Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File:                     wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier:          PM24+0Dgt58m2iCQMPgMzGo3cburn9SpLIIsuhZuBtI=
Subject key identifier:   43:9C:A4:B5:19:F6:44:57:07:5C:F6:C7:9D:8E:F3:41:40:79:15:C2
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer:       /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial:       01962DF3CE1A0E093E4A83EC6266F2FA67A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: 5UZnJWwmjl6so06C7tFqneUOq/ktefYzkqmDBEsIK9c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ce:1a:0e:09:3e:4a:83:ec:62:66:f2:fa:67:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=439ca4b519f64457075cf6c79d8ef341407915c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:5c:e7:b2:ff:65:cd:76:2c:58:f8:0f:30:
                    b6:c4:6b:cd:8d:93:68:3a:9f:48:89:39:4e:41:95:
                    4d:d6:6e:c4:22:4a:96:1c:52:df:d3:9e:0b:9e:d9:
                    a4:d9:ba:31:70:73:c1:43:94:c3:28:ff:78:6b:aa:
                    c1:69:a4:74:ce:83:c3:01:83:29:22:9f:9f:3b:56:
                    40:85:2c:d0:e3:5b:fd:ea:54:fe:cb:15:f3:28:7b:
                    4b:aa:38:7c:6d:a2:51:3a:41:b3:f3:2a:d9:ef:ef:
                    8e:90:cd:64:47:f4:3c:72:23:ef:24:08:9a:19:bb:
                    85:1f:3b:e0:2e:29:25:7c:d4:52:62:77:f0:9f:6f:
                    01:2d:ca:c0:25:7c:c9:15:61:3d:a9:17:41:fd:c8:
                    d0:c8:ae:80:8d:f6:82:d1:e7:b0:01:65:a0:3c:8f:
                    ce:f3:5e:05:92:73:1b:cf:cb:c4:6c:b8:af:fb:ca:
                    02:ea:7b:20:bc:b4:04:ba:b5:e0:f7:00:fe:71:2a:
                    9d:60:c9:10:ff:55:33:79:70:50:48:17:aa:5d:c0:
                    0f:3d:d5:e0:6a:0a:bc:ed:d7:d9:6b:c1:39:ff:04:
                    06:b1:fa:c7:21:9a:bf:e7:a0:02:5f:43:01:51:ab:
                    f1:ac:b3:33:2f:93:df:29:e2:22:00:4b:05:0e:f6:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:A4:B5:19:F6:44:57:07:5C:F6:C7:9D:8E:F3:41:40:79:15:C2
            X509v3 Authority Key Identifier:
                keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:4b:31:9a:2d:a2:95:e7:89:5c:39:a4:f0:1e:25:b6:94:e8:
         81:a9:f4:d9:b8:d2:af:3d:5d:04:cd:49:4f:4c:d6:b9:2c:97:
         5c:26:cd:f6:51:f0:a6:d8:90:28:eb:3e:44:1e:24:26:b6:39:
         3a:d2:37:d0:4f:34:61:cf:85:32:be:d2:d2:60:de:af:40:b6:
         98:38:6d:a5:64:68:6e:37:b9:05:47:59:b7:bf:a7:cd:da:b1:
         77:ac:4b:40:03:9a:23:8d:c9:eb:00:79:24:47:97:80:55:cc:
         b7:22:46:f0:a3:9f:74:d4:3c:ee:99:6d:aa:66:5b:6e:71:75:
         53:f4:7a:af:b1:f5:14:7a:7d:72:5c:d9:ff:cd:37:1d:f7:9d:
         14:fa:d5:ed:22:2e:6b:f1:22:ab:9c:24:4b:31:e1:ad:b3:1f:
         62:c4:cf:df:a9:90:f9:be:33:74:81:36:4f:ef:58:ae:74:bc:
         0e:64:32:9f:24:04:6b:c4:02:e7:80:8f:93:3a:cc:9d:71:ad:
         89:9a:4b:7a:1d:6e:29:bc:6e:25:e2:16:7d:c4:54:68:95:9b:
         86:55:cb:ef:ff:b6:41:9c:bf:fd:e2:70:85:1d:3c:28:4b:56:
         74:db:ab:b2:e1:46:54:c8:6f:02:23:2a:d5:d4:35:63:92:38:
         09:cc:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----