Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.mft
File:                     rEmesNS882vbjnuqgFcJ1Z8jSa0.mft (raw, json)
Hash identifier:          yfKIEv2+AWrzbcFJAbv+DQ49JwS6gQJY2aLT4HyNMjM=
Subject key identifier:   46:A5:44:24:17:A8:2A:C3:47:C5:4D:E8:54:F8:2F:CB:10:90:EA:23
Authority key identifier: AC:49:9E:B0:D4:BC:F3:6B:DB:8E:7B:AA:80:57:09:D5:9F:23:49:AD
Certificate issuer:       /CN=ac499eb0d4bcf36bdb8e7baa805709d59f2349ad
Certificate serial:       01962E9867893912AE895F43BF01CC24ADFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEmesNS882vbjnuqgFcJ1Z8jSa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.mft
Manifest number:          04F0
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: rEmesNS882vbjnuqgFcJ1Z8jSa0.crl (hash: CSHyuS64okpad9Ft9S+1W+XHnO+To8XTN2nWKxscX+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:67:89:39:12:ae:89:5f:43:bf:01:cc:24:ad:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac499eb0d4bcf36bdb8e7baa805709d59f2349ad
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=46a5442417a82ac347c54de854f82fcb1090ea23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:52:6c:73:13:26:49:5c:a7:e8:da:24:b1:
                    e4:fa:92:6e:9e:47:bd:8f:dc:73:7e:20:68:25:36:
                    3f:0d:c3:fe:85:f7:6e:9d:73:52:23:14:71:69:31:
                    86:53:aa:b0:9c:cf:64:38:7a:18:fe:50:63:33:22:
                    de:87:d2:52:32:49:6e:ed:20:83:b3:b9:60:9d:5a:
                    7b:de:68:8b:c7:54:11:8d:ea:65:87:e3:74:95:94:
                    6e:52:ae:ad:a9:2f:c8:f4:4d:d0:0b:d6:98:82:13:
                    e7:ab:73:41:03:17:66:41:5c:21:01:18:f6:59:e3:
                    ee:8d:fe:7f:4b:a0:f6:87:28:3d:1a:12:a7:4d:d1:
                    b6:75:37:7c:99:2a:e0:cc:40:fa:79:65:f2:67:25:
                    c5:6c:09:e8:8a:46:5c:9c:44:fc:f9:33:91:a8:4b:
                    88:7e:5a:87:7a:5e:10:bb:33:f0:18:76:78:30:20:
                    ff:12:1b:ef:24:f2:3f:e3:e2:3b:b3:5d:6b:25:13:
                    04:26:fc:2f:bf:14:bc:b0:5a:8a:30:9f:29:b6:5b:
                    55:f4:59:04:5f:2a:5f:56:eb:27:68:d5:d0:ee:b2:
                    17:c3:24:31:da:6e:72:6c:56:8f:69:a3:ae:28:dd:
                    c9:27:a2:37:8d:43:18:0c:e1:22:48:fa:7e:1b:f8:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A5:44:24:17:A8:2A:C3:47:C5:4D:E8:54:F8:2F:CB:10:90:EA:23
            X509v3 Authority Key Identifier:
                keyid:AC:49:9E:B0:D4:BC:F3:6B:DB:8E:7B:AA:80:57:09:D5:9F:23:49:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEmesNS882vbjnuqgFcJ1Z8jSa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:36:76:05:3f:41:f9:69:da:e0:58:6d:68:28:34:4e:b8:f1:
         aa:b7:98:f9:99:06:4a:1e:6d:dc:bb:85:44:1d:7b:11:e8:b1:
         92:43:17:c9:ce:dc:1a:32:ac:80:a7:cf:dc:23:08:d3:8a:6c:
         5a:41:21:c5:2a:fb:c0:52:13:96:a1:ec:7d:da:6a:6a:d7:3f:
         b0:2e:f4:63:85:75:c9:44:86:b2:b4:06:9f:d9:66:90:b5:78:
         43:0b:d3:60:ef:7e:5f:c4:f1:68:aa:c7:43:97:df:86:e6:1d:
         27:78:8c:03:e1:8e:02:0c:f2:09:e3:79:7b:e9:f8:c9:fe:e3:
         28:cc:98:ce:6c:02:35:e1:fa:f4:ba:67:d7:f2:fa:cc:18:30:
         8b:ef:3d:36:8c:cf:1c:ed:78:d3:21:c7:57:15:fa:8a:ac:b7:
         01:07:f1:f4:50:8e:c0:96:c3:b5:4c:6b:d1:b4:e0:67:e7:30:
         c2:2c:8e:f4:aa:68:ad:07:63:76:f7:7f:66:5c:bf:3c:02:3e:
         62:68:dc:4f:d8:c4:7c:78:c6:cd:63:42:1b:a7:91:e5:1e:05:
         dc:6c:cb:ac:c9:ee:9f:07:a0:ce:06:d7:84:1e:e5:ad:94:79:
         35:96:6b:ba:1c:b1:0b:92:47:83:07:9e:e1:39:94:be:aa:c8:
         f5:47:af:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----