Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File:                     ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier:          iP5wkQRQycNScTLArceel8JYGEQkaXlQi+Y2QH4bqwY=
Subject key identifier:   E8:8F:78:03:D3:05:10:EA:53:AD:CA:95:90:DE:77:21:08:5A:37:98
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer:       /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial:       01962E9998595D68D9E868CA1C3785028D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number:          0ED5
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: 64JAn6ABqsyHj9ECEteVGzKDoAaPSGB/X6rJDzqlF0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:98:59:5d:68:d9:e8:68:ca:1c:37:85:02:8d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=e88f7803d30510ea53adca9590de7721085a3798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:9d:7e:77:e7:1c:b6:f7:c3:9e:5a:2e:f4:
                    5b:f0:b9:fa:9e:1a:c3:6d:91:76:bc:94:73:c6:4d:
                    89:85:99:bb:93:80:6e:3e:c8:fd:5f:6a:ef:dc:21:
                    c7:e4:93:e1:85:66:f0:aa:b2:36:5f:89:8a:97:8a:
                    37:ea:6f:52:7f:85:d3:3f:0d:70:03:23:ec:de:9c:
                    f3:9d:f4:bb:31:0f:a5:a7:a0:9a:0c:df:52:6f:7b:
                    48:46:bc:f8:e4:48:d4:99:89:bb:21:86:c3:9d:16:
                    fc:3e:d4:cb:64:b0:d4:e6:52:8c:5a:a3:07:a6:c0:
                    64:fb:4b:d6:c1:0b:73:9e:5d:c9:bf:db:87:08:02:
                    d2:7c:15:c1:93:6a:03:bc:b6:ca:e4:c4:31:97:b0:
                    1d:f7:ac:97:43:20:5d:6e:15:9a:83:e8:86:26:d9:
                    48:89:51:f5:8f:0f:2d:06:fc:4e:ff:9b:c3:5f:96:
                    9c:ef:0d:a3:1f:41:b1:3f:40:8d:d4:5e:2e:5e:18:
                    4f:73:ed:19:01:55:8f:ce:4f:f1:96:91:be:5c:6a:
                    55:fb:20:54:25:2d:37:7a:3c:ac:67:d7:6d:b2:c5:
                    ae:48:fb:66:f5:75:df:67:1c:34:51:d7:10:2f:8d:
                    10:bb:2b:ca:88:0f:e0:c2:af:1b:b6:0e:21:54:ff:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:78:03:D3:05:10:EA:53:AD:CA:95:90:DE:77:21:08:5A:37:98
            X509v3 Authority Key Identifier:
                keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b6:31:78:85:16:b5:61:6c:b8:8e:1e:53:7a:32:9e:32:4f:
         1a:8e:15:b1:8d:c2:19:7d:2f:05:6e:b1:ce:be:5d:30:c3:50:
         12:54:18:88:7f:d3:ef:8c:82:b7:69:2e:81:07:d7:c5:e8:54:
         88:d2:cc:67:86:66:66:33:54:73:56:0f:c1:62:9c:47:7a:e0:
         49:19:45:82:39:4e:42:92:32:eb:34:3b:eb:36:f2:fd:66:9e:
         5f:18:1e:3d:6c:c9:4b:ef:d4:63:b1:4d:1b:ca:8e:51:fe:77:
         91:3b:b7:cf:ad:fe:1a:5c:f4:ef:17:5c:7c:a0:9f:62:fc:9f:
         a8:d1:96:aa:d7:3e:7f:b9:8b:64:4a:3f:8b:b0:ec:fa:45:14:
         5c:58:46:0e:96:30:23:a9:3c:04:e3:54:2d:31:5c:ff:f9:16:
         a9:7c:0d:52:87:5b:76:a9:8a:49:d0:4a:bc:61:34:f3:83:1d:
         6c:5a:c7:80:7b:26:3f:79:37:31:49:9b:ea:78:90:fc:62:70:
         02:91:f3:9c:2d:00:a5:9b:da:07:f8:73:c7:75:1e:04:d7:d8:
         2e:79:5b:67:26:a3:4a:5a:d3:3a:40:be:bc:da:f9:e4:41:1f:
         f0:7c:c1:36:4b:86:45:5b:fa:eb:87:30:d1:a7:aa:60:7a:dc:
         33:3a:0c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----