Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
File:                     f5kYyrbx817xteWDyyg56bdIsVg.mft (raw, json)
Hash identifier:          JPSb95ZK8RZ6l6AnO/s2uP+GxjjlQ+GoYUvOvyrFOF8=
Subject key identifier:   A6:29:89:96:F3:1A:8E:37:DF:3C:D3:DA:68:C2:71:30:60:72:1C:9A
Authority key identifier: 7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
Certificate issuer:       /CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Certificate serial:       01962E989E469D9821754D3A61B13B5AF972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
Manifest number:          11BE
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: f5kYyrbx817xteWDyyg56bdIsVg.crl (hash: piST0AYH9AuBC+6zcHrHs82b//Ypo6tV4sy++mlEaKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9e:46:9d:98:21:75:4d:3a:61:b1:3b:5a:f9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=a6298996f31a8e37df3cd3da68c2713060721c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:66:a7:33:fc:dc:00:d3:44:f4:1e:9b:ad:
                    9f:3f:68:52:14:06:a0:71:e9:a8:b2:31:76:c1:eb:
                    e5:fd:a2:e8:9d:dd:b4:e2:b7:51:09:6e:66:0f:8d:
                    f3:94:c2:85:23:70:de:d8:66:02:a1:5f:5a:b4:75:
                    78:2c:29:b5:41:26:4f:79:1f:ae:ce:c3:4d:85:75:
                    8c:23:c0:1a:aa:0f:e3:56:8a:78:a3:6b:5e:8b:c4:
                    0a:4f:85:f7:af:41:99:14:ee:30:a5:84:63:ec:d3:
                    69:e4:ff:64:44:af:66:c2:09:d9:6e:ba:08:30:a8:
                    99:9d:7a:41:29:bb:f4:44:32:46:28:dd:72:c0:f4:
                    4d:d2:40:3e:a8:b3:dd:b7:ef:83:8a:54:26:59:e4:
                    1c:ef:d3:38:0a:c5:3a:b1:20:02:fb:10:f1:ce:3a:
                    e5:9c:c3:a1:68:c5:d2:49:5f:9d:cc:fd:22:98:db:
                    6f:1c:4a:89:45:1a:02:42:78:fa:68:a8:91:3e:06:
                    a6:e2:5b:d8:30:0d:6d:3e:a6:43:34:3e:1e:91:89:
                    b0:fd:2a:96:51:05:39:1b:c0:a6:1a:c5:94:f8:10:
                    0a:27:a7:81:7e:83:07:94:ce:19:cd:f0:61:8f:c4:
                    e4:ea:32:b1:49:53:a8:f9:c9:f2:7e:5c:06:3e:2a:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:29:89:96:F3:1A:8E:37:DF:3C:D3:DA:68:C2:71:30:60:72:1C:9A
            X509v3 Authority Key Identifier:
                keyid:7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fe:6e:62:12:ff:a7:88:53:15:c0:5e:23:da:0b:80:c8:a0:
         15:93:c6:34:a7:c4:c6:cc:ad:ff:f0:79:60:5b:58:2d:3a:a6:
         20:d0:9b:40:d5:28:cc:f6:62:92:ff:aa:ae:d7:e4:1c:91:b5:
         0c:81:cb:4e:7e:0c:a9:ac:94:65:1e:8d:12:cb:13:7f:12:4d:
         94:a5:4c:db:3d:78:73:3c:39:1d:59:a6:57:3e:2e:80:cd:2d:
         0c:26:21:8c:a1:5e:bf:62:b2:df:a2:f4:5b:8a:5c:ac:b2:31:
         18:c7:16:70:a1:5e:18:dd:29:f7:fb:38:30:aa:c9:a0:95:fe:
         15:66:2c:34:00:ad:c3:61:a7:77:67:4b:92:0d:15:15:68:39:
         36:1f:79:cd:46:66:6a:0d:a4:fd:7c:76:30:52:2b:53:51:c9:
         f8:b0:f1:8b:b6:ab:0b:b7:8f:36:9e:c5:70:36:71:12:94:ce:
         99:9d:97:aa:3c:e9:97:d2:fe:d2:e2:75:90:1b:45:08:f4:77:
         95:6e:8f:b2:37:3f:c8:30:f7:55:65:ca:e2:cd:1e:52:33:7b:
         6a:b3:d9:a8:2c:16:dd:8e:60:74:78:f0:49:19:17:86:e3:df:
         1e:be:e9:4c:3e:74:57:09:dd:b6:b7:fc:6a:53:4a:94:01:09:
         d0:3f:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----