Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File:                     1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier:          RuoDxiFny8P3nj5xBmyeyZz1/BD01jIcgLc60CE7Cg8=
Subject key identifier:   5D:4B:EB:9B:4B:36:8B:D3:6A:64:3F:4B:CC:16:AE:B9:79:A0:65:BC
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer:       /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial:       01962E9966A36428482115AC60FD8852D594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number:          0819
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: tbkA7X5NloN5QfYg0QOmSRF6Jdio8CgnaNYe2+svWTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:66:a3:64:28:48:21:15:ac:60:fd:88:52:d5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=5d4beb9b4b368bd36a643f4bcc16aeb979a065bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:0c:72:a9:bd:56:68:5a:84:17:3a:c4:67:
                    23:4c:02:36:4b:35:79:1b:0c:cb:8d:92:3e:ad:e3:
                    b5:1f:e0:40:98:7d:a2:64:61:41:a4:fd:0b:24:57:
                    e5:81:05:1d:d4:30:5c:bb:70:9c:53:65:4d:f1:c3:
                    b8:95:11:e1:c0:98:06:2a:4c:59:52:92:63:34:9a:
                    f9:18:44:d3:75:b4:ce:dc:c1:90:88:f1:0a:da:43:
                    10:5c:63:62:28:30:b6:65:69:30:22:6b:23:95:71:
                    de:87:f3:c8:0c:0b:a8:d2:62:54:0b:cb:a1:81:7e:
                    e0:e3:33:15:39:15:09:1d:89:5d:a5:16:51:11:e3:
                    43:00:f2:c5:c1:7a:b3:e0:99:cd:47:7c:fe:91:f4:
                    52:81:5a:0d:1a:9d:5e:9f:bb:49:bd:33:5d:f1:70:
                    f1:d2:53:0a:f2:30:59:86:a0:d9:bd:5c:f2:ea:ff:
                    ec:44:a7:af:3c:5f:5d:17:05:6b:f9:e5:36:8d:6a:
                    51:c4:b9:8f:5b:27:c7:f7:69:78:7e:a7:27:44:82:
                    b1:25:aa:73:9c:c7:a2:d0:39:46:7d:a6:e6:53:09:
                    97:45:10:80:69:9c:92:74:54:17:ce:d1:f7:b8:a9:
                    95:a7:e9:2e:1a:98:50:14:c8:0d:3f:0d:38:e8:3d:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4B:EB:9B:4B:36:8B:D3:6A:64:3F:4B:CC:16:AE:B9:79:A0:65:BC
            X509v3 Authority Key Identifier:
                keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:09:47:28:3a:d7:62:4e:39:04:d1:97:b0:67:2e:68:44:cb:
         d4:65:a1:1b:c5:96:20:32:5c:58:76:8a:dc:f0:b8:e8:f8:c9:
         96:a1:e0:7c:96:a8:8a:c7:7d:d3:b9:9c:24:43:e9:4b:30:0f:
         e1:20:73:93:a4:2e:43:64:40:a0:c4:0c:53:28:8a:93:17:8f:
         dc:62:10:d4:9a:4e:99:11:bf:53:fa:1a:75:7e:5e:e6:a1:18:
         5c:f2:9a:ba:a7:3d:55:7c:56:78:51:6f:4a:dc:f3:df:b4:9f:
         7e:ee:48:8a:a5:39:42:94:dd:cc:f7:6f:e1:52:03:f0:e2:63:
         b7:c6:fe:2f:53:de:c6:6f:97:c9:c6:f8:fa:7a:89:de:05:d7:
         90:1c:8f:34:63:93:9a:fd:b5:04:95:cc:37:0c:1a:5c:48:05:
         8b:8a:17:d7:c4:58:f6:2b:5b:f9:78:3a:d9:58:c0:22:ee:bb:
         d4:95:ed:da:bb:d3:c9:5d:b1:23:1d:a1:46:fc:1a:bd:fb:10:
         2e:b9:50:9e:fe:94:36:45:9d:a9:27:4d:09:e0:9b:04:6c:cf:
         de:ee:00:14:7b:fa:29:b1:f2:73:f6:0c:4f:d2:fc:01:6c:2c:
         26:da:d3:4e:5a:af:57:b2:a3:10:61:4c:31:72:65:35:1f:47:
         54:c7:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----