Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File:                     Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier:          00LOKj+wzH9ZIoCZcE1Z65oZV87Aa/apmuHNCHiIwIQ=
Subject key identifier:   C5:E7:30:62:94:42:43:60:DD:F5:0C:58:7F:29:CC:C3:37:49:C2:36
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer:       /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial:       01962DF3FC1F940E420050C1B0FA4F3A0A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number:          10B9
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: 1+k6R9pKW8JY9mQw7VneskJbQyiA2eHFmOWySveaTTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fc:1f:94:0e:42:00:50:c1:b0:fa:4f:3a:0a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=c5e7306294424360ddf50c587f29ccc33749c236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:39:e3:22:38:54:4c:8f:f7:07:c7:68:6f:
                    9e:f1:99:42:68:6f:68:f0:73:bb:60:3e:d3:48:35:
                    12:83:9e:98:92:cf:d6:93:f9:3d:c6:0f:b0:d7:d4:
                    43:24:8e:4d:3d:f6:8d:43:23:f9:85:e1:4e:82:b0:
                    d0:16:14:52:3c:00:21:6e:bc:40:40:5b:06:a1:0d:
                    ba:86:bd:8f:bc:3d:04:02:c0:9c:19:e4:36:a5:d2:
                    f7:7a:85:3a:50:a3:19:5a:60:0c:90:a0:3e:29:b6:
                    a5:4d:14:3f:0a:0e:bf:f5:aa:0b:6b:ba:72:b3:ee:
                    9c:e2:20:5a:ef:eb:df:bb:05:a2:e2:a4:fe:85:ef:
                    f9:22:7c:f0:fe:cf:52:8d:4a:d1:4b:b7:a0:8e:d0:
                    10:c7:88:72:8f:c1:9c:95:14:69:7c:fc:6c:79:45:
                    66:e9:8e:77:63:e0:59:b5:cd:9f:80:e3:fe:0e:bc:
                    58:a3:7f:c9:af:a4:a6:a0:ab:1d:dc:e2:21:34:d8:
                    7d:c7:a8:79:7e:df:35:ab:64:95:57:34:ab:da:21:
                    35:4b:f4:b4:f1:92:dd:98:3d:22:b8:11:17:c8:1c:
                    4f:39:3f:64:4d:ff:38:43:d6:80:7e:91:12:49:03:
                    f9:d3:79:ea:b0:13:a9:4c:d1:bd:17:38:3e:0c:3d:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:30:62:94:42:43:60:DD:F5:0C:58:7F:29:CC:C3:37:49:C2:36
            X509v3 Authority Key Identifier:
                keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:89:a1:bb:d7:2f:56:11:c3:b5:8a:3e:5c:7e:d4:39:7d:d6:
         94:30:9f:e0:41:a3:cb:12:08:60:e1:5d:5d:64:c1:86:d2:9d:
         ea:c1:6e:51:15:40:a2:3e:c5:9e:04:d1:91:77:ea:c3:b0:9a:
         3b:dc:0f:c8:2a:41:90:a1:c0:70:2c:bf:f4:6c:02:b7:07:90:
         19:48:f2:26:69:83:3e:b0:3d:ee:5f:a2:0e:e6:da:ab:5a:a9:
         48:9f:19:07:c8:b3:03:3f:c7:4a:a7:58:e5:92:11:bb:1d:de:
         3d:a6:67:b4:b5:16:a8:b9:5a:ee:0b:93:1d:a8:27:9e:78:d8:
         82:3a:5e:c2:35:ca:ed:99:17:16:ef:d5:e6:75:65:7f:34:2c:
         db:05:32:e2:ac:11:56:28:1c:92:9c:f2:38:4f:9f:16:38:01:
         1a:08:39:9a:79:50:b7:68:3a:cf:c5:d9:44:c2:fe:95:f3:82:
         33:c0:82:d9:b5:78:05:8a:98:8e:c9:b4:65:2a:19:df:cf:7b:
         d8:45:90:80:4b:14:3b:c3:0b:22:5e:a7:36:20:97:bf:6f:66:
         33:2b:06:de:88:b3:f2:24:b0:df:17:ed:b4:29:05:9c:2d:27:
         df:2c:46:7a:99:82:6b:e9:a3:61:6c:e6:d2:fc:07:7c:d6:c9:
         27:12:c7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----