Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File:                     1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier:          vYLDtGukfGvHZ8nWqCn01O205wqeE1xafm3NNN43/Sk=
Subject key identifier:   B8:07:FA:B2:60:A3:8C:3A:91:47:60:F0:68:23:EA:FC:D5:B2:CC:42
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer:       /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial:       01962F743CE0A81A31F254D0A43BDF3A0581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number:          0B11
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: TBU8oq0yaStekcRDUg+F9I7UeCb2eF8ifB1e51xOuRs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3c:e0:a8:1a:31:f2:54:d0:a4:3b:df:3a:05:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=b807fab260a38c3a914760f06823eafcd5b2cc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:d3:b0:6b:71:5f:42:98:e3:83:35:50:04:
                    f0:8b:a1:bf:02:0b:28:d6:22:02:39:47:33:3a:8f:
                    85:6f:08:30:6c:7f:f2:5c:04:dd:58:f7:ba:4b:2e:
                    eb:dd:fb:30:91:f9:07:76:c1:8e:fc:d3:96:ea:28:
                    e7:6f:ae:7d:59:22:41:a5:46:a5:87:43:c7:db:ff:
                    27:0a:1b:b9:78:bf:56:ba:ad:0d:c1:5c:e7:a6:91:
                    78:02:fc:44:5f:0f:0b:35:5a:da:35:0b:b9:5a:bf:
                    3b:53:16:1b:a4:06:e8:c0:2f:59:dd:3f:69:0f:1b:
                    85:40:7b:51:5e:30:c5:30:54:6f:3b:ef:95:0c:42:
                    96:ae:15:fe:21:95:84:d8:e6:5e:46:f5:02:73:11:
                    5b:a0:74:56:09:dc:ef:57:ed:a6:9c:99:ba:a8:1c:
                    fb:8b:28:a9:d7:fa:ee:be:ab:c0:6e:c8:63:58:a4:
                    81:56:65:43:0b:ce:64:ea:01:e6:7c:83:a0:9e:3c:
                    4d:8f:94:71:c5:cf:96:2b:81:d3:62:3d:cf:2d:65:
                    39:e6:2a:ce:2b:44:fb:a3:dc:64:83:86:92:98:c6:
                    cc:c2:05:64:2c:df:0a:76:8f:09:c4:d5:a2:99:81:
                    69:28:68:3d:1b:4e:02:ea:95:38:8d:1c:40:de:e4:
                    19:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:FA:B2:60:A3:8C:3A:91:47:60:F0:68:23:EA:FC:D5:B2:CC:42
            X509v3 Authority Key Identifier:
                keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fe:5d:b0:57:dc:f5:61:ef:85:96:a9:e7:3a:5e:4d:3e:74:
         57:11:ee:4f:94:0a:d6:94:d0:96:54:11:f7:26:19:9b:89:d5:
         5d:f1:74:59:22:e6:cc:1e:74:f0:82:3b:c1:92:76:1c:a7:f6:
         ca:1e:fe:c5:dc:7b:6f:39:69:d5:77:4b:13:05:50:f9:53:9f:
         6d:be:87:21:3a:a7:fc:31:05:b1:b8:1a:c6:9f:91:9f:75:58:
         1f:b8:8e:a0:4d:22:ee:e2:95:ad:7e:26:94:55:35:7c:00:25:
         2f:4f:66:31:f4:bc:5e:c4:80:5b:4f:ae:6c:6b:f7:d0:22:d1:
         8f:81:01:1b:fa:5b:16:ee:b5:c6:00:7e:a2:b5:74:e4:1b:aa:
         db:1c:72:dc:74:63:64:3f:c5:d8:77:8a:4c:be:55:ad:d7:3d:
         81:71:3b:6a:da:cc:bc:01:75:79:7a:78:a6:04:6c:8d:73:b3:
         2f:cc:26:0d:7c:05:16:8a:dc:58:bd:21:0a:67:ee:c2:60:ab:
         05:ad:eb:39:dd:62:a0:36:3a:a4:bd:48:34:72:26:af:ce:3b:
         80:81:d7:60:4b:2d:3e:b5:c5:2c:74:cc:55:91:d8:b8:9f:f7:
         f6:7b:f6:80:7f:b6:91:d5:d6:aa:06:05:9d:c2:c1:61:a6:49:
         59:34:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----