Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File:                     FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier:          jvweKI1aI6Z3QaDOY6tjEwO8cqGKkHXOlNjgcNyRse4=
Subject key identifier:   D1:63:79:49:3C:42:6F:7D:58:4D:F1:A7:68:12:B8:49:93:BF:32:DE
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer:       /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial:       01962F06B94299DCF48D635DE71C07049010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number:          0963
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: 1H8WbVHNoDKK5+ZllVxkPq4zlBBSRLtw49ztCIHc4/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b9:42:99:dc:f4:8d:63:5d:e7:1c:07:04:90:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=d16379493c426f7d584df1a76812b84993bf32de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:20:8d:88:19:32:60:b6:e8:5a:d7:a9:1c:
                    f2:a9:64:12:4c:28:a4:28:c4:b2:03:a1:31:dd:64:
                    b3:22:93:1f:c0:03:09:11:31:6a:7c:68:c2:d0:fb:
                    0e:6a:c6:f5:3e:f2:98:f5:b4:e9:aa:a8:5b:ff:43:
                    12:93:e0:b2:51:ff:2a:64:a3:da:8f:b2:44:fb:54:
                    59:8e:61:a3:fc:38:57:99:fb:89:ac:c2:bc:b0:12:
                    a7:90:4b:7f:28:db:2f:6b:af:60:18:51:eb:ac:98:
                    c6:8b:fb:6d:12:53:78:44:bb:0c:50:4e:c6:20:79:
                    95:f9:e6:54:10:69:fe:a3:84:6c:ee:09:b1:09:72:
                    7b:0a:27:c7:75:32:1d:9c:8a:c0:2a:e9:59:4d:aa:
                    cb:07:a0:56:df:2d:e7:59:00:ad:21:44:8b:4e:51:
                    31:5d:ff:e4:32:22:ec:a3:d1:2b:2f:72:da:e6:50:
                    6f:28:49:03:f1:e1:2b:65:0e:8c:8c:b7:10:b5:40:
                    61:19:07:e1:b0:55:86:ec:f0:cf:24:d7:99:5d:2e:
                    2e:df:7d:32:77:cf:d1:77:34:c7:ca:3c:a1:47:ba:
                    b8:fb:e5:3c:7f:7b:84:eb:63:65:00:26:0b:b6:c9:
                    37:0e:3b:1d:85:cc:c2:c5:05:b6:4a:68:83:59:ff:
                    b9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:79:49:3C:42:6F:7D:58:4D:F1:A7:68:12:B8:49:93:BF:32:DE
            X509v3 Authority Key Identifier:
                keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:19:b7:6a:76:bc:3b:5e:54:a4:cd:e8:35:1d:c8:95:15:23:
         8d:15:d9:71:0f:b1:7e:d1:42:1b:e4:87:12:2e:ce:71:85:7d:
         66:5c:f2:65:45:9c:d6:b9:88:ee:66:7e:fb:20:2a:02:67:a5:
         81:d9:62:9b:c4:e4:0a:5a:74:64:44:5c:74:fe:1e:e3:32:8b:
         e1:93:f3:9d:85:f3:0f:ed:51:43:b0:e9:07:d2:c1:9e:94:27:
         69:26:4f:b2:0b:e6:af:5a:2c:54:2a:40:bf:6d:73:1c:04:8a:
         5b:83:07:ae:ff:b4:c8:5c:45:3a:82:04:85:5e:a6:b5:64:24:
         9c:da:24:dd:9d:56:0a:85:f7:75:c2:9a:c2:0e:64:f5:fc:6a:
         86:01:d2:98:f5:f2:98:b1:d6:01:31:d2:38:ab:db:3c:db:58:
         09:ca:96:b7:13:0d:a6:27:90:09:34:29:f6:ff:df:85:b3:08:
         6e:f1:05:71:69:75:82:ac:78:70:18:69:c0:11:72:53:9d:50:
         7c:d5:1c:63:61:87:dd:ee:38:ca:c5:22:ce:36:16:a1:4e:9b:
         67:01:58:e3:34:33:7a:7f:7c:84:af:b7:52:0b:08:7f:99:d9:
         e7:48:fa:57:d8:45:f4:8d:98:56:cf:40:6b:8d:ac:94:92:ae:
         38:79:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----