Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File:                     Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier:          HMujQtQrCAnExZZ0qyNelzJ+DlmzONKcfg9+2wWEE+c=
Subject key identifier:   A4:DC:CF:A7:41:44:04:F8:E4:50:70:2A:A1:53:E1:42:89:51:13:23
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer:       /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial:       01962F3DCAC7BB913D60176E9EEF8A115CD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number:          1478
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: r9qv0QePnafdxEklpoQz6Hg8Ju75uoRnWwW4wpiMVf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ca:c7:bb:91:3d:60:17:6e:9e:ef:8a:11:5c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=a4dccfa7414404f8e450702aa153e14289511323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:93:a7:66:f8:81:2c:6c:54:28:a4:6a:41:61:
                    c2:0f:e7:31:3a:86:fb:a2:3a:55:86:79:26:70:a7:
                    15:57:b3:58:fd:0d:8b:98:dd:e0:db:bc:b2:63:22:
                    4a:4a:56:e9:30:91:0d:e8:5a:7e:3c:0e:04:15:dd:
                    7e:97:ef:63:08:db:19:39:4f:7f:69:2c:34:49:06:
                    1f:f4:36:39:b6:a1:6f:4f:95:c3:40:87:51:81:63:
                    b7:b5:83:72:8b:8c:57:d4:cd:e1:23:2e:50:bf:3d:
                    79:7d:4d:e5:59:4c:79:c3:08:0e:48:83:ea:53:39:
                    bb:34:00:ac:c2:19:ae:fc:f5:f5:80:5f:24:6f:5c:
                    4d:1e:24:b2:b7:76:58:38:24:d5:4d:93:85:da:35:
                    9c:52:46:be:d9:e2:0c:56:b8:b5:3f:f5:11:9e:c1:
                    f0:51:28:66:8b:bb:96:ad:9d:8e:29:5d:08:d8:62:
                    6c:ad:de:1f:23:6c:6a:50:91:84:0a:d1:66:03:61:
                    ae:fa:b4:f2:ae:75:e3:73:da:01:0d:e4:4c:a1:0c:
                    26:53:f4:eb:7b:6d:89:7a:12:0f:ec:6a:71:85:bc:
                    18:69:f1:28:bb:72:58:aa:18:18:4d:ce:2f:9d:8d:
                    fe:34:55:78:a0:90:28:64:58:95:ca:8b:bf:c7:cf:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DC:CF:A7:41:44:04:F8:E4:50:70:2A:A1:53:E1:42:89:51:13:23
            X509v3 Authority Key Identifier:
                keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:c0:27:41:f8:3e:5c:cb:23:65:6c:93:46:e9:d2:7b:89:
         c2:b1:71:a4:89:11:86:1b:df:51:53:aa:04:12:2c:8c:03:76:
         56:44:f4:3c:58:37:f5:e3:e5:53:7b:a6:e8:11:90:25:b0:b9:
         71:8c:ab:39:ec:1a:53:30:54:8f:5d:20:a7:6d:ab:de:5f:4c:
         46:5b:16:5d:5e:af:ef:3b:03:88:21:f8:88:2f:dd:88:92:9f:
         55:8b:41:a8:99:c4:ec:c0:43:62:25:d4:39:64:1b:2b:ce:5e:
         8e:c1:70:c2:7e:3f:b9:2a:33:07:ac:07:cd:4b:8f:f1:95:fa:
         57:32:d5:8e:18:0c:23:65:b3:2f:15:a3:5e:b0:59:cf:cf:45:
         f6:01:28:c5:13:8f:71:bb:6c:77:d3:2a:c0:00:ad:29:75:cb:
         3e:56:04:2a:6e:d9:e9:74:f9:20:38:f4:6b:12:75:71:07:29:
         65:68:8e:e2:7f:5d:2b:6e:10:23:71:58:62:77:60:e8:13:3f:
         47:40:cc:b3:ef:a9:c9:2c:47:68:f2:dd:b3:55:89:7b:da:cf:
         2a:45:89:ad:6c:02:55:1b:cb:65:c0:17:07:af:b2:e9:76:7a:
         f1:44:7f:8d:04:ba:f6:c5:09:da:06:09:d4:5b:45:82:0b:6e:
         60:73:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----