Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
File:                     VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft (raw, json)
Hash identifier:          dKxcaZiZVl+7N7QMqirECWdVzJRVSq4iBCksNeQMe70=
Subject key identifier:   16:B3:37:05:32:04:21:07:D0:7C:D4:8F:F8:15:0E:B8:79:8E:BC:C2
Authority key identifier: 54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
Certificate issuer:       /CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Certificate serial:       01962F06EE8936F46E4D3E094DC057B6834A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
Manifest number:          0960
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl (hash: bGYwqKWSUbPH/TnXm1Ivq2mRC3XFEuIi2CzWP+U3AhQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ee:89:36:f4:6e:4d:3e:09:4d:c0:57:b6:83:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=16b3370532042107d07cd48ff8150eb8798ebcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:f0:46:32:75:53:c9:2c:a6:64:31:84:c2:
                    39:a9:37:0a:63:3d:27:13:07:54:dc:87:2b:09:c8:
                    60:3f:4c:d0:b0:21:9c:f9:d0:d2:e2:cd:de:41:68:
                    3a:20:8f:3a:f7:f2:cd:e5:f3:bc:0b:86:f4:4c:aa:
                    3a:03:44:d0:1a:65:c6:43:ba:d1:45:2d:f6:eb:d2:
                    a0:15:a8:7a:b7:cb:10:7d:32:03:bd:84:8a:0a:58:
                    fd:bb:ef:d0:c7:6d:6c:17:a5:19:c8:6b:38:bd:3e:
                    20:5d:28:53:14:ab:fc:72:27:98:2b:0f:07:69:11:
                    13:3a:75:86:a9:30:7a:7a:ab:13:5b:0e:36:1a:3c:
                    aa:2e:7f:21:a2:b6:8d:a5:a7:f9:92:79:21:29:2b:
                    52:54:46:a9:2a:ab:45:89:c9:03:ef:86:6c:06:78:
                    7b:5b:d9:87:93:d0:3e:6a:6f:f3:1a:f2:9c:45:02:
                    8f:d6:f2:3e:3e:82:f3:98:73:af:3a:7d:63:2f:6e:
                    68:60:70:cb:4e:82:1a:81:4e:fc:06:63:3f:c2:d6:
                    7a:f0:23:96:fd:7c:08:dc:99:fe:4d:88:12:ad:6b:
                    05:0a:97:87:5c:46:a9:fc:55:6d:29:f2:f7:ba:89:
                    20:f0:89:2b:ad:77:f1:b2:19:fd:50:44:b5:87:f4:
                    d0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B3:37:05:32:04:21:07:D0:7C:D4:8F:F8:15:0E:B8:79:8E:BC:C2
            X509v3 Authority Key Identifier:
                keyid:54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:fb:4e:06:05:f3:d4:f7:49:6f:92:bf:36:ad:53:67:54:72:
         36:77:e6:9a:c1:3e:70:da:52:b8:67:52:dc:26:34:b0:bf:ff:
         61:8a:04:9e:b3:fa:f7:e1:03:61:e1:a9:d9:97:69:83:bf:98:
         7a:10:11:34:07:1a:ca:c7:b5:db:e0:d1:e3:6a:dc:28:0d:2a:
         c0:52:b7:96:71:4c:45:4b:b9:f3:ec:a0:38:1a:95:24:fc:ec:
         ec:24:09:2b:a1:27:90:61:3a:da:4e:8d:82:66:bf:b0:98:8b:
         84:22:03:50:71:ff:3e:4e:16:f5:db:d2:11:23:27:e1:41:30:
         c5:d1:50:90:e0:97:f2:41:e1:47:f7:5e:74:60:a7:df:8d:f7:
         13:39:be:39:96:87:70:67:ef:3c:4e:78:e7:eb:b1:f1:c4:01:
         40:fc:4e:b0:f2:2f:61:96:8a:04:45:58:65:d9:08:df:d6:ed:
         cc:78:92:11:c9:2a:17:98:c8:1d:44:c3:5a:2d:43:52:79:9f:
         6f:bb:1c:b0:fe:71:e9:95:0c:ec:24:8e:3c:74:d5:6e:be:02:
         81:8b:63:bd:1b:94:27:95:e6:32:80:07:65:ec:55:dc:11:c1:
         91:eb:1e:98:97:3d:44:ae:55:ad:78:c7:79:81:f9:26:42:98:
         64:35:bf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----