Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File:                     1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier:          SsOGyvVhvdkETZUwkcEAkB9ruhLVqxpOdKD8bA7XSKg=
Subject key identifier:   46:78:85:0D:D0:D6:46:5A:1E:D7:48:1E:4C:60:EC:02:76:A5:22:35
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer:       /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial:       01962ECF9E8037F084BBCEACB45C3688D071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number:          0216
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: J72PuYRlhKZFBQA446hV+uGFtK+J0s5E1L0NqR3YYug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9e:80:37:f0:84:bb:ce:ac:b4:5c:36:88:d0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=4678850dd0d6465a1ed7481e4c60ec0276a52235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:7b:cb:87:88:f5:49:cf:d0:c6:03:bf:aa:
                    e6:90:19:7c:92:e9:7c:e6:3d:97:f2:ab:a4:1c:29:
                    94:27:5a:b5:77:8c:61:b2:ea:f5:2a:28:de:0d:ca:
                    d7:77:b9:7f:0f:b5:32:09:a2:09:cb:3f:3e:5a:3f:
                    87:bc:24:8d:7f:44:a6:91:40:1b:e5:00:47:5f:1e:
                    bc:fb:c9:7a:70:55:62:46:95:41:11:90:68:bb:c5:
                    c6:71:c3:57:96:dd:e8:69:86:a0:58:ba:6d:40:ce:
                    6a:54:2a:72:7f:a2:b8:79:e3:45:b9:38:6b:b7:cb:
                    b6:51:2b:f3:2f:dc:e8:db:cb:ed:e2:a3:5d:b4:55:
                    92:8e:66:df:64:f7:3f:62:c3:4f:7d:62:74:7f:28:
                    a8:e7:94:47:f7:54:a7:52:e7:4f:bc:71:59:03:2f:
                    8c:08:3b:ee:c5:ed:be:1d:e0:e3:b1:67:da:e4:86:
                    41:a5:aa:f7:1f:1a:0f:68:83:c2:71:cf:9a:8d:97:
                    9f:ef:56:1f:96:aa:d1:a2:5d:b5:23:3f:34:3f:20:
                    96:86:1e:a4:58:04:57:fc:bc:66:7e:50:a9:3f:50:
                    5b:8f:14:d0:43:8b:48:8e:53:51:aa:ea:c8:ed:33:
                    6f:2b:3b:8e:d3:bc:1b:8b:7d:37:a7:a3:c6:84:b7:
                    e3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:78:85:0D:D0:D6:46:5A:1E:D7:48:1E:4C:60:EC:02:76:A5:22:35
            X509v3 Authority Key Identifier:
                keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:20:3e:ad:c0:1e:2e:8c:ae:89:a3:44:01:5a:b3:5a:25:32:
         a6:f7:76:0f:dc:74:d8:3a:ee:ee:c7:8d:43:5f:95:60:f4:2e:
         c5:35:86:cc:f5:66:38:54:3c:95:70:38:0e:c1:16:dc:fc:cc:
         01:6b:20:69:f1:c6:4a:0e:75:84:36:28:ed:bc:08:d1:bc:ca:
         c0:c5:33:af:e6:70:f9:4a:47:38:8d:49:15:d5:29:e2:72:9a:
         4a:8c:07:3e:df:71:7b:c1:fb:b7:ee:ea:5b:80:cd:f3:aa:41:
         97:d4:2e:71:ca:5e:fa:66:86:b8:a9:2a:4f:c7:14:69:d4:0e:
         8f:7b:f6:76:16:f4:84:32:12:26:38:5c:fe:04:3b:d3:10:e9:
         05:99:22:b6:7d:e0:53:e5:d8:5d:f9:46:46:22:c9:ad:a1:c4:
         cd:b9:c6:95:41:5a:f5:71:b5:2b:0f:d8:5a:41:d7:dd:db:17:
         4e:c1:1b:63:2f:4a:71:1e:fd:5b:47:ed:61:d9:34:a8:45:e7:
         64:67:79:d5:29:ac:24:db:1a:43:58:97:1b:0e:9b:7e:60:12:
         fc:ab:40:b1:60:e8:08:3c:93:ae:11:a8:ef:f7:0d:63:61:25:
         40:85:08:3d:0c:06:18:54:ec:d9:e8:1c:92:eb:1a:ae:88:b6:
         6c:8e:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----