Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File:                     _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier:          pCKj0+uK+IH2C+iyiKvQnO86s+m+Ff9OF+RIhd2eYRc=
Subject key identifier:   F4:3E:83:CA:2C:1E:55:2A:14:38:06:C1:1B:09:CB:FF:42:5A:73:E5
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer:       /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial:       01962F748D22C7D977DF7650CCADAC935B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number:          128C
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: R+liZmHej2b3Ket9ts2WINGoqZLXxSLMYqtaBA46piA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8d:22:c7:d9:77:df:76:50:cc:ad:ac:93:5b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=f43e83ca2c1e552a143806c11b09cbff425a73e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:90:45:41:b0:ec:64:32:5b:68:92:a6:3b:
                    0a:18:0c:50:2c:10:25:c6:f7:f8:6a:41:71:29:94:
                    62:96:35:eb:c5:e9:5b:95:4e:60:df:da:23:88:e4:
                    e2:a5:80:ce:3b:0b:ac:7a:af:14:08:84:29:cb:b9:
                    c9:3a:91:31:22:bb:b4:fb:ba:58:f7:21:f3:68:32:
                    ab:7d:5b:e1:74:2c:83:5f:48:34:af:3c:8a:48:0b:
                    7a:7e:4f:af:9b:13:ca:60:0b:66:53:04:82:5d:7a:
                    23:37:04:ec:71:05:c1:be:cd:d1:e5:c9:91:f0:e3:
                    82:6f:ab:7a:f5:79:ad:14:b0:5a:ee:dc:f1:30:94:
                    74:33:7e:88:4b:77:99:fe:51:aa:eb:bc:76:c1:47:
                    0a:58:fb:7e:c3:de:4b:c8:cd:a8:ce:91:9a:df:b4:
                    02:6c:7e:2a:71:07:0c:ab:1f:d4:a1:ee:2d:32:e4:
                    c0:a5:dd:c0:96:ba:d7:67:2f:c1:78:88:16:68:fe:
                    3b:54:1d:0d:25:cf:bb:2e:d2:88:11:20:aa:18:12:
                    8a:8b:52:d5:dc:dd:34:fe:eb:37:02:8f:e9:99:9b:
                    60:4d:dd:e3:27:d6:0b:a9:90:02:08:d0:cf:8d:3e:
                    3f:f8:85:c8:d3:6e:9e:b0:ac:9e:7f:db:1f:6f:7e:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3E:83:CA:2C:1E:55:2A:14:38:06:C1:1B:09:CB:FF:42:5A:73:E5
            X509v3 Authority Key Identifier:
                keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:79:6c:74:7f:91:a4:2f:8d:a5:c8:be:70:80:1f:11:b8:
         c5:d6:eb:9e:fe:44:1c:8e:4a:8d:65:2d:b7:a4:f1:88:f4:3f:
         3e:d0:d8:08:f0:0f:4b:1d:fb:2a:1f:6b:23:72:c8:e4:db:45:
         86:ef:c4:a7:38:90:3c:52:eb:15:cc:50:e6:0b:54:73:f5:e4:
         1c:81:b3:75:ec:b3:85:54:0c:2d:9e:79:f8:44:14:ce:85:cb:
         50:b8:6d:85:cf:22:fe:62:c5:c8:d9:4f:98:5f:ac:bf:90:b7:
         65:8d:96:45:1b:a1:de:f6:5e:8a:d0:6f:59:52:b7:e1:83:bc:
         34:f4:6b:b4:d7:9a:a5:29:fe:41:40:8d:2f:cb:87:71:ca:73:
         20:9f:2d:3a:97:ad:a1:90:29:45:a2:98:b7:bc:bd:1c:e9:f2:
         7c:35:bc:f7:69:65:8a:47:f8:13:65:b4:ac:8a:17:f9:ff:bb:
         8f:37:c4:b3:56:07:63:ea:13:0c:f5:1b:1e:2b:ab:5a:f7:b4:
         5f:65:28:52:dd:d1:59:1b:9c:4a:a2:d0:cb:a6:7c:26:80:e1:
         9d:dc:1f:8f:10:fd:1d:9f:a3:9a:0d:72:94:68:5a:54:67:5c:
         a6:90:16:09:89:df:51:be:8f:9d:e6:e9:ef:61:b5:6e:40:e0:
         3e:a6:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----