Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File:                     1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier:          Ks+3ojDNUAcKPKVebA68yhWRTsBdNwQFgJ98AGCeMdU=
Subject key identifier:   57:D3:FB:1A:B4:AF:A0:AC:F4:04:E0:B2:0C:43:F7:71:08:C5:03:74
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer:       /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial:       01962E99605A1BDEC4BE1D41C54B3F5EC993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: IWt6p3b7IpnHco/2Bb9wtLP83FstY6xeH5/o6vFyk2w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:60:5a:1b:de:c4:be:1d:41:c5:4b:3f:5e:c9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=57d3fb1ab4afa0acf404e0b20c43f77108c50374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:95:34:49:d9:45:ac:67:e2:d8:c4:f2:40:
                    d9:5e:dc:cc:a9:70:5c:83:8c:51:21:5f:9d:dc:18:
                    13:40:4c:59:5e:8d:6c:ff:f3:0d:9f:cb:89:4d:fc:
                    23:e6:26:ef:65:1f:8f:a0:6e:1e:2b:a8:d3:70:76:
                    78:a1:a1:ce:01:a0:b0:21:97:ca:d2:11:1f:c8:9a:
                    b2:94:76:a3:99:2d:90:8b:4e:e7:c4:5a:0b:48:f5:
                    80:b5:ee:31:8a:40:91:11:c5:23:57:fc:82:b6:c9:
                    9f:90:40:ee:7e:9c:93:d0:9e:25:a6:9e:f0:2d:ca:
                    3d:7a:63:b3:04:75:f9:85:0e:89:53:89:11:63:ae:
                    c7:5a:fa:72:f2:b5:88:73:da:36:92:8c:a8:1b:6c:
                    aa:36:51:5a:05:e3:33:a8:74:bf:b6:b9:4a:94:d8:
                    1f:26:a1:29:10:d5:48:61:3d:7d:6d:49:b7:2f:a1:
                    60:eb:bc:2b:40:4a:51:9c:15:80:50:80:e6:b7:95:
                    05:76:cd:42:8e:8c:e7:50:24:fd:3b:b3:9e:3a:9a:
                    c7:dc:0a:33:73:b3:50:23:dd:63:f8:21:b2:59:60:
                    fb:49:88:33:80:74:fe:7d:bd:a5:86:2d:d0:c1:b7:
                    87:40:87:4b:77:26:fa:0e:12:97:67:92:15:4c:2a:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:FB:1A:B4:AF:A0:AC:F4:04:E0:B2:0C:43:F7:71:08:C5:03:74
            X509v3 Authority Key Identifier:
                keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b2:88:9c:67:4b:c4:03:0a:04:6d:93:47:05:a7:2d:57:dd:
         02:ca:54:e9:35:21:05:55:15:52:dd:bb:9e:3e:73:04:6f:81:
         67:95:55:81:3d:cc:73:4f:aa:ec:3b:58:05:0d:c1:51:3d:24:
         37:fd:8e:73:92:7c:55:d7:59:be:02:02:e7:b5:7f:51:98:cf:
         49:54:35:f4:b8:45:f8:f7:02:0a:33:76:52:a7:96:4b:dd:8b:
         bf:8d:ba:ba:2c:f1:fd:3b:47:5d:c0:d6:d1:a7:60:03:ca:3e:
         50:90:60:20:82:39:bc:ce:ed:b6:63:c2:f3:af:42:4c:20:66:
         48:ea:8d:72:da:f1:3e:e1:6e:5e:70:05:a6:04:fc:3a:54:6b:
         46:9c:ce:b0:2b:7a:fc:51:cc:71:13:10:49:74:20:84:e1:78:
         e5:1e:f5:a7:96:33:71:ef:ef:79:ff:69:5c:15:c4:c3:98:ad:
         3e:c2:3b:5e:ac:23:0d:2c:1c:fa:71:22:b0:14:a3:d3:a0:9a:
         d4:91:2e:0b:e8:21:71:3f:ca:3e:d9:91:9c:c1:76:93:68:74:
         63:e3:7d:0b:78:50:e9:4a:fd:69:16:04:d3:66:42:15:ac:d3:
         47:d3:d2:83:d9:ae:2e:17:46:bf:17:30:1d:e3:64:21:dc:cf:
         0b:19:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----