Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File:                     1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier:          WVJ67EQG/g77+FZninAQOWN7x+/8sSTw/lndu9qnLrc=
Subject key identifier:   E5:63:1E:3D:43:1C:FA:65:F9:CF:2B:0A:D7:8D:35:49:AD:ED:D6:6B
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer:       /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial:       01962E987E4F7AC971D7B8948D1174F10E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number:          0542
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: ZCxhDk2P8QELI4OrHNMljlGYXQkOTbLNeghtnaae4r0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7e:4f:7a:c9:71:d7:b8:94:8d:11:74:f1:0e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=e5631e3d431cfa65f9cf2b0ad78d3549adedd66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:32:85:82:44:8c:d3:23:00:7f:1a:f2:76:25:
                    b4:d6:d4:9a:31:47:b6:d2:34:8c:c7:f7:f1:11:b5:
                    c2:2f:47:82:1b:8c:5a:42:de:c1:70:d3:00:a1:3a:
                    9f:a5:ff:ad:b1:91:1a:49:36:68:a1:e1:23:74:f4:
                    07:d2:72:78:2c:5e:00:bd:44:24:2d:e4:42:5d:14:
                    88:cf:86:84:93:87:44:5f:06:b0:e4:13:c9:c8:57:
                    aa:31:d4:00:f4:4a:85:bc:61:18:03:1c:a8:43:36:
                    50:73:9d:98:7d:23:19:6c:05:f0:a3:0c:44:1f:a6:
                    87:99:be:78:cd:a5:bf:60:5b:ce:2c:fd:4c:3d:dd:
                    92:c8:cc:5d:41:b0:87:d7:c1:73:0f:78:8d:b7:fa:
                    36:c9:30:f7:23:6a:b8:5c:4d:83:8e:d7:2a:65:74:
                    fe:ff:88:21:f2:19:41:7b:1a:28:4f:22:28:d0:ef:
                    a4:c9:73:61:cf:5a:55:dc:f5:b3:be:40:2c:a3:3e:
                    69:06:81:c9:9f:d6:2d:cc:69:77:4a:87:c0:48:2f:
                    a9:90:af:e5:0a:0e:b4:c6:c2:a4:61:16:c0:0d:50:
                    a5:78:7e:0b:2b:9f:16:a1:1d:07:d2:81:50:7d:e2:
                    70:71:ab:66:ae:9c:e5:01:a7:60:eb:7d:e0:6c:61:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:63:1E:3D:43:1C:FA:65:F9:CF:2B:0A:D7:8D:35:49:AD:ED:D6:6B
            X509v3 Authority Key Identifier:
                keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5b:6c:fa:8a:28:5a:bb:7f:8c:a2:3d:35:8f:c1:7b:f5:c9:
         3f:0e:17:77:28:90:2b:c2:88:7e:f9:e0:c7:4d:db:7e:a8:bb:
         03:ad:c5:41:bc:27:71:3c:5d:03:71:b5:93:9e:92:2c:2e:60:
         46:1b:db:e8:0e:7a:36:4f:ce:9c:52:10:a9:d3:9f:42:29:22:
         6f:57:c2:8c:23:34:4f:11:a2:5a:fc:a1:fe:03:d1:81:f3:94:
         c4:42:9c:f7:32:48:5a:1e:a4:c6:62:e1:54:55:79:e5:15:97:
         ed:80:4d:d8:e9:ca:c8:ba:0c:d7:bf:f9:b4:e8:eb:1a:c0:41:
         2b:1c:24:96:be:82:83:98:79:55:5f:ce:c8:32:c0:13:94:e2:
         53:0c:6f:06:fe:df:85:6f:84:d9:b2:e6:23:4f:df:df:0a:2e:
         cc:38:62:ff:ed:c5:3f:c5:ec:59:40:4a:30:d8:ee:5d:f8:f5:
         c7:6c:bb:6a:77:1b:1e:6b:5d:a5:7c:15:0f:95:b4:e7:3d:4e:
         79:fd:98:6a:40:96:44:00:9c:13:61:bf:88:49:43:71:3a:40:
         05:a8:55:7d:20:90:73:9d:da:b3:41:bf:d5:be:93:38:27:34:
         fa:6c:32:0d:eb:1e:86:08:cb:d6:e9:b9:4e:db:fb:8d:63:23:
         02:61:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----