Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File:                     wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier:          +0nlhfTbkP4qXVxtbDFRyhbCeelldwm9e4QIVz3NZlk=
Subject key identifier:   34:1F:AB:3E:78:2F:64:86:8D:1A:9F:BD:44:D3:56:0F:19:57:BB:2C
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer:       /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial:       01962E61ABC0ADC774C8D668E4DE7D17AF64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number:          013B
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: CoDRdxx/uWlJo4JR6ozp3De4GtbcqWHRedxyIEQWixE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ab:c0:ad:c7:74:c8:d6:68:e4:de:7d:17:af:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=341fab3e782f64868d1a9fbd44d3560f1957bb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:cc:d6:fa:8f:61:7c:31:66:28:e3:eb:07:
                    25:62:3d:ab:d5:99:79:b4:a0:de:43:63:11:ff:fb:
                    a1:08:15:5f:03:e7:f7:f1:04:fc:d3:1a:47:6f:80:
                    15:50:fd:b1:26:28:2f:70:37:c1:03:8c:75:f0:72:
                    1d:12:d1:37:5a:87:a9:84:74:2b:df:36:f0:b2:aa:
                    e0:0d:ec:a8:d6:c3:4e:a6:ec:39:b7:02:0d:12:0c:
                    43:a3:07:98:82:1b:bd:74:62:f0:1e:2e:31:ee:83:
                    f9:e7:b6:46:e7:fb:bd:fb:78:c5:fd:bf:6d:a9:2d:
                    b4:17:20:15:37:22:af:a8:29:70:bd:47:54:3c:63:
                    9c:8c:b3:5e:b5:48:9b:10:6a:a8:b0:6a:cf:63:4e:
                    62:61:2f:07:2f:16:e2:17:2b:41:9b:5c:05:75:8e:
                    45:bb:6d:5e:b9:27:da:0a:9a:97:d2:b0:8b:88:ce:
                    5f:6d:ee:b3:ec:ed:99:27:62:37:c4:b6:5d:0d:ec:
                    69:54:28:6e:b0:a5:7a:df:1a:d3:08:e6:c4:6d:47:
                    73:fc:50:a1:80:8e:9e:30:53:6f:33:c9:03:d0:39:
                    71:4a:eb:76:6e:91:19:b0:ce:46:61:13:63:f1:51:
                    d0:c0:9d:e3:ee:93:4f:65:79:f2:22:eb:d2:a7:b4:
                    0f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1F:AB:3E:78:2F:64:86:8D:1A:9F:BD:44:D3:56:0F:19:57:BB:2C
            X509v3 Authority Key Identifier:
                keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:f5:1c:8d:bb:3f:1d:a5:a6:c3:19:f2:59:f2:62:0a:02:
         4f:aa:e9:92:4e:11:b3:23:c7:18:fe:54:0f:d8:32:d8:67:19:
         ff:df:0b:dd:1b:be:10:22:c4:cc:9c:a3:55:fc:d2:f3:76:0e:
         24:fd:cf:75:c7:b1:cd:01:74:8b:76:64:8f:67:01:f2:a8:53:
         24:25:b4:0f:5c:7a:11:05:36:b1:72:96:c1:07:7b:4d:0a:7b:
         1b:91:70:32:23:e4:a4:da:b3:5f:d5:bd:a4:69:8e:a5:0a:77:
         70:1e:44:d1:09:8f:e2:0f:be:57:24:9d:b1:55:ed:6c:ff:e1:
         d0:21:11:32:42:05:be:4d:a0:01:64:45:aa:8b:3a:18:40:66:
         14:d3:7a:65:8e:59:a4:4e:21:f9:a1:d0:ef:37:fb:4e:ae:f9:
         61:f8:1f:77:c1:7d:21:19:64:b9:eb:69:e9:e2:7f:54:00:20:
         61:73:78:d7:9b:70:64:49:dc:96:3e:3d:80:07:92:5d:2e:86:
         6d:aa:7c:67:a2:88:63:97:88:8a:6f:5e:c7:9d:00:6f:03:fc:
         a3:7c:1d:6e:af:37:c8:9f:d4:53:e8:ab:71:27:47:b5:6d:bf:
         ef:0a:70:22:81:a4:0c:d9:08:c8:93:c3:c3:c0:0e:b6:90:03:
         e5:da:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----