Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File:                     lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier:          bnCI4fT9pcH8ZE/8/qTqWoW7MeqJV5neaQLxliE4msw=
Subject key identifier:   B0:59:F8:0E:64:A6:80:3E:23:16:12:8B:DA:57:87:3A:92:C5:B0:F7
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer:       /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial:       01962F7442FCFC060A5DA19888F00B8EB1A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number:          1298
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: 7KcLFwSp44MSpxCgO0WztG9ZjRwu+qzIOmUklt1ssAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:42:fc:fc:06:0a:5d:a1:98:88:f0:0b:8e:b1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=b059f80e64a6803e2316128bda57873a92c5b0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:4f:8d:65:22:d5:8e:12:19:19:3b:9e:58:
                    73:53:2d:86:bd:42:73:8d:ea:5e:a9:1c:a2:a7:a8:
                    8e:e2:28:a9:c0:65:0c:15:75:cd:86:73:08:36:c0:
                    68:6b:42:95:cf:c4:73:c8:d6:fa:17:4d:18:f2:29:
                    6e:66:86:9e:c0:e1:2d:42:6b:31:36:10:df:1f:4a:
                    77:b3:66:6b:d1:99:51:53:91:54:f2:d8:a2:d4:94:
                    0f:04:81:38:0c:51:cb:8b:2c:d1:60:7d:94:6b:3a:
                    68:43:41:a3:04:51:65:12:e6:a7:11:2d:34:b6:b4:
                    58:55:3e:0f:5e:c1:35:2a:00:d3:f7:a1:d5:aa:08:
                    34:65:8e:81:79:1c:22:9e:90:65:75:e7:05:d2:62:
                    70:09:95:b7:bb:b2:45:e0:7d:89:df:9d:57:ca:6c:
                    d5:ae:e4:77:de:44:69:b2:20:cd:83:40:d9:07:4b:
                    dc:5c:b6:31:c0:66:1f:fd:9d:dd:3d:04:5f:a1:ee:
                    ca:db:e5:c0:aa:86:02:6d:e1:f4:ba:c6:9a:05:f0:
                    04:70:9f:52:10:79:fd:12:f4:46:3b:10:a1:ce:49:
                    eb:4a:17:d9:e1:f3:da:98:c9:fc:72:cb:4f:37:3f:
                    d2:81:5d:d4:f0:82:5d:e8:a0:db:5d:0c:df:0f:2f:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:59:F8:0E:64:A6:80:3E:23:16:12:8B:DA:57:87:3A:92:C5:B0:F7
            X509v3 Authority Key Identifier:
                keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:94:ce:ec:bd:e1:7e:2f:86:03:2c:f8:a9:b2:29:eb:b0:e9:
         30:a9:d1:80:91:17:31:75:2f:b8:e0:3d:2a:9d:32:9c:bd:69:
         4a:90:5c:59:82:0d:a8:99:ce:77:65:1f:ef:6d:d1:60:37:a0:
         3d:82:de:8c:ee:eb:b5:d4:a7:66:1f:12:5c:43:08:38:e3:5e:
         cf:06:2c:99:83:fe:44:1b:92:80:99:e5:a7:4a:b5:e6:64:ae:
         64:26:b8:47:ae:be:0e:20:99:db:e3:db:23:b9:19:a4:a5:e9:
         4e:3e:58:3c:40:c1:6e:89:d8:db:8a:5b:cd:6b:4c:6c:c9:0b:
         9b:30:40:a0:58:ae:d5:86:2e:96:0a:d9:01:e4:a8:2b:8b:3c:
         85:d0:88:6e:2e:64:cf:3e:fc:82:80:31:80:b3:20:79:57:bb:
         35:ef:ff:05:fd:4e:25:e5:bf:a8:01:b9:9c:bb:d6:51:38:38:
         30:67:b6:a3:67:b7:de:d3:79:f3:a3:3a:1e:ac:83:d0:1c:3f:
         75:c7:03:e1:6e:9e:a7:79:7c:f3:df:53:25:d4:57:f5:43:38:
         ed:4f:f9:83:ed:6a:70:da:d6:e1:96:d3:50:76:56:99:46:21:
         e1:40:86:3e:09:f0:ed:74:ae:1b:07:7a:81:55:39:f4:ff:ce:
         84:0b:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----