Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a933fd-74b9-46f8-9e5d-abe1696bf06c/1/WPwaXmXpI5C7_P2Jf8XLptjOHTE.mft
File:                     WPwaXmXpI5C7_P2Jf8XLptjOHTE.mft (raw, json)
Hash identifier:          34Z9EhwUD0K1m6yeAZA0y7E4xhBEAjmWHZetEWO9cRY=
Subject key identifier:   FC:16:F1:64:99:7E:FE:2E:26:76:71:CA:AE:B7:CA:0E:43:04:41:E9
Authority key identifier: 58:FC:1A:5E:65:E9:23:90:BB:FC:FD:89:7F:C5:CB:A6:D8:CE:1D:31
Certificate issuer:       /CN=58fc1a5e65e92390bbfcfd897fc5cba6d8ce1d31
Certificate serial:       01948F630EEC35287EF0B63333CE82664ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPwaXmXpI5C7_P2Jf8XLptjOHTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a933fd-74b9-46f8-9e5d-abe1696bf06c/1/WPwaXmXpI5C7_P2Jf8XLptjOHTE.mft
Manifest number:          0282
Signing time:             Wed 22 Jan 2025 19:00:21 +0000
Manifest this update:     Wed 22 Jan 2025 19:00:21 +0000
Manifest next update:     Thu 23 Jan 2025 19:00:21 +0000
Files and hashes:         1: WPwaXmXpI5C7_P2Jf8XLptjOHTE.crl (hash: bZWTd/SlWzTROjFZj7iy4DTobWWG4Zd7MhpLZOpc3OY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:63:0e:ec:35:28:7e:f0:b6:33:33:ce:82:66:4a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fc1a5e65e92390bbfcfd897fc5cba6d8ce1d31
        Validity
            Not Before: Jan 22 19:00:21 2025 GMT
            Not After : Jan 23 19:00:21 2025 GMT
        Subject: CN=fc16f164997efe2e267671caaeb7ca0e430441e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:15:78:54:46:f5:dc:82:3d:59:0d:5b:53:
                    de:ed:3d:68:1d:45:88:e9:87:dc:d6:4f:f0:5f:09:
                    ce:67:3f:a4:9d:dc:8c:15:f6:6f:99:27:36:75:f8:
                    d2:61:69:d3:10:d5:c4:be:d3:06:98:25:dd:33:95:
                    f4:04:2f:99:26:1d:6d:c0:49:0a:37:ba:07:4b:f6:
                    59:ce:7e:c0:ce:28:87:f8:78:f8:a5:03:05:43:85:
                    23:f6:4f:7d:83:1f:a4:c2:5a:a1:9e:18:b0:c8:ea:
                    fe:9e:f6:15:c0:c6:b9:90:45:6e:bc:91:0a:af:64:
                    d2:3f:34:09:15:4b:4e:9c:f9:c3:a8:d7:4b:5c:24:
                    2e:d6:17:f7:0a:e8:97:3a:78:3c:e8:cd:06:64:34:
                    73:ca:66:e7:60:a7:08:5f:3b:d0:f5:ea:67:6f:ba:
                    7a:bd:d3:ea:0f:3f:da:22:02:dc:69:38:12:3c:85:
                    f9:ec:2e:c7:c8:16:7d:99:8c:26:36:9a:ed:3e:b3:
                    37:fb:35:11:0f:30:06:27:94:1e:10:85:6f:cf:bf:
                    b9:25:42:6a:cd:f5:d6:1f:43:de:e3:7d:44:8e:f4:
                    71:96:fd:d5:3d:3a:62:d4:da:eb:02:61:ff:2b:a0:
                    4d:3a:69:27:c0:19:63:15:0b:c4:08:3a:75:6e:21:
                    b7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:16:F1:64:99:7E:FE:2E:26:76:71:CA:AE:B7:CA:0E:43:04:41:E9
            X509v3 Authority Key Identifier:
                keyid:58:FC:1A:5E:65:E9:23:90:BB:FC:FD:89:7F:C5:CB:A6:D8:CE:1D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPwaXmXpI5C7_P2Jf8XLptjOHTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a933fd-74b9-46f8-9e5d-abe1696bf06c/1/WPwaXmXpI5C7_P2Jf8XLptjOHTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a933fd-74b9-46f8-9e5d-abe1696bf06c/1/WPwaXmXpI5C7_P2Jf8XLptjOHTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ea:f3:15:90:49:22:36:d6:5b:48:bb:30:da:44:10:06:79:
         e6:fc:c2:90:a3:dd:db:7c:7c:32:bb:c1:98:94:74:91:77:95:
         8b:f7:b3:0f:96:40:ae:eb:9c:d5:6c:0f:39:aa:b0:0e:eb:9e:
         a8:b7:5f:00:61:3d:48:a6:f2:0f:1d:10:f7:aa:0d:f7:a7:39:
         1a:a6:b6:75:f7:02:d7:9c:ab:48:50:a2:91:2c:b3:5e:29:a0:
         dd:5d:d7:f2:f2:86:82:8d:0c:fd:8f:9b:45:84:95:e6:29:6d:
         98:a6:f6:0a:39:f6:aa:5f:3c:da:65:b3:e4:66:09:51:5c:92:
         03:47:23:5d:97:23:28:ec:12:a5:83:f4:a8:f0:3e:75:a8:42:
         3b:6d:34:de:a1:62:5c:64:95:2b:24:8a:79:e5:bf:7c:75:f1:
         d2:83:6f:a0:8a:97:54:6e:4a:fb:e5:a7:9b:a8:33:b1:04:0b:
         98:ba:d2:d5:99:5c:8c:c4:84:47:ed:1b:25:76:50:5c:c7:4a:
         9b:51:41:4c:7d:a1:c4:88:2d:03:99:5b:c5:41:b5:c1:dc:ca:
         2b:77:cd:99:3a:32:69:1c:2b:88:58:f7:28:56:e4:e2:82:d1:
         54:e9:c0:b6:69:5b:70:a7:b8:c7:62:8a:16:4f:f2:2b:17:fe:
         30:28:11:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----