Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File:                     G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier:          NzCbjT3xH9vJJKSkT/cdE1k2yIIzQXFCwzFF3wN9Uqo=
Subject key identifier:   45:FA:27:B3:6A:89:7A:78:C2:2B:94:81:4E:AE:A5:DE:E2:D7:B3:B0
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer:       /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial:       01962E9887E14EA3925415585D9CD127FDDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number:          0851
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: b5Fi6EyJExqM7FoHm7byGdt19jYCw7QOWKLKvaBUlCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:87:e1:4e:a3:92:54:15:58:5d:9c:d1:27:fd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=45fa27b36a897a78c22b94814eaea5dee2d7b3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c0:a4:b7:bd:e2:e5:0f:a3:42:ae:2d:0f:69:
                    bd:c7:13:22:ae:b1:30:29:55:92:07:c8:75:ae:dd:
                    0b:60:e9:09:cf:fa:a5:a9:52:16:b0:e1:60:92:09:
                    75:ba:de:9a:d9:e0:ff:7f:bb:05:05:15:1e:ee:76:
                    0e:d6:89:51:c2:6e:bc:7a:e1:4b:61:7b:77:ba:dd:
                    d1:49:b2:9a:6e:8a:11:ab:17:03:67:22:d7:4a:93:
                    41:31:4e:a7:93:eb:df:3c:30:2e:60:30:2d:2a:cb:
                    e1:01:fd:09:89:b4:0d:7b:08:25:9e:aa:37:4f:85:
                    26:25:07:07:23:d4:5f:3a:e6:8c:7c:fb:82:06:6a:
                    17:fb:b7:2e:1a:d2:be:69:70:20:02:50:d2:75:b9:
                    de:45:22:13:0e:b5:b1:6d:cc:4a:25:bd:e4:f9:92:
                    18:d0:db:2a:5b:5c:c1:a5:a8:3b:8c:94:9b:87:c7:
                    0d:42:06:2f:e4:c9:37:a3:63:cf:e0:03:05:35:ef:
                    d6:51:cb:33:82:45:ea:3d:22:ce:d3:12:0f:ea:06:
                    b7:4d:c1:cc:b4:06:1f:3d:a0:46:d8:58:ba:c6:af:
                    ce:15:17:be:08:8b:dc:5e:55:4b:96:82:54:b9:e1:
                    f8:fd:9e:07:cc:e3:a8:1d:ea:45:e7:5b:c4:a4:79:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FA:27:B3:6A:89:7A:78:C2:2B:94:81:4E:AE:A5:DE:E2:D7:B3:B0
            X509v3 Authority Key Identifier:
                keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:37:9f:60:4b:44:75:6b:83:68:c9:08:17:d4:fa:56:64:a3:
         29:1f:a5:9a:c3:6f:36:9c:08:fc:88:18:4b:9e:6d:71:ec:53:
         5f:86:35:06:5e:5a:e4:8b:5c:a0:f3:3d:61:bb:fb:6b:e5:08:
         4f:c7:fa:4a:17:5e:df:bf:b5:a6:5d:8c:16:39:32:28:11:19:
         8d:89:bc:3b:9d:36:83:97:6b:fb:80:83:fc:8b:fd:ea:23:0a:
         7a:61:85:3a:03:b6:68:d3:f2:18:28:7a:49:de:ac:dd:3d:c8:
         a1:f0:39:13:8f:a9:55:a1:1f:fe:5b:08:21:09:eb:25:0d:12:
         c3:79:5f:34:23:ad:9c:66:5c:66:1e:57:f6:63:80:6c:64:95:
         8b:63:dc:f9:f5:7f:56:7f:b8:4c:aa:b5:ef:b7:09:77:2c:bc:
         f7:2d:05:c4:61:22:50:ce:56:ec:f7:78:d6:c7:5e:07:73:6b:
         ff:4c:1a:3e:8d:dc:70:01:16:16:55:6a:ca:41:54:e6:bd:8b:
         31:bc:8e:cb:47:af:66:f5:ec:2c:2f:2f:8b:bc:d8:5b:00:6a:
         85:89:a3:c0:ec:b2:05:57:eb:8f:12:40:ae:86:97:c1:5b:5d:
         be:da:ac:c3:1e:b0:49:8b:45:71:a4:8a:83:04:50:f1:1b:49:
         e6:69:90:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----