Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
File:                     WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json)
Hash identifier:          uFkcOLHQ4XpYnktelGRkjULXINcSJCdCuUrafL/QJV4=
Subject key identifier:   11:DC:2F:83:25:AE:0A:5B:53:BE:A7:2E:C0:B4:F7:24:64:19:49:C7
Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Certificate issuer:       /CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Certificate serial:       01962F064BB84AC8C6492DF600F63D27142E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
Manifest number:          91
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: K08r+Phegw89sRXeLJCYwBMIFsDr2hM6XFN9ZHi0mVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4b:b8:4a:c8:c6:49:2d:f6:00:f6:3d:27:14:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=11dc2f8325ae0a5b53bea72ec0b4f724641949c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:eb:4f:88:54:c2:86:e8:c5:14:13:eb:a8:
                    13:e4:ab:7f:98:d0:44:43:8d:26:ba:a6:dc:9d:08:
                    49:e3:d7:1c:63:f2:89:e4:da:56:9c:f1:22:18:c1:
                    e9:79:0b:8d:a3:ad:e2:9a:86:20:d9:ab:fa:6c:62:
                    51:ba:8c:ce:cf:bf:82:66:57:81:45:5a:2f:77:e4:
                    59:3f:31:d6:e4:93:f3:f5:2e:57:8b:63:69:83:3c:
                    a8:ee:e6:10:c4:ef:8c:40:2a:a9:06:f1:a2:78:1c:
                    28:7f:ca:6c:61:d2:3f:a2:5c:d0:ad:37:fb:20:3c:
                    77:21:28:2d:cd:6e:0d:1f:e3:4a:63:7d:dc:ba:e4:
                    9b:6d:52:b8:c1:aa:7e:13:b3:76:2a:7f:16:63:08:
                    c3:df:c6:60:e7:f1:84:b5:07:53:bb:98:38:e4:2f:
                    f4:9d:f9:0d:7c:98:c0:60:41:90:b2:d9:4a:81:19:
                    7e:b3:e0:69:0e:35:47:08:bb:97:94:58:9e:f8:fe:
                    98:0e:50:08:74:45:0c:22:7b:7c:4e:1b:0a:20:0d:
                    09:11:b5:a3:7f:87:e1:00:2d:78:27:f5:3c:af:0a:
                    ee:7d:21:6b:99:20:8a:fa:7a:27:63:23:2d:08:6c:
                    c0:ad:59:bb:84:a2:4b:b8:e5:92:83:0d:71:78:cc:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DC:2F:83:25:AE:0A:5B:53:BE:A7:2E:C0:B4:F7:24:64:19:49:C7
            X509v3 Authority Key Identifier:
                keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:d8:80:70:fb:bf:e4:93:7a:45:bc:93:cf:62:de:b5:84:
         46:5b:17:8e:b1:8d:ad:35:94:55:8f:1e:4a:74:6a:65:2c:2a:
         f9:12:8a:99:c5:98:ba:e1:d2:7f:ac:d5:ab:8e:4a:01:4e:63:
         ed:11:d5:e2:7c:98:3d:49:cb:53:d4:70:72:54:1e:2c:40:c3:
         1e:b7:79:da:79:93:d6:60:e0:e2:62:a6:bd:ac:0a:43:8e:eb:
         90:43:e6:6a:b6:37:13:96:8e:85:93:06:46:b9:09:fa:ff:50:
         6b:32:30:ca:57:34:34:52:34:95:d2:b8:b0:10:1d:ad:0b:b6:
         55:31:fb:5f:42:aa:28:75:73:9e:17:92:73:08:54:52:e9:b4:
         2d:2b:29:55:c3:31:07:51:48:0b:4e:5d:3e:53:bb:07:c3:4c:
         d7:91:64:0c:23:20:a4:b6:7c:f0:8b:55:60:d3:a2:3f:eb:51:
         46:5d:7d:28:a5:b3:61:dd:54:6e:c6:a8:fa:49:30:ea:b6:99:
         f8:5a:f6:1b:f4:0b:97:88:d9:92:ee:17:fb:63:ad:ce:64:80:
         74:67:66:59:a7:26:68:20:4c:36:eb:a6:1b:31:6d:03:84:14:
         d4:62:15:d8:dc:5d:a1:2c:49:66:d2:1d:84:fa:46:3b:98:22:
         28:10:47:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----