Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
File:                     FlazvdJs8CcTOSyn3Vnq9czsEhE.mft (raw, json)
Hash identifier:          n0VSnZdORRteJ7RbfAN1tienf9cvTMSrAL2lDpq5TVQ=
Subject key identifier:   3A:C2:79:BC:89:5E:01:08:F2:51:D8:83:65:AC:E9:61:11:88:FE:93
Authority key identifier: 16:56:B3:BD:D2:6C:F0:27:13:39:2C:A7:DD:59:EA:F5:CC:EC:12:11
Certificate issuer:       /CN=1656b3bdd26cf02713392ca7dd59eaf5ccec1211
Certificate serial:       01962F3D3D88B5E33A8AD9D648F37FE137CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlazvdJs8CcTOSyn3Vnq9czsEhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
Manifest number:          0A08
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: FlazvdJs8CcTOSyn3Vnq9czsEhE.crl (hash: fleS6qAoTdC35051XzOFvCR8TPMeYDv8zt0+I/2WIHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3d:88:b5:e3:3a:8a:d9:d6:48:f3:7f:e1:37:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1656b3bdd26cf02713392ca7dd59eaf5ccec1211
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=3ac279bc895e0108f251d88365ace9611188fe93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:5f:bf:99:16:13:b3:cc:be:7d:9a:68:02:
                    63:71:48:02:d1:77:be:b8:88:c4:2d:ae:9a:eb:80:
                    7c:c5:07:8a:05:e0:79:f0:86:ce:f7:a5:65:33:65:
                    d7:4a:25:e9:8d:dd:e4:11:ac:70:7a:07:86:95:6d:
                    d8:fc:70:bd:ab:1d:2f:10:c1:51:fc:57:8e:71:2c:
                    57:29:d1:7c:96:6d:0b:fe:4a:c3:49:cb:21:47:c1:
                    4b:03:ef:23:48:65:a7:2a:b9:ff:bd:c9:36:78:05:
                    17:b6:1e:ca:a6:27:ca:48:9d:ff:55:e1:4f:73:17:
                    f0:9a:04:c1:b8:e6:05:36:69:ce:eb:27:ac:2d:a6:
                    ea:88:b1:96:6e:88:95:c2:96:81:aa:30:85:79:3a:
                    33:be:56:eb:13:5c:95:00:38:65:54:78:5a:5d:b5:
                    6a:fa:70:75:86:c7:fd:61:ae:59:8f:2c:1c:03:f4:
                    0f:6e:6f:68:b0:8c:fc:bf:57:0e:f7:ed:d4:b5:2e:
                    22:5e:4f:ab:e7:60:09:21:11:fa:db:e2:d2:fb:80:
                    f0:2c:7b:85:1c:08:d5:28:b4:43:21:c8:c5:d5:89:
                    17:ee:f1:57:c2:c7:73:43:94:82:51:a8:d5:40:38:
                    84:a0:c7:d6:41:39:4b:c4:8b:ab:8b:a0:78:ca:bf:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C2:79:BC:89:5E:01:08:F2:51:D8:83:65:AC:E9:61:11:88:FE:93
            X509v3 Authority Key Identifier:
                keyid:16:56:B3:BD:D2:6C:F0:27:13:39:2C:A7:DD:59:EA:F5:CC:EC:12:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlazvdJs8CcTOSyn3Vnq9czsEhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:fe:ff:41:da:4b:15:58:78:3d:27:c9:96:c7:09:a7:e2:
         af:f7:c9:3d:55:3c:3f:de:c0:21:cf:aa:47:31:e8:aa:ce:74:
         ec:83:be:0a:c0:52:f1:57:af:d5:ce:8e:e9:ef:38:81:5f:95:
         2b:b2:d1:6b:5c:33:f7:66:e2:af:80:ed:7d:2d:93:b4:b7:ce:
         a2:e3:77:2e:b5:b7:3d:12:ce:54:81:4d:c5:60:86:20:c1:c5:
         b2:85:85:3d:3c:57:40:ff:cf:a3:32:90:57:7f:a0:fb:55:d4:
         98:0f:19:d2:67:a5:c7:ca:af:a9:62:66:d1:ff:90:f4:2b:41:
         66:a8:d7:58:bc:b9:45:76:a4:c6:40:d8:b6:44:34:45:a3:7a:
         8a:84:3f:48:0d:63:62:8c:05:d7:4e:a4:01:53:06:2c:82:04:
         b4:b8:07:68:b3:f8:02:45:18:e0:da:82:ce:cd:a7:99:a4:f6:
         ed:3a:b5:3b:cc:41:76:48:f9:0c:66:4c:ea:3f:c1:9a:6d:00:
         80:ca:b8:4b:03:21:bb:12:d7:36:11:93:1c:6b:f1:80:2d:a7:
         c2:c3:9d:cd:6e:9b:1d:1b:b1:a8:02:89:4a:07:d7:79:8e:2d:
         93:42:71:dc:78:29:55:bd:2c:d9:34:2c:82:7c:16:b2:56:cc:
         f9:9f:e8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----