Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
File:                     WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft (raw, json)
Hash identifier:          jNR5ZsUvhtW+CEDix0Lgq44fZpKfnJ+oUQk3NQB4OGk=
Subject key identifier:   52:F4:F4:CE:6B:6F:83:B2:73:62:01:7E:93:25:44:41:84:4D:4B:90
Authority key identifier: 59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
Certificate issuer:       /CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Certificate serial:       01962E997358AC58555C423789658E1EBA9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
Manifest number:          133A
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl (hash: Kev8zx2gxagCuVqGX3ljNBjUfap+vEBvpLiSgRwIA+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:73:58:ac:58:55:5c:42:37:89:65:8e:1e:ba:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=52f4f4ce6b6f83b27362017e93254441844d4b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:1b:53:fe:fe:38:ad:57:11:5c:48:27:5e:
                    38:4f:b8:17:8b:b9:4d:32:69:71:3c:0e:ac:c9:08:
                    f8:82:27:44:5b:55:22:15:af:ed:de:42:f7:fb:c8:
                    85:39:bc:7e:83:35:b4:70:c6:c4:9d:b2:7c:c4:a4:
                    52:a0:5b:70:7b:18:f6:23:8e:90:41:32:b3:62:1f:
                    c8:a1:9a:bf:0a:88:63:fb:e6:04:1f:9d:0b:82:a7:
                    56:36:83:09:86:4b:e4:0b:e4:3e:3a:d6:26:e2:67:
                    15:55:eb:b0:93:da:a5:24:65:f5:24:e2:28:69:f8:
                    67:37:a9:a5:ad:39:e4:ec:c6:e5:da:bc:d8:9f:51:
                    e6:1e:19:61:2d:78:ec:c6:ed:e5:28:4e:1c:63:36:
                    e4:8a:a6:83:fc:e1:f3:b7:bd:8c:a5:b5:1b:66:62:
                    6b:16:58:ba:a4:11:cc:bf:fe:ba:8a:ae:c8:bf:ed:
                    d0:70:9c:35:e3:dd:d6:d8:5f:6a:c9:ca:8d:4d:c9:
                    9f:61:68:75:15:0a:8c:9a:4d:b0:01:17:a6:d3:cd:
                    b9:ec:a1:ce:46:0e:f7:4d:00:84:05:e8:42:0c:d2:
                    1f:a8:ac:06:45:ef:16:87:2d:54:a0:7d:d3:07:23:
                    83:09:07:c4:31:fc:cd:6d:b5:9e:45:cd:ac:df:c1:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F4:F4:CE:6B:6F:83:B2:73:62:01:7E:93:25:44:41:84:4D:4B:90
            X509v3 Authority Key Identifier:
                keyid:59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0a:30:90:e9:31:7f:5c:35:a4:48:f2:97:af:87:34:10:7b:
         e2:95:59:dd:68:26:44:99:89:fc:cf:b8:1c:f8:15:ec:7b:8a:
         bb:be:66:2f:9a:c6:5d:ac:be:e0:fb:f4:36:1d:05:45:37:82:
         11:1e:3c:a0:d5:ca:16:6e:e6:86:20:25:16:49:b5:38:15:4e:
         79:e9:a8:c1:33:79:7e:30:79:91:3b:fb:4a:79:2c:98:4c:fa:
         da:bf:ca:b4:80:1f:f6:ee:fb:ec:1f:3c:33:af:f0:24:b3:8e:
         da:70:ec:b0:ba:30:9c:fa:7d:55:6a:65:63:76:7f:50:6e:84:
         28:41:36:88:b7:2f:3e:fd:6d:64:0a:cb:9a:07:b8:47:4f:d8:
         b4:d5:17:57:81:23:e9:b0:e4:e0:b4:5c:db:87:a7:b1:e1:c3:
         e6:f1:76:bf:5b:3b:03:7e:fd:20:ae:58:51:57:da:b4:87:d9:
         d5:62:c0:a4:39:47:ce:f4:e3:41:e3:94:2b:e4:f5:45:f7:19:
         02:1d:e3:b4:04:1b:55:2d:23:15:a8:d3:5f:8e:60:b5:69:7e:
         86:d4:26:73:56:47:a0:06:3b:a3:ce:fb:37:b1:16:77:09:87:
         8a:6b:c0:c8:9d:84:85:65:b7:6b:d1:0b:f1:c1:3c:b5:19:37:
         5d:95:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----