Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File:                     FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier:          crTKK937RFAa0ilA2PtT255TK6xLDltFcKTlWmSqlDM=
Subject key identifier:   5B:01:17:C0:87:75:57:22:09:D9:65:23:7A:62:2B:82:1A:09:2F:FB
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer:       /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial:       01962F74BF352EDA8505826ED2262D08673A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number:          02C9
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: Kh+vg2RGizTUKcCklR/8nyg6mhnWxSaXpczzbG5oIJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bf:35:2e:da:85:05:82:6e:d2:26:2d:08:67:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=5b0117c08775572209d965237a622b821a092ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:08:e6:ca:57:a3:0a:8e:f2:7f:d4:4b:9c:
                    2c:11:be:77:9b:99:b8:d5:a2:a3:f2:de:d1:b2:76:
                    30:6c:93:e5:df:c5:58:fe:96:43:e8:7b:c8:a9:c3:
                    2e:53:1a:bf:d7:88:1e:7d:7a:21:eb:9b:29:c0:05:
                    a3:be:14:d7:a5:46:0c:42:64:11:b6:9d:1a:42:01:
                    9e:5b:88:08:6b:d1:cf:d0:d8:2b:f6:19:cb:a4:03:
                    38:8a:84:3e:7f:9d:a1:42:b2:4d:1a:40:cf:54:13:
                    c6:d3:9a:29:a6:8f:a3:21:c4:3c:64:c5:b0:63:86:
                    61:ff:6a:cc:7b:ad:af:ee:31:5e:88:06:58:1f:b6:
                    b4:f9:c1:39:64:b2:3e:8b:ef:17:a4:98:97:5a:93:
                    d2:16:c5:5c:6a:52:34:c8:31:9f:af:2a:ec:9f:8f:
                    fe:ea:33:82:d6:bd:11:87:0c:05:dd:11:4a:f8:cb:
                    ec:4a:4c:8b:94:ea:e0:d3:e4:41:db:5a:90:77:2b:
                    6b:69:25:6b:6b:42:96:3d:45:6b:a7:96:82:44:e6:
                    b3:ef:3d:23:6c:4a:a6:da:02:39:df:ee:11:4d:5e:
                    b8:b5:76:7f:58:27:37:33:bf:f7:0a:16:71:92:f5:
                    8c:50:72:77:07:0f:02:97:62:e5:28:be:9e:77:7c:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:17:C0:87:75:57:22:09:D9:65:23:7A:62:2B:82:1A:09:2F:FB
            X509v3 Authority Key Identifier:
                keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:eb:aa:d5:0d:3a:8c:1f:3d:c3:aa:ce:c4:c7:fb:e8:5b:94:
         ed:fb:fa:e5:39:8e:17:a9:48:7c:fb:c8:c8:6a:b5:64:b3:56:
         39:04:17:fc:14:e2:6d:fc:63:76:e1:19:01:3c:e1:59:ec:34:
         7c:e2:a2:bb:b8:f7:44:b6:5e:54:d5:aa:9c:53:ea:92:f3:7c:
         be:63:27:56:9d:27:bd:1d:c1:57:e9:89:02:28:a8:9a:4e:d1:
         29:cd:85:4d:36:b1:c9:0b:db:ad:cd:1d:e3:0c:af:0e:18:9d:
         ff:30:2b:aa:fe:23:fc:c6:1d:a5:15:6e:df:1d:de:3d:57:45:
         58:c6:62:92:94:b4:af:2f:f5:0b:1a:79:25:ec:0b:a7:47:40:
         b9:0b:db:f3:8c:e1:11:d3:eb:2d:da:70:b4:4b:bf:df:b7:10:
         72:29:0e:0e:97:c0:8c:e5:a0:56:ca:f5:f0:94:d6:f6:da:e6:
         58:97:22:36:ac:f3:c9:5d:f2:4d:0e:eb:7d:11:b3:fe:a1:cc:
         04:6c:81:06:7a:06:d5:e2:0e:a7:7c:99:f1:5d:f3:e6:b3:e0:
         3b:ae:84:c1:4f:7d:7a:e0:a5:38:c9:d4:eb:1d:5d:be:8e:14:
         ac:39:fe:8a:0f:dd:c4:39:fd:a8:25:cc:86:cd:50:ba:f6:81:
         52:9f:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----