Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File:                     1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier:          r10fQYcnhOFNMvNI4/uSG43TRn04ecko67+a2y68tKE=
Subject key identifier:   D3:C1:E6:05:78:A2:BC:6D:B7:8C:7B:D1:7C:60:56:B9:B4:4D:5F:EF
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer:       /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial:       01962E986E3BFB38BA4095A625712DE539CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number:          0B16
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: TxMJn6UFd2HfVTvELzNrfv8FMpO/nmNfEPO+0XxzxKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6e:3b:fb:38:ba:40:95:a6:25:71:2d:e5:39:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=d3c1e60578a2bc6db78c7bd17c6056b9b44d5fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:93:07:65:bb:9b:b6:32:77:d4:50:4e:35:
                    19:b4:b4:d8:21:c7:99:b7:e6:6f:2e:b2:64:28:07:
                    01:d1:d5:e9:ef:d4:a0:01:10:00:c1:13:bd:8a:25:
                    8f:ff:bc:a7:59:42:af:e6:9f:84:c9:37:2c:40:de:
                    09:dc:9f:b2:97:6f:ef:ac:c0:8f:a3:5d:27:bd:65:
                    cd:8a:0a:31:08:92:4c:b2:6a:97:1f:d5:a6:0f:ea:
                    9d:d5:39:cf:03:c8:05:65:a6:14:aa:71:c4:5d:4f:
                    73:a4:68:ac:50:68:73:83:c4:85:85:ba:72:aa:e2:
                    5f:17:dc:c6:df:e4:e4:69:81:20:8d:95:5b:5b:b7:
                    bb:1e:2f:5e:c6:68:f9:f0:0a:8e:13:30:00:64:4d:
                    74:f7:f2:ba:15:76:b5:d1:b5:a7:4b:37:5f:3d:15:
                    af:ed:b0:e3:3b:cc:10:8e:d1:6f:84:de:fe:1b:e3:
                    b5:af:32:f7:97:3e:ca:3e:f6:a9:de:05:f4:53:c9:
                    d0:1c:53:44:30:40:21:62:21:be:6a:d6:99:a8:40:
                    1d:0f:e2:29:ac:53:e1:7d:50:0d:5a:bb:87:5d:83:
                    55:22:b0:92:d9:a7:05:f4:22:06:24:8b:fb:3f:a1:
                    82:c5:e8:92:e9:46:2e:39:46:92:b6:1a:7f:4f:96:
                    b8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C1:E6:05:78:A2:BC:6D:B7:8C:7B:D1:7C:60:56:B9:B4:4D:5F:EF
            X509v3 Authority Key Identifier:
                keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6b:4f:9d:88:4c:6e:a1:f9:0d:7e:57:83:75:58:37:f5:11:
         67:10:a6:74:b6:61:a4:b6:98:17:86:0f:1a:96:dc:77:30:ed:
         82:f7:44:b0:d6:6b:ce:51:48:1c:5e:a3:76:77:77:d5:89:d4:
         2a:eb:43:34:ba:a8:be:54:20:ee:32:66:30:5b:93:8a:41:b4:
         10:73:c8:f2:00:77:1b:6e:74:f6:b5:97:ae:92:93:d8:b6:70:
         2a:5e:7c:5d:bd:18:64:5c:34:2d:39:e8:65:6c:37:3f:a2:a6:
         2f:e3:ba:df:0f:64:fc:fe:95:80:b9:97:68:e5:2b:15:0b:f4:
         65:54:f2:ad:ae:2c:c9:53:15:d1:44:f8:fa:3e:d5:30:d5:af:
         71:e1:1c:4f:1f:d9:35:e6:b9:e6:ea:d4:f9:c0:bf:c0:9b:0d:
         be:b7:fe:dd:fc:d5:bd:56:73:91:07:78:39:20:fe:f1:52:94:
         e7:ad:4c:7f:79:e3:e7:82:28:ea:9a:01:fc:bc:80:8f:bc:1e:
         60:29:8d:69:73:c9:9c:b5:48:6f:45:9c:ec:39:0c:30:85:22:
         a4:7b:9b:bd:53:d5:d0:7b:5f:e7:9a:24:ad:e5:a5:b1:2a:66:
         56:af:ca:ec:4c:f3:cd:ee:a1:16:2b:db:06:8f:65:c2:e8:19:
         08:41:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----