Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
File:                     hGy8NY5qqP7tbgMmoECJt-XyqYk.mft (raw, json)
Hash identifier:          npsVv4J14k+lTxiR/HkpBH/FCXejIicb3YikxFQAfsU=
Subject key identifier:   FC:D2:72:98:AE:40:08:26:31:C5:A6:E5:9B:83:86:E2:CB:F1:05:FC
Authority key identifier: 84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
Certificate issuer:       /CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Certificate serial:       01962E99A60FFC417CE979BB090F49DE733D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
Manifest number:          094B
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: hGy8NY5qqP7tbgMmoECJt-XyqYk.crl (hash: XBTE0VZwBCJ8YTGWJRI7mtui1Kjy4Ez1r9NwLgvUEcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a6:0f:fc:41:7c:e9:79:bb:09:0f:49:de:73:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=fcd27298ae40082631c5a6e59b8386e2cbf105fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:a5:b8:e6:62:57:f1:b7:25:5e:8a:51:da:
                    df:8e:a5:98:f8:fd:74:25:7a:03:22:b6:a2:06:5e:
                    c9:da:37:46:92:87:f1:b1:4e:a2:c9:de:1e:f5:e3:
                    e7:7e:20:cf:ed:68:3e:29:2a:ac:c1:4e:20:b8:08:
                    c2:df:04:66:44:b6:5a:14:0f:8f:4d:6a:5a:aa:a0:
                    57:93:5e:ea:bf:fc:5a:ea:b1:53:e3:5e:dc:11:8d:
                    cc:2e:6a:9d:82:56:7f:40:0b:c8:47:82:61:e0:64:
                    f2:ec:9e:17:df:71:d7:4f:a5:48:49:5f:9e:aa:bc:
                    2d:0f:e4:30:db:71:d3:c2:71:50:1c:93:a8:74:8d:
                    f2:c2:2e:0b:7b:cc:8d:f0:1b:0a:c2:fb:d9:56:27:
                    91:9f:e9:6f:b6:76:70:4e:6c:61:76:2b:b9:89:26:
                    78:14:4f:52:8f:ab:e8:6a:02:bc:26:7f:f2:0b:e4:
                    30:37:d4:7d:55:50:b9:ae:46:77:6a:36:f7:76:3c:
                    e5:c1:ff:89:e9:cf:41:80:71:9f:fe:15:cb:f6:e9:
                    fb:f9:ca:ed:8a:fb:08:fc:b9:0b:ac:c9:c4:50:ed:
                    d9:88:3e:f3:ba:ed:c6:36:ec:5f:a7:05:da:c6:5b:
                    27:4d:14:69:ba:01:ee:70:74:38:ad:0d:9b:be:52:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:72:98:AE:40:08:26:31:C5:A6:E5:9B:83:86:E2:CB:F1:05:FC
            X509v3 Authority Key Identifier:
                keyid:84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:65:d7:60:a1:80:27:f0:65:c6:7c:6e:05:39:87:17:74:04:
         ae:d2:da:89:1a:95:30:7c:8f:d2:21:d0:ad:10:52:c6:5a:28:
         9e:4f:1c:34:0c:5e:89:d0:a9:f0:42:85:18:13:4a:7d:d5:fb:
         ff:d6:16:16:98:40:32:f7:5b:82:99:37:ec:54:02:1c:fc:be:
         41:e4:91:96:15:db:00:72:dc:cb:af:5e:44:56:88:11:96:f0:
         27:c9:73:fa:9f:5e:24:96:76:6c:0f:3a:dd:0e:d5:27:12:fb:
         80:9c:fc:d8:ac:79:0b:d8:fb:d4:e0:26:1c:0f:9d:7f:f5:b6:
         6f:9b:22:2e:bc:62:e4:da:87:24:88:fb:30:87:62:c1:bd:df:
         0a:4c:e5:9e:43:1b:40:ee:12:5f:c3:04:14:38:73:9b:17:e9:
         c8:13:90:6e:2a:df:c9:11:13:7e:e8:d8:b9:97:97:84:0d:bd:
         9b:77:ca:ab:54:1c:bc:76:82:1f:82:7f:8f:c6:65:51:5e:f6:
         10:12:2f:34:2c:0c:0f:a9:9e:07:59:1a:51:63:f4:3b:c9:43:
         04:59:0b:6a:19:e2:57:aa:87:2d:fc:17:59:f7:5b:36:e5:b0:
         6f:bb:a1:d6:45:54:21:54:f9:03:18:46:47:1d:36:da:a6:fe:
         a9:52:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----