Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
File:                     v5ulghwIWljj4dM6TvQem3YQXuU.mft (raw, json)
Hash identifier:          1jtoyqjxj3HRQy1s1bqQ2u7AoUyZmdG+MP8KoLxOzeo=
Subject key identifier:   DC:98:A7:61:2D:3E:81:8E:62:DF:31:7B:9C:89:E0:D2:E8:BA:A6:BB
Authority key identifier: BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
Certificate issuer:       /CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Certificate serial:       01962E98E6DC3E6BBD46EE68A33D41C9BF12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
Manifest number:          10AE
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: v5ulghwIWljj4dM6TvQem3YQXuU.crl (hash: eftB/KrUg3LxDaZ12EKkfqwWy/4WBxBdX6Vh09RuJ5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e6:dc:3e:6b:bd:46:ee:68:a3:3d:41:c9:bf:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=dc98a7612d3e818e62df317b9c89e0d2e8baa6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ac:71:af:51:b0:90:37:ca:61:5d:df:fe:94:
                    d6:b9:35:90:a5:ed:68:91:97:40:b7:ee:b3:6f:1f:
                    0b:a1:98:1c:93:53:a4:da:e6:32:dc:f1:b3:62:6a:
                    de:c2:df:df:07:a2:a5:6c:da:47:cb:1e:1e:1e:85:
                    da:16:1f:88:fc:2b:bb:3b:a0:d0:09:52:0f:e7:a9:
                    b9:a0:4c:78:e1:4e:37:71:a2:7c:0c:38:17:8f:5b:
                    5f:c4:9b:70:ab:13:d0:14:e7:83:e4:1d:79:78:c1:
                    29:e1:de:4b:8a:b0:90:72:ae:63:99:42:2e:76:44:
                    3c:d3:33:66:29:49:af:d9:fd:7f:ce:33:9c:d4:d6:
                    f3:a9:02:33:83:e4:f5:d0:6e:5f:93:5a:9c:01:ab:
                    ef:2b:49:cd:34:07:64:a0:6c:1e:5c:a1:3e:04:83:
                    2b:03:37:b1:9a:7d:9c:0e:63:23:63:cf:dd:b9:1a:
                    9c:04:b4:d8:83:f4:39:da:df:78:32:4f:0f:52:3d:
                    c2:b9:12:dc:f5:28:ec:41:1f:db:77:65:df:22:1e:
                    1e:b8:0b:95:03:e4:d1:71:3f:c4:bc:71:4b:71:c1:
                    fb:3c:3f:4a:a4:d7:e4:ca:22:4d:9c:6e:ad:ea:31:
                    43:6b:41:f0:92:b2:82:bb:58:55:ef:5e:05:5b:e5:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:98:A7:61:2D:3E:81:8E:62:DF:31:7B:9C:89:E0:D2:E8:BA:A6:BB
            X509v3 Authority Key Identifier:
                keyid:BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:e9:c4:f7:3d:29:b2:2f:45:7a:02:37:ac:f0:c0:8f:80:
         4e:b8:67:e0:81:24:0a:e4:bb:94:48:b5:f3:66:28:db:a1:4d:
         05:b5:b7:ff:9e:2a:14:61:cf:29:3e:cc:9a:d5:fd:c6:29:4f:
         b4:66:a5:e9:d6:df:b2:33:cd:7f:d5:89:db:c3:92:c7:27:ee:
         ad:e5:47:34:7a:b6:e4:a1:39:f8:61:7b:4e:b9:3e:37:19:ab:
         44:c1:32:7d:f2:da:74:ba:c8:5f:bf:77:1d:06:af:b6:b5:46:
         ef:9a:3d:76:a1:55:33:36:5c:75:61:68:6d:a0:91:67:e9:03:
         35:14:56:04:7f:55:1b:55:b9:d5:a7:55:d4:f3:8f:59:0d:24:
         91:21:5f:a9:98:a2:dc:6b:2c:cf:56:8b:31:92:7c:57:06:2a:
         27:88:e1:79:e3:9d:24:30:e4:ec:32:3b:a2:44:8a:ba:72:65:
         07:1d:73:97:a5:ce:ca:5c:dd:dd:a8:2a:ba:be:10:16:44:8f:
         25:48:72:ce:81:cf:05:5d:cc:93:45:25:95:9e:a7:ed:ee:45:
         23:58:95:1a:49:f5:5c:56:6f:55:76:cd:07:70:ba:8f:be:c8:
         08:55:c3:a7:80:90:05:ec:ef:3d:a5:0a:ca:69:06:23:d0:2c:
         c5:bc:63:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----