Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
File:                     ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json)
Hash identifier:          IVMdUVmMIrumcKzAurjmh47HQdZzHq6OHwt+qG4mfC8=
Subject key identifier:   48:10:C4:E8:09:98:52:01:02:88:01:6B:08:AF:1E:D7:CC:57:17:D5
Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
Certificate issuer:       /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Certificate serial:       01962E2ADEB6A607C64606DF4D48E4DDBCDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
Manifest number:          0FA8
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: sYifTIBFOdMiKZIPmO8CD6jWnaGqoVYxWFr6rmPrLj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:de:b6:a6:07:c6:46:06:df:4d:48:e4:dd:bc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=4810c4e8099852010288016b08af1ed7cc5717d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:f4:57:40:39:07:ba:2e:c1:ba:86:2a:b3:
                    af:92:cb:f5:e0:c0:c6:5e:76:da:57:4d:16:9f:1b:
                    fb:7f:1b:9c:4e:68:c4:cd:ca:dd:6f:de:b5:f0:12:
                    95:47:61:e3:95:d2:ce:01:b0:88:83:ae:02:90:e9:
                    be:f9:10:83:3d:10:0e:c3:22:e2:61:d0:54:9f:50:
                    ae:95:45:9f:6d:b9:f4:3d:da:30:1e:a1:e1:77:3a:
                    a4:c5:f2:e0:d8:c3:c3:20:98:5e:d8:2a:fa:0c:fa:
                    5f:a4:1e:6e:21:b2:c4:f8:d5:ca:dd:93:56:79:c9:
                    0a:2d:2a:74:d1:d6:a7:5d:e8:88:57:10:b6:cc:cf:
                    d8:be:d4:33:1e:46:8f:cc:df:d1:82:b3:d2:37:3b:
                    1c:26:3c:89:35:02:a0:35:8c:d3:3d:c8:2f:e4:4b:
                    db:66:03:e2:66:11:08:4c:98:17:5e:d1:8b:da:62:
                    61:79:35:9b:1b:39:10:8d:17:d3:49:65:1e:85:94:
                    38:96:2d:42:c3:ea:64:77:8c:b2:6c:06:ce:37:bc:
                    61:66:15:2b:95:cc:8c:b9:21:b7:82:0e:be:2a:69:
                    17:e2:bf:20:c4:f6:41:c3:7f:40:9e:5a:82:a0:52:
                    a9:45:a0:71:fa:4a:72:7e:76:64:fc:55:16:c8:07:
                    f1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:10:C4:E8:09:98:52:01:02:88:01:6B:08:AF:1E:D7:CC:57:17:D5
            X509v3 Authority Key Identifier:
                keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:95:54:23:6a:25:bb:0b:b7:a2:a3:60:19:58:10:9a:59:cc:
         1f:cc:c7:cd:eb:b3:e4:60:c5:bb:82:e5:3b:12:05:6a:b8:83:
         6c:12:f4:47:a1:80:7e:ee:35:73:b9:c0:84:c6:c5:37:59:26:
         c1:ad:8d:ad:22:ee:27:f6:9a:18:78:27:d4:4d:e2:cb:96:72:
         da:6d:a0:19:24:c4:9d:8a:08:8b:f1:ab:fd:df:5e:cb:94:0d:
         b8:88:1e:68:95:9b:f8:24:ef:7b:b2:03:ef:78:02:f1:06:78:
         7a:b4:c8:5c:d5:a4:5b:b3:58:b6:87:ac:19:75:f3:b0:93:ce:
         45:b0:b0:3c:4c:8a:eb:4b:7f:85:c7:77:c0:3c:71:29:23:a5:
         5b:a4:cb:5b:80:11:57:74:36:fc:1d:98:1f:db:d0:e8:50:21:
         14:4a:10:37:2c:b0:e3:ce:ee:79:64:ae:cd:2f:0f:c1:19:b4:
         bd:a8:83:e5:26:84:0e:74:fd:e2:76:f9:e4:73:6e:5d:6d:0f:
         a9:53:90:ac:84:31:5a:c9:5b:8d:f6:23:b7:db:01:9a:c8:78:
         a4:49:7c:23:4f:c8:3c:9d:a7:fb:42:2d:d0:a7:da:5d:ad:cf:
         f4:39:f4:fb:6a:c5:d3:50:e4:62:f4:e1:c8:7f:b8:14:fa:56:
         2e:56:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----