Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File:                     AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier:          /HPQ+3Inixxyxzt1lJ+HP6JZP0HMWncGdf0vdMM/9lw=
Subject key identifier:   48:86:31:97:7A:CC:14:7D:18:4B:3D:A9:C0:C8:BE:55:E0:C0:91:3E
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer:       /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial:       01962E986D707D0C6F2D432236E8952DEC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number:          0BBA
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: 9VikOBGfHiGLZ25qcrB5Zp1I7Z3IzNJfOqaRVu+9O2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6d:70:7d:0c:6f:2d:43:22:36:e8:95:2d:ec:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=488631977acc147d184b3da9c0c8be55e0c0913e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:31:bd:fc:4d:c3:78:1d:de:4e:3b:9e:53:
                    ee:0e:85:81:87:f1:e1:65:d4:5f:2b:ee:a8:dc:00:
                    a2:ee:ff:2c:5b:6e:30:41:19:c0:da:5d:5f:82:43:
                    8c:dc:fd:d8:2b:92:5a:f5:09:c2:34:0e:30:a8:e7:
                    d4:5f:53:54:ef:27:84:01:00:13:c8:2c:01:7a:00:
                    7f:3a:27:93:69:42:17:d2:0d:88:7d:19:cc:58:36:
                    69:29:65:3b:db:ad:a9:81:aa:c3:6b:30:ed:3b:db:
                    6b:fd:bc:cf:d4:ac:2f:b7:90:d3:21:9f:19:a0:a1:
                    85:fb:a8:43:9e:0b:3a:30:5e:e7:41:80:8b:fe:34:
                    6a:2d:0a:bb:1a:2b:fc:ea:e0:9e:48:c0:04:95:d3:
                    98:09:8f:7a:43:c6:6e:f5:5f:ba:50:12:3c:d2:b5:
                    4c:89:1b:dd:af:86:2f:c3:ec:3f:84:10:55:ac:cc:
                    fa:1e:12:ed:48:8d:6f:46:01:f2:b4:58:87:2c:df:
                    7b:2f:3e:9f:ac:78:9e:23:fc:29:22:c1:82:b0:7f:
                    2c:f2:e8:46:47:6f:39:17:c9:10:55:d3:51:b0:a3:
                    cf:5e:66:f0:90:24:05:b3:62:e0:9b:7c:c8:7c:73:
                    1c:68:3d:5e:3b:e1:84:87:00:1a:00:fc:5c:7d:01:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:86:31:97:7A:CC:14:7D:18:4B:3D:A9:C0:C8:BE:55:E0:C0:91:3E
            X509v3 Authority Key Identifier:
                keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:b5:50:f1:82:69:ca:96:0a:77:8e:8c:a5:39:3a:ce:73:
         0f:08:79:18:9c:68:a3:16:c7:21:14:de:3f:ca:7d:e2:b4:00:
         e9:70:79:1d:e4:a6:45:d2:7d:35:79:69:fc:4c:10:f3:72:0c:
         88:1c:03:77:6d:e3:c1:f7:0b:7e:6d:78:81:a8:01:2f:35:6a:
         b8:d6:9a:4c:36:d5:0c:e8:9f:3d:97:a4:56:0c:14:55:66:d0:
         2c:ff:83:92:1b:5a:08:a3:5f:16:e1:7a:0f:ed:8a:6d:2b:9c:
         73:3d:1f:ab:43:1d:f0:ca:15:b4:f4:4f:14:95:60:f5:ee:0a:
         9b:da:a6:85:7f:f6:63:6a:cf:4f:c3:c3:3e:12:98:ec:4c:4d:
         ac:c3:1c:7d:6a:e8:b7:4f:6a:5d:40:04:96:b9:95:15:f5:2a:
         05:83:0e:a4:b1:c1:75:8b:56:3e:5e:21:9f:f8:68:aa:4a:bf:
         22:d1:50:f7:b2:32:af:77:fe:b1:2a:c9:19:4e:1c:94:0d:f5:
         a4:4f:fe:90:a2:fc:8a:0b:b3:74:d9:33:87:c6:a0:67:bc:07:
         1f:51:51:0e:c6:31:f5:77:9a:6f:33:93:28:ea:18:5d:7f:2f:
         d6:38:39:b8:8c:07:f5:36:42:48:68:b4:9c:4e:96:66:aa:50:
         19:e5:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----