Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.mft
File:                     yz65T8gixYUUKHlA6NzdwEGw41k.mft (raw, json)
Hash identifier:          ano1g8t7iUcaRSjAMUYYXYPsWle+T3aAQg9DK2YJuyA=
Subject key identifier:   20:DF:89:C0:58:3F:F0:73:AD:32:B0:99:72:69:08:FF:9C:AD:41:EC
Authority key identifier: CB:3E:B9:4F:C8:22:C5:85:14:28:79:40:E8:DC:DD:C0:41:B0:E3:59
Certificate issuer:       /CN=cb3eb94fc822c58514287940e8dcddc041b0e359
Certificate serial:       019547ECA87CC2B188945C8038A5F10F6C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yz65T8gixYUUKHlA6NzdwEGw41k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.mft
Manifest number:          0E9B
Signing time:             Thu 27 Feb 2025 15:00:46 +0000
Manifest this update:     Thu 27 Feb 2025 15:00:46 +0000
Manifest next update:     Fri 28 Feb 2025 15:00:46 +0000
Files and hashes:         1: yz65T8gixYUUKHlA6NzdwEGw41k.crl (hash: Rf1OHwpRYiK7IyLIEkenuMh/onYG01bkvh4zUsCEY4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:ec:a8:7c:c2:b1:88:94:5c:80:38:a5:f1:0f:6c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3eb94fc822c58514287940e8dcddc041b0e359
        Validity
            Not Before: Feb 27 15:00:46 2025 GMT
            Not After : Feb 28 15:00:46 2025 GMT
        Subject: CN=20df89c0583ff073ad32b099726908ff9cad41ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:65:88:30:6a:2c:1d:69:45:86:29:9d:e5:
                    69:cd:15:a3:8d:5a:5b:5d:b1:95:9f:2f:a2:89:e2:
                    91:db:81:b6:65:01:7b:62:f9:70:ac:62:93:bc:1b:
                    af:f0:bc:47:61:4a:33:b2:1e:34:57:5e:c3:a4:38:
                    1f:2f:8c:ae:50:b3:d5:c8:15:74:b0:fb:3b:73:75:
                    8f:41:b5:13:ea:9b:99:a1:d0:ba:13:07:f0:fe:9f:
                    79:64:12:8f:e2:6a:2d:e2:3f:eb:3b:a8:32:b9:e0:
                    53:2c:7f:77:d9:1f:fd:d9:04:bd:0a:4d:67:72:c5:
                    16:7a:cf:51:51:2b:36:8c:45:f7:d5:2e:bc:1c:75:
                    67:28:ee:6f:fe:88:cc:16:be:f4:40:33:90:a4:52:
                    d0:7e:8d:f1:45:45:ef:d2:f1:d5:8d:d3:af:f5:e5:
                    cd:46:82:e1:06:54:89:70:33:4d:fb:e6:bb:4b:06:
                    8a:68:e3:e4:86:b5:19:b1:b0:3b:68:4c:22:57:8a:
                    61:2a:07:8b:62:fb:0e:34:1d:ab:94:89:f5:6d:d0:
                    b5:9a:f2:73:fa:2d:e9:03:66:7c:b7:a0:80:c8:57:
                    6c:17:37:f3:84:69:da:0f:cd:6f:21:70:3e:d8:3a:
                    e8:b4:ab:f0:a1:21:31:20:f7:bb:cd:d1:f1:ca:13:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DF:89:C0:58:3F:F0:73:AD:32:B0:99:72:69:08:FF:9C:AD:41:EC
            X509v3 Authority Key Identifier:
                keyid:CB:3E:B9:4F:C8:22:C5:85:14:28:79:40:E8:DC:DD:C0:41:B0:E3:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yz65T8gixYUUKHlA6NzdwEGw41k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a7:aa:e3:10:db:ef:b5:72:06:89:09:38:7d:e9:5a:86:d9:
         83:b3:69:3e:2a:4a:c8:46:af:0d:99:77:d1:97:3f:fc:bc:c8:
         2e:27:a2:e2:c8:95:e6:8c:2e:cb:04:1d:09:54:68:60:83:11:
         4e:fc:1c:9c:f1:e5:21:04:9a:8d:ef:a5:c8:17:0f:86:ae:45:
         18:c0:c4:b0:41:3c:a2:5a:20:86:04:18:cd:f7:2c:60:74:a8:
         68:5d:32:a1:2b:f5:eb:3e:e2:d7:d8:c4:03:3c:d7:53:9e:ba:
         ac:4d:4b:ca:6a:ae:41:d8:a8:25:69:f0:44:f7:a5:d7:e1:c0:
         dd:1e:93:db:f7:17:41:67:43:35:09:f8:3d:a2:85:fb:1f:b2:
         15:ce:f5:4b:a5:8e:59:b8:08:fd:4b:03:e9:bd:67:18:02:27:
         6e:52:c9:e1:54:aa:72:92:85:a8:5a:66:c1:47:97:1b:0e:71:
         ab:79:03:c2:f9:fc:0a:dd:8b:1f:73:cf:9c:76:00:70:4e:f0:
         41:d7:2d:29:d3:7a:8a:be:7f:08:bc:89:81:9b:f1:3c:f3:2a:
         b2:cc:50:06:dd:43:c0:7b:68:79:c6:2f:8e:97:b6:13:1e:63:
         93:1b:80:e3:64:f1:c2:c0:4f:ad:d3:eb:e3:be:2b:c8:db:61:
         c3:4e:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----