Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
File:                     wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft (raw, json)
Hash identifier:          mFlCg9muKuFaF9yi/RW9M3zaBM3G1+1nBJ9IW4vMNj8=
Subject key identifier:   FC:85:DB:BF:B7:B5:14:C4:73:E4:51:04:0D:C1:E9:98:1F:A2:BF:0D
Authority key identifier: C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
Certificate issuer:       /CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Certificate serial:       01962E2B2DD06026C106035D947D66FA8BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
Manifest number:          7C
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl (hash: XHhmottL03eydpniXpaRjt68jdn33YjrX2SQESDWuao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2d:d0:60:26:c1:06:03:5d:94:7d:66:fa:8b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=fc85dbbfb7b514c473e451040dc1e9981fa2bf0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:58:b4:ce:ee:04:5d:c2:14:ed:95:d8:ee:
                    d4:ff:28:73:f9:67:b3:8a:63:60:39:3b:9a:ba:36:
                    12:aa:8f:3e:d5:4a:95:49:d1:65:48:ff:83:ad:e6:
                    2c:2f:88:1d:41:cf:3f:ba:60:15:a7:66:e2:b2:43:
                    8f:dc:b0:4b:33:23:45:d8:7b:7a:4e:10:18:5e:4d:
                    f7:39:ba:eb:8b:cb:d6:a5:01:b4:b2:ed:1d:33:b2:
                    ee:9c:b7:9c:fe:7f:07:99:53:f6:3c:d0:b0:0c:69:
                    d0:1a:70:08:24:d7:20:6c:b6:ed:10:24:92:56:88:
                    bb:08:cc:90:e8:ec:2e:1e:72:fa:6c:b1:15:93:83:
                    07:cf:2e:b8:68:45:21:0d:2f:f9:f9:bf:de:b6:7d:
                    79:a0:64:ce:70:2d:7d:f5:9f:f8:72:af:a0:71:1c:
                    7e:5c:74:aa:c8:7b:bb:4d:fc:1f:c3:f4:6d:1a:71:
                    4e:e6:0e:d7:01:85:f7:ce:54:b2:bc:19:cf:66:7e:
                    99:4c:70:66:9d:2a:84:82:e8:a5:43:9e:c3:2f:b1:
                    9f:0b:c6:e1:c8:4e:77:e9:aa:81:bf:d1:f0:5b:8c:
                    0c:9a:05:28:1b:48:ee:97:f5:92:ec:c3:63:b3:fb:
                    91:68:93:4c:e0:2e:f9:f7:70:b6:67:6d:5a:ae:54:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:DB:BF:B7:B5:14:C4:73:E4:51:04:0D:C1:E9:98:1F:A2:BF:0D
            X509v3 Authority Key Identifier:
                keyid:C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:94:6f:15:77:59:55:0e:85:ac:17:6f:37:0f:4b:0a:10:46:
         ac:c3:55:97:61:77:e5:de:e5:17:8e:97:55:1c:4d:0c:59:eb:
         2f:f3:27:cf:2c:4f:4a:30:d7:77:92:7f:e7:11:9b:02:72:bb:
         f9:cb:29:7a:ec:9d:cd:74:fb:79:c5:ec:f5:9e:14:3c:b4:ea:
         7d:93:88:7e:9d:1d:a1:92:99:a3:38:33:93:16:ab:ae:50:63:
         38:31:95:17:f7:16:54:a0:28:ac:ad:00:d6:2f:28:ab:b0:09:
         3b:30:1a:ed:83:55:3a:41:3c:59:f7:b3:b0:b9:93:e4:9c:fb:
         40:82:71:72:dc:ba:4d:08:13:f9:26:a6:de:85:9c:a4:13:cc:
         0b:f5:3f:97:93:de:41:a1:5e:6d:23:88:e2:80:32:27:82:fd:
         26:9c:ad:bd:13:ab:b3:e3:30:78:4a:0c:38:ca:2d:73:68:d5:
         a1:c2:f1:12:b8:36:7c:52:c6:06:9f:8b:44:fd:81:37:f6:d1:
         4b:21:04:fa:0e:1c:81:cf:d2:84:bf:76:ab:b4:11:c8:55:77:
         91:bf:0b:05:ad:06:a3:e7:30:54:dd:46:d2:3e:f4:33:b4:ae:
         46:1e:84:5e:93:90:15:dc:92:1a:12:7d:ba:60:cf:cc:d7:2d:
         1b:bb:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----