Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
File:                     w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json)
Hash identifier:          9k4wBHgST2rfNwccoabGpuELG6hyK2SPuiiBRBWlkoE=
Subject key identifier:   AF:4C:8C:0B:75:F9:DF:C3:E4:AF:6E:76:23:0C:B2:39:1D:3E:0D:F5
Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
Certificate issuer:       /CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Certificate serial:       01962DF402ECC115E09337C57DB03B5E9E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
Manifest number:          136B
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: OaPhP7LJQg8OkYARv0sOg8jV2bJ/bxTWcabCI2vEK1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:02:ec:c1:15:e0:93:37:c5:7d:b0:3b:5e:9e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=af4c8c0b75f9dfc3e4af6e76230cb2391d3e0df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ab:70:b6:17:0a:6a:2c:86:ed:21:9a:bb:5c:
                    51:7f:df:b4:e6:3b:7e:77:a5:c1:c9:a7:ab:6a:e7:
                    1a:44:57:02:09:fd:dd:f8:f1:e8:07:1d:3f:7a:66:
                    61:0f:4f:e3:45:49:73:94:b5:56:db:a4:16:46:24:
                    51:22:35:93:3f:a8:3a:06:e3:9b:c5:b4:05:b8:04:
                    aa:87:b4:99:0a:8b:dc:a4:f4:e4:38:3d:f1:86:90:
                    76:a5:e0:0b:f3:56:04:4e:04:a2:40:3a:2e:87:7d:
                    31:c0:9c:e6:ea:c3:9d:37:43:9f:cc:3d:cb:41:2e:
                    38:b5:bc:75:64:15:4f:6b:84:21:b8:9b:77:97:f4:
                    02:58:83:00:09:0d:0a:2b:a0:58:5a:36:48:f2:98:
                    73:1c:ff:96:2c:85:21:2a:a9:15:7b:e6:65:d8:32:
                    3e:63:4f:4e:fd:86:d1:bf:fb:68:66:e9:5a:a0:fb:
                    ab:7f:e1:f6:b8:28:02:dc:73:b3:7b:cd:b3:8b:cb:
                    93:a8:76:ce:d1:cc:5a:0f:57:9a:c8:94:9e:3f:6d:
                    60:ad:d8:4d:3c:cb:fc:a3:7a:65:4b:cf:f6:6e:fd:
                    e6:31:d7:fd:56:6c:81:3f:41:99:05:62:30:a5:4f:
                    a3:be:7e:3f:a0:60:c5:d1:a6:af:58:f1:30:80:64:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:8C:0B:75:F9:DF:C3:E4:AF:6E:76:23:0C:B2:39:1D:3E:0D:F5
            X509v3 Authority Key Identifier:
                keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c6:5f:d2:cf:d9:9f:cd:97:60:58:da:f2:ec:a4:55:79:3d:
         4a:e2:71:d6:ba:9f:a9:57:39:0d:db:3f:59:85:e5:1f:10:7a:
         ba:fe:00:6d:33:0c:d0:45:66:b5:b3:e3:7d:7b:4b:8e:1c:cf:
         40:a8:cd:7f:65:af:e5:e8:b7:85:60:29:0b:35:3d:d4:fe:dc:
         53:9a:0c:29:24:90:b6:8a:dd:c8:b4:a3:7b:25:20:24:0a:88:
         83:42:e2:c3:bc:1d:88:f9:9d:75:c3:a2:23:85:70:2b:b7:9e:
         02:f0:68:d6:46:d3:0e:1c:9e:16:90:76:10:82:2e:1e:f7:9b:
         52:1d:89:51:94:b0:be:16:15:63:78:89:f6:0e:8f:ba:ec:08:
         ff:66:a2:01:0d:2e:78:3d:64:91:eb:2a:f4:d4:32:e2:57:80:
         d2:02:27:65:27:61:8b:6e:3e:68:0d:63:49:16:5e:22:8d:de:
         b8:b2:25:e3:0d:8b:cd:26:ab:eb:df:d3:11:0d:d2:00:1c:b9:
         4d:97:00:bd:c1:59:fa:2a:93:b9:10:d2:76:59:95:5e:b4:7b:
         e2:2d:e7:12:56:89:fa:be:8b:bb:04:75:af:99:c7:14:19:9b:
         cb:eb:cd:f0:10:21:b5:5b:93:81:81:22:d1:23:39:2c:77:c7:
         1f:27:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----