Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
File:                     F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json)
Hash identifier:          BsCUOQt3leRG6dMIhMHleCkpO5gZRCU/8zDXuqnq2CQ=
Subject key identifier:   5B:6A:FA:87:39:B0:96:E1:11:E6:FA:31:0D:24:71:08:45:C1:E7:99
Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
Certificate issuer:       /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Certificate serial:       01962E996CEE47324F5FF9639646CB9B14FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
Manifest number:          0C39
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: VgMjZ8sWslfpGhe3Vz/yKYsjPCGo5buX1GdG6PbrvOQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6c:ee:47:32:4f:5f:f9:63:96:46:cb:9b:14:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=5b6afa8739b096e111e6fa310d24710845c1e799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:ee:db:40:95:ea:06:12:0b:0d:25:e5:16:
                    54:78:9e:f8:61:c9:5f:8b:03:07:d4:20:c5:95:85:
                    dd:6c:9d:57:a8:28:21:e0:0f:7c:3e:04:08:77:c5:
                    ce:73:6a:8a:b2:28:79:fc:f8:d8:8f:55:05:11:47:
                    12:0a:1f:8b:a7:93:9c:5b:e6:32:d6:94:c0:21:46:
                    7f:0e:cb:45:35:91:87:e0:d0:3d:24:9e:81:17:b1:
                    68:0c:0c:b2:ef:bd:13:e3:db:cf:e7:17:df:bd:5e:
                    bd:38:29:73:af:c4:41:39:ec:c0:23:3d:a6:fb:93:
                    d6:8a:3d:d2:d4:ec:13:90:c6:76:0f:c6:8a:59:05:
                    89:c8:6f:79:38:fd:51:c4:8e:03:91:7c:10:40:e3:
                    f3:fb:65:5c:d4:35:04:8a:55:6a:a1:88:64:79:5b:
                    b2:15:b5:d7:5e:3b:03:a9:37:f5:a2:e1:04:20:bf:
                    9b:66:b1:38:f7:68:27:bf:42:ec:b3:de:fc:e6:4e:
                    05:40:91:66:38:42:a9:a9:85:8b:37:cb:ea:95:af:
                    0e:8e:b3:5f:92:ce:3f:63:9a:ed:af:9a:df:73:e3:
                    fb:a3:d3:1c:1d:06:01:e7:b8:7c:28:e9:fe:9c:c6:
                    7c:47:4f:35:82:72:20:b4:00:16:da:27:53:c2:81:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6A:FA:87:39:B0:96:E1:11:E6:FA:31:0D:24:71:08:45:C1:E7:99
            X509v3 Authority Key Identifier:
                keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c2:8f:ce:1b:03:89:91:57:16:91:0f:31:c1:17:41:be:62:
         04:51:55:2a:75:cd:92:7c:e3:15:de:f3:6d:e2:dc:b3:e9:a6:
         05:fa:46:7b:90:f6:3c:9e:9c:73:d8:1a:32:50:1c:0c:6a:14:
         41:43:5f:81:a7:89:17:6f:ba:59:f4:45:8d:2d:80:ae:bb:27:
         bf:a7:55:e0:56:c9:52:9c:b2:5d:e3:f3:0c:ab:38:5e:80:cc:
         69:0d:73:2d:88:ac:f6:f4:ea:73:af:e9:73:cf:20:20:78:f3:
         21:f7:ee:4c:fb:25:84:1e:8d:d6:ae:f6:54:47:9a:1e:fc:b1:
         1d:85:fd:10:6a:1a:ad:a3:2d:3d:e6:27:87:30:a6:1b:85:cd:
         51:73:bf:c0:f8:d8:26:79:d8:58:f7:8f:b7:59:59:45:c0:ce:
         f4:8d:29:af:73:c3:e9:ee:ec:54:de:3a:82:77:f7:a9:91:4f:
         f6:df:d3:79:bc:df:b0:a3:c2:57:66:47:b5:78:b9:34:d6:22:
         b6:b0:f4:0c:54:9e:80:7e:4f:35:b0:10:c8:36:57:82:30:91:
         aa:b0:2f:fb:ad:42:e5:5e:94:70:af:03:24:ba:81:d5:53:a0:
         25:ba:40:ac:5b:60:ba:f4:c8:44:7e:c8:14:cc:e4:81:23:b8:
         90:53:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----