Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File:                     _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier:          J9BPCTxDHBcOkaVf3XWUUwKngKM0NsgNvXwDiGwzN3c=
Subject key identifier:   FB:D7:73:5A:78:A4:75:E2:72:5A:4A:0C:02:F4:DA:42:25:09:D4:1B
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer:       /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial:       01962E98FBE50FBF08DF0D3F75B999E9D9E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: D8KlPIXShirGIf/zQUT67WpJGVFmI71oB0VQHG4Ndyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fb:e5:0f:bf:08:df:0d:3f:75:b9:99:e9:d9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=fbd7735a78a475e2725a4a0c02f4da422509d41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:8d:4a:e1:b4:25:f4:6f:1d:8d:7c:88:bd:
                    9d:68:c4:7f:62:e4:30:34:77:6b:4c:76:91:8b:e2:
                    e2:26:50:92:fc:12:f9:3e:e2:a3:f7:36:22:c3:eb:
                    9a:ea:eb:cd:fa:e2:1d:17:81:5e:38:d0:2e:7f:0c:
                    9a:5f:b3:16:1c:12:1b:df:1c:f0:d5:5d:00:3f:50:
                    cb:55:50:b8:c6:1e:06:6f:e2:46:d0:6a:65:8d:32:
                    63:2e:cc:ca:7e:29:29:f8:00:b4:9c:d7:8b:84:ba:
                    8e:aa:15:f3:58:52:8b:80:16:99:d1:46:db:49:56:
                    11:aa:b6:88:2c:13:40:f3:40:e9:66:44:13:62:49:
                    04:db:1d:29:72:3b:58:2b:92:bd:98:f3:4e:e0:bd:
                    18:4c:1e:ef:6b:34:43:e6:96:f5:f1:cb:60:56:f4:
                    b0:e0:5a:6f:47:5f:88:b5:ea:4c:b6:0f:9e:f9:d0:
                    c1:c3:d0:47:3d:c8:71:e0:88:fa:17:16:d1:ad:a5:
                    59:a0:77:1e:8b:3c:27:79:f9:cf:e4:93:11:84:1b:
                    ad:ba:23:5c:d9:b9:e9:1c:f0:ce:a5:37:6a:b2:fe:
                    e4:4b:a1:17:e7:d7:4e:a6:d0:9f:9a:72:4f:e3:41:
                    6c:4d:2c:71:9d:d4:3a:27:49:24:c6:35:b3:0b:50:
                    0a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D7:73:5A:78:A4:75:E2:72:5A:4A:0C:02:F4:DA:42:25:09:D4:1B
            X509v3 Authority Key Identifier:
                keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a6:6d:7f:b2:be:12:6f:53:e8:0a:a9:59:8c:5e:bf:41:ee:
         ef:74:b3:b6:62:8f:da:83:c4:54:66:51:cf:57:b4:49:34:ce:
         d0:04:0d:4d:f4:ef:ca:71:6b:b3:8e:eb:bd:ff:80:d0:b4:1e:
         1b:13:19:e9:fb:fd:5f:26:94:3e:70:1a:a0:c5:31:54:d5:49:
         56:c0:e5:51:2b:c8:20:5e:dd:0d:ec:f7:0b:3f:fe:5b:eb:06:
         ad:2a:09:49:0e:da:fe:0f:66:88:4e:3c:00:28:dd:b0:d8:68:
         aa:1a:27:05:1d:30:b4:20:64:e7:2a:c6:28:7b:ef:a4:60:2b:
         88:25:06:59:e4:7f:77:3f:6f:9f:a0:93:26:a2:f0:01:c2:da:
         41:30:7c:65:0d:5e:66:f4:ae:6d:e4:c2:27:d1:7f:ad:b5:b0:
         fd:8d:75:7b:85:6d:e0:27:13:e5:17:f1:be:6d:f1:04:2c:50:
         11:0c:c6:1f:d0:d8:a1:e8:78:8a:1c:93:a3:a6:7b:da:e9:c5:
         ce:64:fa:1b:9f:48:a6:c3:54:f3:ac:e2:f8:21:cd:8b:0e:36:
         c2:11:bc:e0:35:b2:b5:ef:c2:86:16:f2:e8:5d:f1:45:38:f7:
         a3:08:06:c5:d7:b3:4f:ed:fd:7c:18:d7:bc:92:cc:e9:b3:18:
         28:a9:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----