Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
File:                     wOuGHF00WeA57O8QTP2T8ggnx0U.mft (raw, json)
Hash identifier:          pE5ElCqJIEfY56FNcGSuVGf4vcUlyf+3dCs9xJVGy7U=
Subject key identifier:   9E:3F:27:9D:64:C7:14:F4:46:87:1B:F1:1D:A1:83:77:14:B6:26:CC
Authority key identifier: C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45
Certificate issuer:       /CN=c0eb861c5d3459e039ecef104cfd93f20827c745
Certificate serial:       01962E2ADD4752ACBDDC692A10F17B047C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
Manifest number:          8A
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: wOuGHF00WeA57O8QTP2T8ggnx0U.crl (hash: ixcPWRORwh/CfBqC49L4if4zizdbp0acyyPyvbHabZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dd:47:52:ac:bd:dc:69:2a:10:f1:7b:04:7c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0eb861c5d3459e039ecef104cfd93f20827c745
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=9e3f279d64c714f446871bf11da1837714b626cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:a5:34:53:25:c9:8f:c9:9f:5d:5d:b7:a5:
                    96:e4:52:4b:8a:7e:aa:41:5f:4e:4a:4a:85:00:88:
                    3c:c9:a7:e2:6b:0b:32:58:7e:74:b9:de:27:3e:d4:
                    bf:82:8a:2d:d7:72:79:a0:58:46:a2:74:fc:c0:45:
                    37:0f:f2:5f:03:8c:df:98:69:6a:ca:6b:a6:76:ba:
                    24:6b:a1:f7:bf:0d:59:5d:93:ba:f8:40:bb:14:72:
                    13:d1:ab:46:31:79:07:fa:96:af:bd:30:a8:32:da:
                    48:93:8e:f2:c2:d2:ef:97:7b:07:63:e1:47:2d:c8:
                    05:1d:7f:b5:aa:d1:84:35:01:54:a3:cc:de:30:e6:
                    f9:be:af:dd:72:b0:43:d2:5d:10:0d:41:62:84:7d:
                    cc:d1:9a:c0:db:42:83:de:29:9f:7c:83:47:af:d7:
                    6f:bd:6a:a3:a6:34:ec:9f:00:cb:cf:8b:5a:4d:49:
                    c9:ad:31:a2:35:64:7a:b6:5c:01:f9:9c:46:dc:fe:
                    f7:8b:11:ba:54:42:86:59:10:1c:29:c0:15:f7:bc:
                    8a:0a:2c:82:de:c9:71:19:7b:1d:f7:bc:8b:bc:41:
                    92:5b:24:74:13:0c:22:64:0e:53:dd:15:06:72:29:
                    55:9d:53:11:59:33:49:c9:f5:d0:b9:32:3c:83:a0:
                    f3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3F:27:9D:64:C7:14:F4:46:87:1B:F1:1D:A1:83:77:14:B6:26:CC
            X509v3 Authority Key Identifier:
                keyid:C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:46:99:e2:e7:88:84:b3:9c:44:b0:e2:7e:2e:dc:4a:2d:54:
         f2:41:86:5a:08:ce:7d:42:6f:6d:f6:30:6c:47:30:b5:b8:15:
         28:cb:f0:1d:f8:d1:42:22:8b:61:d4:e4:27:7a:d7:b0:6c:48:
         ea:af:94:49:51:7b:1e:25:3a:d6:b7:74:e8:3f:05:32:5c:62:
         1a:a6:d4:11:7d:58:0b:b5:ae:3c:79:98:c3:34:94:72:cb:e5:
         3b:d1:2e:bb:b0:ce:e4:c1:7f:b5:7c:45:7d:5c:1c:0b:ca:b9:
         40:98:61:5c:72:52:e7:0a:81:c8:83:d3:7f:a3:7d:92:34:74:
         b3:d6:3c:46:7f:07:8d:41:73:29:20:4f:84:28:a2:fe:f5:3f:
         f2:e9:7c:f7:89:4a:22:90:37:13:8f:16:a8:90:ee:29:75:2e:
         54:2d:59:8a:cc:ad:6e:7d:21:ea:a3:a0:a1:64:bd:99:9e:98:
         8d:8c:72:69:b4:7e:f3:76:cc:d6:d4:0a:a4:55:8b:36:d0:1e:
         2e:af:4b:d5:48:7b:fd:1f:e4:4d:c1:5a:0a:e4:00:25:a8:95:
         64:e9:13:ee:a8:08:5c:ea:85:29:d5:bc:85:43:84:8e:b8:0a:
         4d:78:83:9d:16:da:b7:97:38:10:97:56:a9:09:a4:69:d6:f1:
         14:aa:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----