Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
File:                     e-RbuFunWF4oistxpFKwzI7g21Y.mft (raw, json)
Hash identifier:          fMimlaQMG05+kQaEsFuSmbIuc11hHDHkz+pcM+VYjHc=
Subject key identifier:   96:29:22:DB:62:7D:BC:C3:7A:BC:5A:91:B0:DA:67:71:2C:8A:A8:BC
Authority key identifier: 7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56
Certificate issuer:       /CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
Certificate serial:       01962E98939813148880793F1BC0D1C0E8DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
Manifest number:          04A1
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: e-RbuFunWF4oistxpFKwzI7g21Y.crl (hash: 2txaaXwTN5rdYw4oo6h7IgD/v6R6DdrxVrgTk/Iz0eg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:93:98:13:14:88:80:79:3f:1b:c0:d1:c0:e8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=962922db627dbcc37abc5a91b0da67712c8aa8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:bc:e0:cb:a5:a7:df:45:0a:dc:08:40:b6:
                    da:e5:3b:52:e9:b0:05:3a:b7:85:ab:7f:28:99:66:
                    0e:57:2f:9d:b1:d7:ad:0c:9c:f6:62:6a:42:f5:6d:
                    9e:ae:f2:4c:b3:21:83:b1:8c:e8:23:f2:6e:4f:70:
                    44:0c:2c:c6:9e:fb:ac:23:75:e0:44:28:28:aa:e4:
                    ba:cf:5f:fe:84:5a:99:c0:54:68:20:5c:6d:1d:39:
                    bb:86:b5:78:bb:55:76:a6:8d:ea:16:30:25:e2:c2:
                    80:ab:25:7e:38:bb:d4:77:46:74:32:09:5e:ad:47:
                    d6:d2:a9:b0:bb:47:4b:7a:4f:9e:6f:ce:e7:b3:ba:
                    17:1e:6a:4e:b0:e1:fa:cb:39:c7:16:53:1b:24:f2:
                    48:86:c5:84:a7:89:ce:e5:9d:5c:c9:0f:ba:65:83:
                    38:04:3d:98:6d:5d:2f:46:a2:76:81:41:be:56:b9:
                    7d:3c:e5:2f:29:89:eb:fc:e6:79:f5:c5:9a:f6:d6:
                    ce:f8:68:20:7f:6e:4e:e0:ca:d9:f3:75:a4:e2:82:
                    18:75:16:9a:95:72:10:b0:0d:6a:e8:f9:b4:ff:6f:
                    1d:32:0a:0d:e8:d8:19:7b:7d:29:f9:ba:15:19:31:
                    e1:1b:8e:71:a6:5d:bf:85:b8:ec:16:d1:83:f8:33:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:29:22:DB:62:7D:BC:C3:7A:BC:5A:91:B0:DA:67:71:2C:8A:A8:BC
            X509v3 Authority Key Identifier:
                keyid:7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c4:b6:3c:0b:37:c8:e3:41:ce:c5:58:05:34:ab:af:ec:ed:
         ae:13:de:fa:a4:59:1c:b7:7e:ec:91:c3:10:d7:ea:ce:b4:da:
         39:f1:7d:50:ae:94:d4:fd:e8:79:cc:3f:5d:d1:66:9c:29:2e:
         67:a7:36:47:50:b0:58:0f:f5:a9:eb:7e:9d:86:a5:b5:a4:2d:
         de:52:b6:89:d7:65:6d:14:c2:af:ba:66:b2:38:46:e4:c0:b9:
         00:47:14:24:91:35:75:c0:ee:58:1a:f1:ad:75:6b:37:8b:02:
         c3:a5:e0:33:df:a4:c3:f8:bb:9c:bc:ba:38:f9:03:b7:ff:b0:
         98:80:7b:e2:64:c4:fe:00:11:63:74:a5:42:31:a3:98:47:4c:
         52:a7:c8:b1:e9:8b:f4:eb:67:2f:b1:d0:cb:2d:4e:94:18:5b:
         4d:b2:95:99:4e:ce:51:0f:37:a2:3b:c1:0d:39:3b:05:ef:01:
         c8:65:27:e5:bf:c5:92:b4:90:42:68:25:3b:17:8f:5c:33:bf:
         f0:b9:aa:81:bb:7e:c2:f0:cb:9b:db:eb:b5:9e:df:1f:1e:22:
         3b:86:ca:a2:be:b5:a4:1a:00:49:b7:16:95:ee:a0:79:ee:f7:
         8d:e3:83:b5:b4:78:fb:d0:d6:e0:48:fb:27:02:42:79:c3:54:
         12:42:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----