Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File:                     C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier:          zZqW5odo8jtMXy9nCvh6vLv2N/+FfjjeRxIPtqqSMVs=
Subject key identifier:   FD:C4:C9:89:60:6D:18:C2:3D:D4:0B:A1:F5:54:CC:99:B2:64:2C:8D
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer:       /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial:       01962DF3D5A97CE50972DA75AB88C4D22A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number:          0FBE
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: MYNeBfoYEKKihFUK9qly/PFIMIXZabq/7+XdqakW1aM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d5:a9:7c:e5:09:72:da:75:ab:88:c4:d2:2a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=fdc4c989606d18c23dd40ba1f554cc99b2642c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:2e:47:03:25:ab:7f:51:44:48:16:01:79:
                    c6:4b:b5:d4:92:9b:09:4b:72:b2:62:42:1e:56:6e:
                    55:b8:1e:26:69:04:36:e5:3c:39:23:57:9f:31:8b:
                    b0:f4:bf:c2:57:d2:20:3a:48:d6:11:8a:fb:ee:31:
                    c7:00:6e:c4:a7:62:74:4d:b8:7d:c1:29:fe:b4:9c:
                    0a:e2:42:e4:17:69:d8:1a:18:d8:17:47:61:16:ef:
                    f4:09:6a:43:60:c3:61:dd:d6:c1:e6:7b:7e:f7:f0:
                    19:fd:c8:04:e9:f0:64:26:8d:ca:4f:ba:69:ec:37:
                    b9:07:fd:60:b5:a1:85:eb:a2:4b:dc:6c:ce:8b:29:
                    d3:81:d5:ce:76:34:8f:c4:52:f2:e1:88:4e:a9:1f:
                    a7:97:a8:8a:40:83:43:52:ef:2e:7b:88:c2:4e:59:
                    1d:0c:30:11:9c:e4:30:a5:59:cc:e9:24:2c:6c:15:
                    72:91:28:b9:be:2c:d4:82:97:32:90:c6:6c:16:50:
                    1f:f7:3a:07:1b:cf:0d:cd:32:e5:20:d7:bf:6b:52:
                    71:fc:1c:a5:91:3d:92:9a:26:0a:e0:79:1c:7e:e5:
                    94:a5:c0:53:6c:1c:b0:cf:46:56:3a:f5:05:c5:23:
                    ad:41:a9:4d:a3:d7:f1:14:bb:a0:29:8b:c2:61:63:
                    51:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C4:C9:89:60:6D:18:C2:3D:D4:0B:A1:F5:54:CC:99:B2:64:2C:8D
            X509v3 Authority Key Identifier:
                keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a5:f8:ed:d3:76:26:72:a2:1f:cb:45:e5:45:0e:81:0b:78:
         5c:33:dd:e3:70:d6:bc:d7:53:6f:27:b4:35:83:9c:26:3c:5a:
         5b:14:e1:1a:db:04:d1:97:3b:75:de:93:92:e8:f2:db:1f:6f:
         c9:65:75:ed:d6:e1:17:53:e1:02:53:53:96:39:c6:d4:d4:78:
         66:8a:2d:31:f6:9e:98:74:3c:f3:5f:e1:e1:f0:4f:98:a2:47:
         c6:27:14:bd:0d:38:88:50:0f:49:70:b6:4b:ed:52:9c:23:d0:
         44:e2:8d:62:af:f1:4b:b9:f0:e8:f8:a9:4a:c8:76:1c:92:05:
         3e:69:83:e4:9c:d8:44:13:45:b4:f9:36:d2:01:bb:0e:48:d6:
         d2:5a:28:0e:29:f8:36:26:18:fa:ee:4c:1b:3f:7a:3e:fd:0c:
         20:b8:0b:88:e7:b2:73:d4:35:83:90:c7:8e:60:c1:be:70:f2:
         d8:dc:2c:89:04:ab:f9:2e:f6:ba:d4:0c:04:5d:39:10:80:c2:
         c6:30:62:8d:bb:52:31:ab:3a:83:e6:6e:56:1c:c2:37:9e:5a:
         c8:50:e0:c0:a8:07:48:9b:9b:25:1d:2a:bc:f0:85:e7:a4:45:
         67:3c:19:01:80:f0:23:c5:bc:2d:d5:f1:e1:5d:59:33:b7:fe:
         93:fa:1c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----