Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File:                     F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier:          p1lXX5ry6R6k5K+GKKpb5Jqdc8hY3NSgx750L/dF0Ac=
Subject key identifier:   D8:CD:C9:EB:D2:82:70:ED:A4:7E:5B:6A:8F:4D:B0:0D:AF:A8:5C:FD
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer:       /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial:       01962F7518556596FF257BE47AF93E719AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number:          0C8C
Signing time:             Sun 13 Apr 2025 14:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:05 +0000
Files and hashes:         1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: nEhJg9WA9vJFEsSlq66PxNpbrwsMrM62C90WuJseXaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:18:55:65:96:ff:25:7b:e4:7a:f9:3e:71:9a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
        Validity
            Not Before: Apr 13 14:02:05 2025 GMT
            Not After : Apr 14 14:02:05 2025 GMT
        Subject: CN=d8cdc9ebd28270eda47e5b6a8f4db00dafa85cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:74:e3:05:7b:32:a2:b2:6f:91:8e:21:a5:
                    54:01:3a:8d:06:fe:b3:b2:17:2e:43:dd:66:a0:d2:
                    e1:8a:10:15:ec:14:40:7a:c1:04:1a:73:fe:2e:f3:
                    64:73:f6:4e:ca:cf:ae:99:df:c1:be:2a:7b:c5:ab:
                    09:e8:c2:30:1c:c1:31:b2:d5:60:ea:4d:63:b1:a4:
                    4f:02:1d:f4:da:67:fe:c7:db:a5:64:4a:f6:63:a1:
                    30:2c:52:18:3f:a1:a2:4b:97:4f:69:ca:26:5f:3d:
                    e2:d6:93:9e:13:9a:62:89:4e:70:c4:a0:25:57:9d:
                    f6:77:91:71:4b:60:e7:cb:dc:57:44:5a:e6:3c:37:
                    77:23:ca:f0:b2:32:c8:bb:2c:cd:c3:6e:25:3b:3e:
                    ac:b1:03:6f:d5:8e:60:ca:8f:d7:9b:c3:0e:f9:6d:
                    9a:5e:4b:9f:47:75:37:3a:8e:01:39:86:4b:6f:77:
                    d6:e3:e8:56:dc:70:da:10:d3:e7:6b:5d:f0:3a:a0:
                    0c:bd:71:c3:7c:f8:21:cb:a7:f6:74:87:97:42:f9:
                    9a:5e:3c:e2:5a:a6:fd:8d:80:2c:cd:36:eb:7f:c8:
                    1e:e5:82:32:fb:8a:25:41:28:ce:85:93:d4:5a:4c:
                    59:e1:76:15:02:94:71:ee:da:d3:56:69:92:27:bf:
                    98:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CD:C9:EB:D2:82:70:ED:A4:7E:5B:6A:8F:4D:B0:0D:AF:A8:5C:FD
            X509v3 Authority Key Identifier:
                keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e3:e2:be:69:7c:e0:2f:9e:96:cf:c7:27:de:42:da:17:40:
         66:e8:6c:c7:56:85:d0:64:ab:53:09:b6:6e:7e:37:3a:2a:18:
         28:e8:e5:6e:b3:5e:57:61:b4:97:cf:b8:33:ff:4e:04:4c:15:
         05:47:b0:48:18:b7:40:57:08:0e:2d:25:4b:7d:92:ee:5a:fd:
         5a:06:b9:40:cb:9e:07:37:bc:fd:31:93:cf:30:a3:91:d0:49:
         5f:e9:94:f1:a2:35:62:bf:02:81:33:9b:9a:4e:24:5e:77:01:
         9a:3c:ce:58:43:ba:ec:fb:fc:07:56:f6:14:bb:d4:90:9b:2f:
         18:a7:25:ad:90:9d:b2:bd:f3:9e:93:88:4e:2c:fc:fe:5b:34:
         42:51:ac:3e:29:79:f8:51:45:e2:ae:e0:93:5f:ce:91:29:6d:
         07:76:9e:82:3e:7c:0e:83:09:8e:57:0d:10:bd:55:4c:40:e4:
         4f:08:81:c2:2b:cd:b8:cc:ad:80:b5:ff:71:03:43:04:cf:34:
         2f:f3:2e:5a:bb:48:8f:e1:e7:77:d4:d4:14:be:74:15:06:15:
         25:31:7a:be:d2:ac:90:8f:d4:6d:31:7a:68:a2:3a:50:d8:b8:
         0c:09:d9:ca:0d:c3:22:cc:30:1e:08:97:9c:c4:4c:db:4b:0c:
         31:c3:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----