Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
File:                     g502OyjxyQhOHBmGh2u0CbeaE4w.mft (raw, json)
Hash identifier:          P6MppW4GwH6qqScJfaWoRn+CvqslX93tDjdWotdIQQA=
Subject key identifier:   FB:1F:B2:E1:48:BB:1D:42:69:AF:4C:6E:14:F2:82:FA:B3:62:82:44
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Certificate issuer:       /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial:       01962E98E76FA803E4CAB17D951DCD2A3A78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
Manifest number:          0CD5
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: g502OyjxyQhOHBmGh2u0CbeaE4w.crl (hash: E6V7zL5bdL9VwhPO0VNa4RXkyvrVqLbh7IIzc0udsVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e7:6f:a8:03:e4:ca:b1:7d:95:1d:cd:2a:3a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=fb1fb2e148bb1d4269af4c6e14f282fab3628244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f8:c7:e7:86:32:9e:d2:97:03:8a:43:9c:14:
                    7c:1e:2f:9b:bb:9b:39:18:00:99:f8:58:ac:d8:7e:
                    1e:85:cd:1f:54:5c:b9:07:5e:a4:ea:22:19:c7:14:
                    1a:fe:3b:df:43:79:b6:70:6c:a9:2f:7f:4e:85:a4:
                    4f:08:18:4e:3b:e2:77:87:b4:e5:68:e2:4b:7d:3e:
                    bd:c2:ad:0a:d7:ec:09:db:f1:ea:e7:a8:02:5b:68:
                    5c:24:71:1f:36:9a:d3:75:9f:4f:e6:82:99:ca:9c:
                    38:f1:e1:f6:a4:1f:5c:ec:f8:0f:5f:08:c7:be:40:
                    6e:14:4f:60:fb:e4:21:5c:c7:9e:ec:2e:f5:a4:67:
                    9c:f2:dd:01:e9:72:6c:17:b6:9d:4f:54:46:8f:3f:
                    23:76:21:24:3f:04:f8:ad:ee:9e:d5:d6:0b:16:ff:
                    9f:69:e1:f8:46:4d:e3:3c:16:aa:ee:f5:dc:c2:f2:
                    0b:f3:87:c2:16:7d:7f:68:8a:73:58:b3:7e:50:e5:
                    7d:54:08:88:c4:56:71:17:b8:12:d6:6f:b8:50:2e:
                    12:f2:af:03:77:be:05:68:81:fd:18:93:9d:7a:a2:
                    9c:5a:a0:a6:fe:15:e6:d5:72:bf:17:b2:25:38:8c:
                    48:b9:ea:e9:ea:e9:c6:58:3d:cb:db:94:82:bb:17:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1F:B2:E1:48:BB:1D:42:69:AF:4C:6E:14:F2:82:FA:B3:62:82:44
            X509v3 Authority Key Identifier:
                keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4e:83:74:5f:d1:ec:89:dc:b8:47:d1:0d:31:b1:bc:21:72:
         2a:57:f6:71:5a:d9:b3:03:a7:d8:c1:6c:7e:da:5e:f9:78:65:
         28:c0:7d:a4:ee:fc:51:d4:c4:0e:e5:64:e0:63:8a:4c:fd:b9:
         f0:7d:0b:2d:9a:52:4c:29:04:8d:94:96:10:3d:6b:22:3e:17:
         b5:77:ae:50:4a:0c:dd:98:fc:d4:68:b8:3e:32:b2:2e:67:16:
         5a:fb:f2:ce:84:ca:10:4d:8f:9b:2b:3f:ed:50:23:20:77:ce:
         b4:3e:c9:ba:5d:90:1c:db:65:2d:b4:3e:ff:5a:d0:22:40:35:
         33:d6:85:e2:ce:59:ce:cf:0a:87:6b:b8:ea:b5:8d:a4:85:b7:
         25:a9:d5:a7:59:9a:fd:4d:65:07:e0:e4:64:c0:77:f5:d7:f8:
         c5:e6:61:96:e1:fe:09:e0:46:9f:b2:fa:d8:af:aa:ee:3c:81:
         f9:7e:f2:2a:3f:37:79:c9:de:a5:02:46:01:09:be:70:1a:4f:
         e8:6b:f9:1b:6a:76:e6:23:d4:9a:43:52:af:c9:04:fa:fc:99:
         66:65:90:c5:35:a4:ab:96:7a:df:49:b9:05:5c:86:8d:be:f4:
         e9:45:4e:d1:58:d1:d1:c1:69:53:ce:6e:79:d8:32:92:2e:d8:
         04:86:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----