Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File:                     1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier:          fsFVDhEn59bf3w0sCpIep6re69earR623WCavGT+aNQ=
Subject key identifier:   ED:5A:13:A1:5D:E8:53:BB:C1:F9:F1:E7:44:F8:DF:5A:46:CE:A6:C4
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer:       /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial:       01962DF40E33E51AE494839A7FF932BD4679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: g6MC+sBaMmhXx6EwpvBE0TrQc8TN9zxKxxd9I3gryEQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0e:33:e5:1a:e4:94:83:9a:7f:f9:32:bd:46:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=ed5a13a15de853bbc1f9f1e744f8df5a46cea6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:20:5a:f1:c4:ec:50:c8:8f:73:6f:a5:be:
                    07:3a:0f:33:85:94:7a:0e:1e:d6:63:a5:b2:46:72:
                    1b:d7:e9:6d:29:33:6e:fe:06:02:1b:d1:af:07:50:
                    17:52:7d:45:4c:ca:6a:6f:38:e2:16:27:ce:9b:e3:
                    6d:b4:9c:a1:da:80:c1:d6:70:df:e5:f3:48:e9:41:
                    b4:e7:bd:46:70:f6:22:91:e8:75:9f:61:15:ec:98:
                    d0:ca:5f:d0:b3:5a:aa:1f:f5:96:79:b4:00:31:ce:
                    7b:5a:8d:4c:24:f2:c1:1e:21:40:98:64:0f:25:a0:
                    c9:64:1e:56:97:d0:08:b0:66:6c:af:40:5b:57:c2:
                    48:d2:4f:6e:6b:7d:9a:55:bf:5c:19:e6:a3:29:c2:
                    bd:b5:f5:12:84:86:06:20:8e:07:9b:74:f3:81:0e:
                    ba:05:c7:c4:83:c6:4a:0c:fe:cc:f5:7b:84:19:f8:
                    2b:56:45:f1:68:03:4f:20:87:61:c0:35:49:e5:1b:
                    a7:aa:96:4b:c2:8e:c1:05:7f:a2:95:a8:e6:f3:f6:
                    8d:24:44:64:79:93:59:67:5c:f1:3d:71:a3:aa:76:
                    83:e0:da:1d:57:e8:7f:d0:6d:d9:91:5b:43:b1:2e:
                    d7:17:72:81:69:ad:fc:5a:88:ea:2c:27:e9:67:64:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5A:13:A1:5D:E8:53:BB:C1:F9:F1:E7:44:F8:DF:5A:46:CE:A6:C4
            X509v3 Authority Key Identifier:
                keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e8:f1:20:8f:8a:07:67:45:04:59:56:70:42:36:42:7c:c3:
         7e:d8:33:22:19:10:46:3c:4f:6b:58:e6:76:44:f6:ed:7a:0a:
         c6:55:36:31:bf:18:3e:7b:60:10:3d:bb:9e:df:8b:5d:ea:03:
         0f:95:f0:11:78:b8:e5:99:fd:cd:c2:80:ba:b6:19:f2:e9:67:
         d3:f3:20:6a:23:52:a9:4d:2b:d1:2c:6a:3e:98:d5:39:bb:36:
         c6:e9:51:28:f5:fb:b5:26:cd:97:d8:3f:30:4a:a6:a1:c4:d3:
         6b:0a:44:e1:82:da:ab:c6:42:c9:b1:f7:1e:82:64:8b:8f:cc:
         31:74:73:2a:a1:a3:02:81:fc:ab:fb:65:22:5d:41:4a:26:7d:
         e4:89:66:9b:e9:78:f9:b8:b4:8e:39:02:41:43:2f:73:67:cd:
         60:5c:8e:0e:9c:f6:3e:fc:64:83:1c:85:92:02:cb:2e:9d:83:
         53:61:86:34:3e:7d:f8:5f:fd:fd:1a:0a:46:a6:2d:8e:dc:1c:
         22:13:5f:f7:f7:6a:b3:2f:77:bf:1d:c7:f5:71:93:e3:22:52:
         25:76:a6:26:e5:1a:c3:0a:7b:23:7a:14:09:88:59:38:ae:0b:
         4e:01:60:8b:29:f3:63:72:54:80:dc:aa:78:45:36:1d:d3:9e:
         e5:ed:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----