Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File:                     4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier:          yhhMxPHteBBQ+VqkgDpH1b5MAfiUKnzX/148PEdxuJY=
Subject key identifier:   47:B0:90:FF:58:E6:E1:25:87:C8:6F:F7:32:03:09:6A:67:27:8B:B2
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer:       /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial:       01962E98B11B49C9A665BCC538F6EACC0BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: V/No2ctEh8Xw/W6DSbfvVlmFLpcp5FYCX4KoiYiGh0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b1:1b:49:c9:a6:65:bc:c5:38:f6:ea:cc:0b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=47b090ff58e6e12587c86ff73203096a67278bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:15:92:b7:e0:41:a5:24:32:20:04:28:0b:
                    c5:8c:3a:de:4c:60:80:f8:3b:24:7e:e9:83:d8:0c:
                    50:82:4e:0c:17:ce:56:44:63:d3:be:ec:ec:9a:db:
                    04:03:16:9f:01:b1:28:e5:d4:a0:64:1e:05:a6:44:
                    7a:1d:01:7f:82:9a:5e:f4:b0:9c:7b:71:d0:ef:67:
                    41:f1:0b:3d:b4:e3:ae:94:77:3a:3e:df:de:a2:1f:
                    ee:d7:b0:28:41:9c:96:7b:53:1a:cb:6c:f9:1b:de:
                    6f:fc:16:77:8a:9a:2e:bb:14:45:58:d8:79:17:fe:
                    47:3e:1c:5e:be:9f:15:0b:fa:32:07:51:cc:74:0e:
                    ad:84:b7:3c:e8:1b:45:63:8a:bf:39:0a:5e:b9:8b:
                    01:40:a1:49:fe:4f:e3:91:3f:72:3d:83:63:d6:87:
                    ab:db:33:fe:4b:94:29:cb:c3:9e:f8:84:8a:e3:01:
                    12:32:70:bb:58:44:72:e1:3e:6f:42:2c:01:33:4e:
                    81:95:d7:33:dc:da:2e:66:67:1e:e7:73:8e:ef:07:
                    d3:4e:55:df:79:ea:fd:f8:96:00:c2:d5:3b:66:2a:
                    8f:f3:6d:16:62:48:f8:c4:f3:58:11:b0:0f:7b:89:
                    e4:84:8f:60:12:cc:18:1c:61:7b:e2:24:5b:6d:93:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:90:FF:58:E6:E1:25:87:C8:6F:F7:32:03:09:6A:67:27:8B:B2
            X509v3 Authority Key Identifier:
                keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:0a:fe:eb:a6:b1:43:45:33:1d:ea:38:3f:fd:37:37:c0:
         b3:70:b4:77:30:ec:1d:27:ac:0c:b1:5c:a8:db:29:e7:17:fd:
         3c:16:67:71:fc:00:b4:e9:ab:c7:08:03:b2:50:ac:b6:90:38:
         0d:26:9e:ef:bd:ee:10:30:1c:9e:12:5c:a7:2d:17:0f:64:85:
         ad:3f:f4:df:fd:32:c2:e1:b1:df:75:1f:5f:4e:8f:2e:a4:ff:
         21:4a:b8:a1:3b:e1:b6:c0:e5:73:25:a0:bf:ee:14:b5:29:d4:
         ff:a4:98:c1:0f:1c:23:e0:d8:07:41:7e:0a:26:fd:0a:32:c3:
         78:8c:cf:94:c1:79:9d:1f:14:8d:1b:f0:40:fb:15:4c:83:80:
         06:4a:d1:d6:22:07:04:14:fd:40:83:55:c6:2b:53:1b:80:b0:
         d4:bd:c3:b4:20:c4:9c:f5:9a:5d:1a:d6:be:8a:ec:7e:86:3c:
         9d:c2:7b:fd:5a:bf:30:a6:de:ef:43:5d:bc:f9:6c:9b:e1:36:
         74:ac:13:e8:3d:c3:fd:83:8d:cb:d3:3b:64:93:0b:76:a6:9f:
         cd:0b:26:14:a4:7e:4a:3f:31:45:b7:2d:9f:7e:db:63:17:4d:
         91:f1:d7:91:e9:23:ff:68:0b:07:d2:1d:13:71:06:1d:c5:fc:
         b2:e8:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----