:17:c2:fe:5d:7f:98:26:22:20:8d:7c:13:05:bf:
         a9:5d:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----