Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File:                     DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier:          CFhSYDawOwGGqfFdC1ZAdtjjMe07WUrLnW8iVcw3YhA=
Subject key identifier:   8C:55:84:6C:E9:61:30:DB:74:AA:1E:56:C8:B6:69:D1:60:01:F7:FA
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer:       /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial:       01962FABA48CE7EE80761DABF467B87557C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number:          021C
Signing time:             Sun 13 Apr 2025 15:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:40 +0000
Files and hashes:         1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: f7grzDaMwEz0U1kIPoDgQ1IA9Qk5sVCYr+x5ofDlthk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a4:8c:e7:ee:80:76:1d:ab:f4:67:b8:75:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
        Validity
            Not Before: Apr 13 15:01:40 2025 GMT
            Not After : Apr 14 15:01:40 2025 GMT
        Subject: CN=8c55846ce96130db74aa1e56c8b669d16001f7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:8c:83:24:51:e4:37:ba:4b:bb:2e:6b:39:
                    8b:9d:f6:e8:a9:ba:4a:8b:ed:51:7d:c6:4d:ad:17:
                    73:b4:09:70:a1:64:e6:41:26:b4:22:c5:f4:19:35:
                    76:bb:fa:cb:54:a2:b3:80:78:91:01:9f:21:4f:d3:
                    d4:c6:89:7f:4d:67:cf:1c:b0:b0:e5:42:ef:b6:05:
                    36:2e:f1:0f:70:b1:40:e5:28:bf:f7:2f:21:d8:31:
                    9d:3d:2e:4f:50:f8:41:08:b3:ce:0b:1a:28:fe:ae:
                    c8:d6:53:5f:08:62:8f:58:fd:59:f9:0b:23:70:d6:
                    50:87:4a:91:4c:51:8a:59:e7:c5:63:90:ca:2f:95:
                    54:4d:66:34:1d:2c:24:1c:3c:bb:9d:87:0d:0c:0f:
                    73:1c:6a:ee:e5:39:62:21:e6:22:0c:bc:e6:3b:5e:
                    01:6b:28:7a:8a:0e:9c:f3:f6:7a:99:14:72:b4:4c:
                    88:99:26:06:bc:8b:8c:3c:56:7d:e2:ea:08:56:0e:
                    af:ac:1b:fa:d7:76:c4:2b:f3:a6:40:fc:8c:5c:e6:
                    8f:38:a3:44:bb:37:76:e8:48:68:3d:16:5f:27:17:
                    78:08:a2:05:e4:d7:71:09:96:e9:77:63:8d:4e:48:
                    c4:06:35:d1:be:eb:bb:1c:3c:4d:33:7d:5b:1c:51:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:55:84:6C:E9:61:30:DB:74:AA:1E:56:C8:B6:69:D1:60:01:F7:FA
            X509v3 Authority Key Identifier:
                keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2b:39:d5:01:2a:28:4d:31:d8:70:d0:9d:27:80:29:e3:79:
         36:06:d4:8a:48:16:7e:01:5d:56:ae:05:c1:11:a8:e9:0e:8b:
         e5:74:2e:2d:53:b4:4d:4b:f4:09:4d:12:18:16:a1:37:b5:db:
         5d:1e:c1:da:37:15:30:bc:73:5c:95:ff:64:3c:0a:a2:9e:18:
         c1:a6:2f:56:21:52:d9:98:1a:05:27:55:6f:2b:95:95:fc:64:
         55:cc:db:d0:a9:03:03:f5:ed:cc:bb:52:22:a6:33:f7:a2:1e:
         8a:2b:03:6d:87:95:df:0f:e2:0c:2e:ca:91:26:b0:68:c4:c5:
         94:30:81:a6:ac:7e:13:81:f1:18:8d:ed:3f:15:ec:52:11:87:
         6c:02:88:22:a3:28:54:1f:5d:fb:9f:1d:ed:30:60:f7:bb:f7:
         05:30:e1:f7:08:27:d7:89:89:16:78:fd:1e:09:d1:a7:68:b6:
         7b:dc:e6:ef:46:27:27:bb:7f:7b:ba:e5:f4:6d:30:2d:79:8a:
         72:d2:dc:d3:ba:df:14:3f:7c:f5:ae:1f:82:93:6f:46:8f:5c:
         b7:06:d5:f0:f1:7b:3d:48:a7:db:56:23:89:dc:f3:10:de:34:
         d8:fd:53:a7:f9:b3:2e:4f:4f:45:78:b4:c0:05:17:e0:4a:eb:
         71:4e:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----