Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File:                     1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier:          WXMTyHItxxGM/A8J7XcrtRbw7GqLal11G9JWJzlYke8=
Subject key identifier:   14:E6:9D:F1:A5:88:BE:81:39:7B:B1:34:96:18:1E:A7:82:E0:3E:62
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer:       /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial:       01962F3D460543CB089DEA1F1156CC6C4C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number:          05BC
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: 7Wybrx2qSz4KG27g8eznjCe4F6UZr0CBfa4yLaa/vEM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:46:05:43:cb:08:9d:ea:1f:11:56:cc:6c:4c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=14e69df1a588be81397bb13496181ea782e03e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:52:ba:bd:82:0e:6d:e7:00:98:ab:20:7f:d9:
                    28:36:21:11:71:de:3b:e6:68:bb:da:35:34:eb:74:
                    dd:0c:fe:c1:de:76:26:e0:31:13:37:32:ad:37:7f:
                    11:bc:5b:8d:a6:a3:32:2e:e9:63:a2:a3:5a:7c:04:
                    f6:bc:81:e7:30:21:c6:e8:9c:78:ff:41:20:09:d2:
                    ae:d2:a8:cc:29:87:ba:b6:ed:de:0a:a5:31:5f:ba:
                    c7:ec:9c:67:0b:e2:40:88:90:e1:e8:7a:7b:4c:e9:
                    c4:cd:0a:8c:fc:fc:7c:b4:84:ef:c3:c4:8a:ea:89:
                    c0:79:35:cd:d1:6a:88:35:b6:51:a8:f1:00:ce:f4:
                    74:45:e4:af:b9:32:33:21:de:e1:55:46:65:f0:38:
                    fc:2e:97:ac:4b:b9:f7:de:ac:f0:a3:44:38:53:73:
                    cc:4e:67:d7:b8:86:cb:21:9a:40:31:a5:2c:b8:c9:
                    59:78:eb:26:8e:4c:33:cd:ae:d4:3f:d4:60:c3:4f:
                    ac:4f:84:c4:dc:69:ba:37:b3:1e:c1:df:64:3d:7d:
                    74:08:67:a6:da:fe:4d:1f:e5:94:9d:fb:94:90:14:
                    91:3e:da:ce:f3:e7:46:8b:0a:af:e8:bd:db:e0:17:
                    9a:fd:23:fd:43:a9:40:97:7d:27:51:02:bb:3f:68:
                    93:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E6:9D:F1:A5:88:BE:81:39:7B:B1:34:96:18:1E:A7:82:E0:3E:62
            X509v3 Authority Key Identifier:
                keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:28:9d:35:bc:87:c1:13:d2:3c:fe:e9:3f:32:c0:1d:c0:bd:
         9b:50:77:6e:ea:94:01:45:de:1a:00:39:f6:b7:a4:34:60:ea:
         d0:07:c1:c4:b6:37:9d:12:c4:f7:8f:4b:fd:23:78:62:67:62:
         0d:2d:8e:ab:72:69:1b:44:ab:c4:1c:20:e8:c9:51:03:73:6d:
         56:89:eb:79:c7:2c:81:10:dc:e7:f2:bb:35:b3:10:83:d9:4b:
         d1:50:df:dc:4c:5f:9a:0a:a6:5d:29:24:34:2f:97:df:74:0e:
         8f:91:40:8f:3a:ba:35:d9:86:91:ff:27:b0:98:c4:34:cf:9a:
         88:31:ef:54:79:e5:af:c5:0d:63:d5:30:64:7c:e0:21:54:f4:
         cd:f4:78:cd:fa:46:da:95:e8:47:ca:89:2c:bf:df:3b:4d:2a:
         8f:11:aa:34:ee:26:84:11:4b:95:82:1a:a1:2b:96:62:2d:6f:
         56:9e:cb:89:fc:06:c3:be:6d:46:76:f1:c6:16:35:61:71:1a:
         1b:79:a4:11:0e:ce:03:61:0d:5b:8b:26:78:9f:9b:e6:2f:5d:
         8f:42:1e:2d:f1:3c:ff:07:e2:47:0b:64:21:8c:3f:4f:f9:b4:
         1f:ba:ae:d6:04:73:63:ec:db:ea:b3:86:c7:15:c5:9f:49:1b:
         a0:53:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----