Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
File:                     F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft (raw, json)
Hash identifier:          vHzHfSE+2kg5aSNDpxHaOA4RGOsEvmdkbEbLG3A/19k=
Subject key identifier:   4A:AC:F2:FE:13:35:65:46:AC:28:DA:40:08:5D:7D:2F:7E:5A:E0:94
Authority key identifier: 17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
Certificate issuer:       /CN=179a0e21251f28c2328644620b0d279cac60d8cc
Certificate serial:       01962DF40664CDFF71665977FACA87559513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
Manifest number:          07D6
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl (hash: xO/5murWwTAxXTlu/y2i2uo7sK71kV+MuNhiLiRb8+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:06:64:cd:ff:71:66:59:77:fa:ca:87:55:95:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179a0e21251f28c2328644620b0d279cac60d8cc
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=4aacf2fe13356546ac28da40085d7d2f7e5ae094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:ff:b1:ae:71:40:7f:18:d5:63:78:6c:df:
                    88:d1:5b:45:aa:e6:b0:a2:53:cf:14:5b:4c:80:eb:
                    0d:7c:08:26:f8:aa:a5:d3:35:c2:68:3a:e2:2b:c5:
                    91:0e:30:73:a9:a8:24:8e:49:7d:e4:48:f6:92:a3:
                    ef:a5:42:a8:81:3c:b2:81:cd:7e:f0:2b:bd:b7:81:
                    27:f6:fd:f0:ba:53:58:58:36:b8:12:28:17:43:c5:
                    87:d0:37:5f:28:a9:2e:d2:05:a7:6b:91:7b:c5:01:
                    86:b5:86:9a:69:29:3e:d1:cd:41:4d:3f:21:f9:e5:
                    12:39:da:37:dd:cf:bd:02:85:ba:a8:b4:89:53:2f:
                    0e:e5:3d:a2:5c:f8:66:ed:a7:f7:46:b2:fc:88:bf:
                    8b:21:de:36:3d:2e:cb:f9:87:a3:05:e5:a2:fa:69:
                    f0:3a:8f:1a:94:c8:7c:01:c6:2f:a5:35:f2:fa:1e:
                    75:04:d3:95:b2:d4:97:a9:65:63:af:37:68:bb:bc:
                    ad:d5:1d:10:85:1d:58:63:ec:42:76:2f:a9:4b:8b:
                    85:5f:da:da:df:14:ff:61:0d:2a:36:97:ba:57:1c:
                    ea:ee:13:e6:83:d8:4a:43:c5:c1:8b:d7:42:8d:6b:
                    e5:35:c1:23:ec:0e:af:60:29:95:35:0a:1e:17:db:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AC:F2:FE:13:35:65:46:AC:28:DA:40:08:5D:7D:2F:7E:5A:E0:94
            X509v3 Authority Key Identifier:
                keyid:17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:25:79:a2:eb:cc:16:b6:25:d9:a2:4a:86:17:93:6c:26:06:
         91:63:02:41:10:d7:5d:e8:95:32:cb:89:ce:39:3b:69:b5:98:
         df:d3:ae:6d:58:2b:8d:56:bb:86:f1:96:81:1f:37:5f:23:c2:
         a1:55:fb:48:29:5a:28:41:6e:4d:5e:1e:ed:a4:d9:6a:2c:78:
         d3:4f:68:f1:bb:de:5a:d5:ba:d5:a6:e4:0b:8c:e6:c8:6e:a0:
         c3:03:ae:9d:f2:6e:3d:21:51:45:91:3c:b6:29:bd:15:4f:c8:
         a4:dc:73:a3:0c:de:09:69:72:ea:d8:8f:88:38:ca:54:0c:c1:
         19:07:d4:f1:a4:99:23:36:31:c9:a2:07:bf:3c:91:7d:dd:45:
         89:5d:22:34:cc:70:61:7e:d9:ed:30:68:d9:f6:6b:d0:73:97:
         a0:7f:4a:94:22:b2:6b:0f:9a:d2:af:84:fd:8f:d7:2c:d1:34:
         82:c0:5e:e1:62:6e:6a:31:49:2d:b3:7f:91:a9:b1:91:5f:4a:
         ef:07:d7:a5:d2:c4:23:f4:5b:89:49:ab:dd:c6:0b:c0:bf:6d:
         41:72:00:53:77:fc:0f:7d:ca:f2:74:65:48:f2:0f:76:c3:0d:
         02:d0:d5:d8:b2:9c:9b:80:54:3b:11:bb:70:86:c1:e2:7d:4b:
         1d:20:e1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----