Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36b9b1-6ab6-470e-aa43-c8534a3c9498/1/aPw7CfVvin8ea-PJTw8IikKiy1s.mft
File:                     aPw7CfVvin8ea-PJTw8IikKiy1s.mft (raw, json)
Hash identifier:          yE2cJ7OCjy8GASFeK3J0LZ8YdYbUjFZxFwwY6rIaWUY=
Subject key identifier:   FB:C1:0B:87:A7:C1:04:A2:93:64:C7:28:84:7F:4E:9F:23:B1:B1:3A
Authority key identifier: 68:FC:3B:09:F5:6F:8A:7F:1E:6B:E3:C9:4F:0F:08:8A:42:A2:CB:5B
Certificate issuer:       /CN=68fc3b09f56f8a7f1e6be3c94f0f088a42a2cb5b
Certificate serial:       01962F74ADF17DA62C842F84CE09769CB559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aPw7CfVvin8ea-PJTw8IikKiy1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/36b9b1-6ab6-470e-aa43-c8534a3c9498/1/aPw7CfVvin8ea-PJTw8IikKiy1s.mft
Manifest number:          06A8
Signing time:             Sun 13 Apr 2025 14:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:37 +0000
Files and hashes:         1: aPw7CfVvin8ea-PJTw8IikKiy1s.crl (hash: ufMIrbVZyOSBVrbojUtv/gdkcnqx6WG+52zJKRD45QA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ad:f1:7d:a6:2c:84:2f:84:ce:09:76:9c:b5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68fc3b09f56f8a7f1e6be3c94f0f088a42a2cb5b
        Validity
            Not Before: Apr 13 14:01:37 2025 GMT
            Not After : Apr 14 14:01:37 2025 GMT
        Subject: CN=fbc10b87a7c104a29364c728847f4e9f23b1b13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:d2:cc:24:2d:68:8b:3b:c4:b8:e9:0e:78:
                    03:c1:2c:b9:01:8e:ab:3b:b3:96:a2:29:11:3f:bd:
                    09:bd:c4:6e:5f:07:a9:37:6a:2f:ac:24:af:3f:f1:
                    d5:7a:88:ab:5f:98:b6:5f:46:06:9a:25:11:10:a2:
                    08:b2:b0:e3:64:10:4c:b4:38:be:0e:e4:e4:9f:68:
                    10:b8:af:db:3f:39:de:66:d5:12:ac:1d:13:3e:36:
                    05:57:28:8e:23:f3:a4:d8:e3:3c:71:86:e0:19:68:
                    3e:a7:5a:05:61:f7:38:cc:0c:9b:a6:10:4c:79:b2:
                    61:34:e9:df:1f:83:87:7c:78:79:83:14:90:a4:2c:
                    53:ab:fd:5c:b9:3d:76:88:20:0f:04:3a:33:e9:9d:
                    db:7d:1b:ac:27:3f:3e:15:c1:4e:25:a6:d9:b0:8c:
                    1c:09:b3:83:ef:a9:73:39:17:7e:58:f8:c9:33:61:
                    6a:af:a4:cd:bc:de:d1:c3:31:55:25:e1:53:b0:f5:
                    a4:bc:9b:32:28:a2:6a:a0:60:2f:ab:36:7c:a7:11:
                    6c:19:4d:b4:39:c6:35:69:eb:db:60:ce:ba:92:cd:
                    c4:6a:f2:af:1a:f2:50:9b:dc:f5:0b:d9:9f:79:23:
                    db:7c:d9:78:df:79:cf:31:5e:6d:37:32:f9:1c:f9:
                    ee:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C1:0B:87:A7:C1:04:A2:93:64:C7:28:84:7F:4E:9F:23:B1:B1:3A
            X509v3 Authority Key Identifier:
                keyid:68:FC:3B:09:F5:6F:8A:7F:1E:6B:E3:C9:4F:0F:08:8A:42:A2:CB:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPw7CfVvin8ea-PJTw8IikKiy1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36b9b1-6ab6-470e-aa43-c8534a3c9498/1/aPw7CfVvin8ea-PJTw8IikKiy1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36b9b1-6ab6-470e-aa43-c8534a3c9498/1/aPw7CfVvin8ea-PJTw8IikKiy1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:de:79:fa:aa:ac:92:15:01:65:eb:7f:cf:6e:9b:bd:1e:64:
         39:1d:83:31:16:e5:f6:d4:e3:9d:f7:90:51:b5:d0:98:20:ba:
         5a:7d:d3:d6:2a:ce:83:8b:bb:ed:a1:8f:fa:2d:bf:24:40:3b:
         34:25:f4:0e:5e:87:2a:46:82:3d:4c:42:2e:76:99:9b:59:94:
         da:32:a9:00:c0:a4:ae:8d:2d:54:05:e8:27:e1:7e:ce:25:bb:
         e4:11:e4:bd:6b:3c:37:95:5a:8a:40:86:b6:60:1f:07:55:e9:
         af:d4:ca:1a:98:90:32:64:0f:2f:3b:3e:42:29:57:5c:92:65:
         c3:a8:ab:6d:2f:7e:30:15:59:6e:ba:de:38:d6:c1:b1:4a:c4:
         89:f8:cd:af:8e:83:a5:63:c6:46:3e:82:72:08:de:78:ca:bf:
         a4:1a:9e:f4:8c:2b:e9:96:b2:9b:dc:7a:67:88:cc:89:82:12:
         5c:46:13:5b:94:f2:81:dd:f7:ae:c7:e9:99:ae:15:38:31:8f:
         8d:e4:39:30:9c:8a:b4:6b:13:15:fc:8c:50:52:dd:5a:12:9d:
         ae:fd:89:d0:0d:ca:3a:0e:e8:1d:f4:bf:a0:25:8b:12:bc:91:
         79:a2:4b:ba:fa:22:10:15:db:ea:03:c1:5f:b7:e0:f5:fb:45:
         e6:d5:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----