Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File:                     qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier:          zxFoAJvpA1xxAyEtOtUZcB9eqazJW6witfMmPOk/GPQ=
Subject key identifier:   62:7E:39:74:51:58:8E:9A:76:D2:83:82:7F:B3:BC:37:5A:15:83:C7
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer:       /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial:       01962FAB7E64BCB3E64BFB6FF7D2116E680F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number:          046F
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: VL/lThq4fVaWG67I47lA7UyaIWUqApNgM2YlaqQr1/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7e:64:bc:b3:e6:4b:fb:6f:f7:d2:11:6e:68:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=627e397451588e9a76d283827fb3bc375a1583c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b5:ee:5f:97:fe:4f:0e:ea:50:6d:0a:33:24:
                    73:b4:a4:fd:aa:6e:c8:87:ff:14:6c:bc:50:e7:c4:
                    27:4a:ad:64:b7:94:a7:45:88:0b:03:44:53:16:51:
                    2c:49:5a:f4:fe:59:22:c4:be:e1:e8:de:6c:ed:cc:
                    4c:eb:a3:7a:aa:0d:51:4b:e6:f2:82:fa:25:b8:82:
                    f7:fd:bc:c4:5a:95:a2:c7:a5:62:fe:65:09:12:f4:
                    2b:04:64:a3:32:6e:9e:85:95:ce:be:d5:1b:a6:47:
                    70:d7:66:6f:0d:4a:e9:c5:c3:5a:85:13:07:28:59:
                    a3:1a:f3:be:16:3e:68:9a:c3:0b:b3:02:fe:4b:e0:
                    ee:ba:f1:c7:b4:96:04:54:6b:0a:25:83:a1:28:13:
                    e3:2c:4b:27:d0:8b:95:a5:e0:20:1a:76:91:6d:bc:
                    57:36:f7:24:e1:13:5f:3e:e7:f0:54:86:2d:59:57:
                    b2:0e:74:3c:b0:38:eb:25:9e:bc:0f:73:5f:91:68:
                    a0:32:d7:af:5b:fa:c5:c2:15:b2:ef:a7:08:79:03:
                    d3:1e:48:6c:8c:ec:87:ef:84:8b:8c:9d:02:e5:4c:
                    e9:aa:24:46:82:75:0e:4f:f9:e5:74:dd:77:c9:52:
                    d3:12:30:ae:5b:fe:e0:31:c2:af:8b:b3:f1:3e:40:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7E:39:74:51:58:8E:9A:76:D2:83:82:7F:B3:BC:37:5A:15:83:C7
            X509v3 Authority Key Identifier:
                keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5e:e7:6b:0c:c5:47:39:3e:7a:7e:5e:31:2a:bb:a8:24:6d:
         5f:a0:5e:0b:7d:cc:06:74:ed:f1:0e:50:94:aa:67:79:28:22:
         9e:41:9b:94:96:85:7b:2c:ca:77:59:bc:69:53:de:95:dd:a0:
         88:00:6e:b8:61:32:44:83:ec:35:21:ad:06:7a:85:a6:dc:63:
         53:a0:68:c5:12:07:5f:14:c8:ba:46:24:04:b5:5e:b2:ec:2c:
         3e:9b:c4:38:b7:a2:6d:34:35:92:0a:c0:cd:21:24:03:89:f3:
         1b:87:16:65:2c:99:cc:f1:37:be:f2:2c:b3:87:4d:14:c7:bb:
         38:60:89:e6:b5:69:10:da:03:1d:99:28:67:6d:4b:80:2b:3b:
         f7:27:88:45:08:40:19:58:b6:21:90:e8:7a:d4:89:f3:32:84:
         dc:d2:fc:65:2f:85:9b:39:34:09:83:f7:44:4c:f4:59:7c:5d:
         98:7d:56:1c:2f:ba:f9:0c:a1:05:9c:7c:47:bd:9a:34:6b:31:
         5f:60:5c:be:1a:54:ff:02:57:15:75:9b:bf:f8:d0:7f:ad:d6:
         62:d3:13:6b:51:eb:d9:5d:fd:a5:8e:f8:61:61:2a:4b:9b:c6:
         b9:65:c9:e6:69:54:ca:04:99:0a:44:4d:1f:2d:ad:b2:44:aa:
         42:86:dc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----