Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File:                     _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier:          YGJqLCEZsn45jHVu40pKe/8EtHohRZtbSJnbdtFhUec=
Subject key identifier:   03:0D:06:1C:9A:5A:FE:E9:6C:E2:24:97:20:47:7E:83:7B:69:1D:11
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer:       /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial:       01962DF3A9B3A52FDB90286B3A780E9D1AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number:          1213
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: vE9yQTsKJiPyTJwTTNhbWDIVv6Pnf9TUqJRVsSxxO8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a9:b3:a5:2f:db:90:28:6b:3a:78:0e:9d:1a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=030d061c9a5afee96ce2249720477e837b691d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:f2:49:56:49:2f:9f:36:7f:92:0d:e0:81:
                    45:75:3f:7c:65:5c:21:ed:5c:e9:47:fa:f0:1d:2e:
                    91:90:7f:87:4b:4f:ee:20:7a:47:86:ae:51:22:3f:
                    4d:93:01:f7:40:b1:b2:11:6b:96:e2:54:1b:18:c0:
                    48:a2:f4:1f:2d:86:f3:52:f9:93:96:2a:15:35:4f:
                    5d:d4:41:3c:37:47:25:28:ae:73:46:13:4c:4c:29:
                    80:ec:fc:29:03:63:31:b3:89:af:a2:ca:24:bd:a2:
                    8c:47:09:ef:58:2a:5b:32:02:94:1b:59:73:d7:50:
                    80:0f:69:60:c4:57:32:6f:e8:74:c9:1f:c9:12:10:
                    dc:5e:1a:93:d4:13:8a:15:19:23:89:12:fd:9b:57:
                    f5:4a:56:46:ae:72:08:fb:e8:67:ff:fe:6f:ac:20:
                    3f:b2:d5:40:d9:82:1b:8a:4c:7d:f9:18:a6:e9:ba:
                    a8:2d:60:08:5e:6a:e9:b0:91:4f:e3:db:59:ee:fe:
                    e4:9f:35:34:77:8f:27:57:75:28:c0:3e:fc:9e:3c:
                    c8:5d:1c:6e:64:24:71:46:0b:1e:eb:f4:c0:ce:44:
                    82:f4:09:12:c4:53:b3:45:ee:1e:cb:80:03:7e:cc:
                    47:02:73:47:1f:bf:b1:8b:48:d1:16:df:9a:f5:04:
                    c4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:06:1C:9A:5A:FE:E9:6C:E2:24:97:20:47:7E:83:7B:69:1D:11
            X509v3 Authority Key Identifier:
                keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b3:e2:7b:91:68:00:08:73:9a:5d:0e:e8:f7:d5:1b:78:b0:
         a1:48:1b:54:92:7f:43:41:16:f0:bb:75:eb:f7:25:20:56:69:
         20:8b:31:6d:07:a4:ee:3b:e3:fc:84:b2:bd:b8:4b:95:1d:dc:
         18:2e:73:bb:8b:a9:77:bf:c1:6d:91:5b:ab:e7:7c:c6:07:39:
         8d:37:87:ea:e4:16:b4:4c:e4:ec:ba:f3:ea:35:ae:82:96:a5:
         a9:02:79:0f:9d:9e:9d:9a:37:b5:5c:b9:43:ea:03:87:78:e8:
         b0:ae:d1:aa:43:7e:a7:a5:c0:fa:b9:7c:28:2b:05:f3:2c:ac:
         19:db:b6:cc:e7:a7:02:ff:e9:e8:67:41:7b:f5:eb:0e:75:78:
         62:56:7e:c2:db:10:20:b8:f1:2b:11:a1:f5:10:e2:de:57:2a:
         b8:ab:62:a7:c0:4d:2a:24:dc:3f:1f:aa:5c:61:8e:94:7e:04:
         cd:4e:7c:a7:aa:e6:50:17:a8:9e:1c:0b:ae:d5:1c:50:62:15:
         da:2d:10:7f:ac:b0:81:02:42:00:26:c3:d9:31:01:12:7a:9c:
         9c:ee:79:28:19:63:29:33:36:f3:ad:e1:ea:1d:51:f2:2b:55:
         89:d2:ba:05:db:26:e7:04:06:11:5f:61:c6:10:28:c2:21:99:
         f5:94:81:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----