Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
File:                     FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json)
Hash identifier:          wxdxsYcjx/hhzq6gy+yqkZUr2yP7464FKcLD1Q4WvsY=
Subject key identifier:   67:71:05:4C:64:73:A0:4D:2B:61:2D:E1:FB:97:97:0E:DC:41:00:06
Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Certificate issuer:       /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Certificate serial:       01962F06E642E4167EFD3216339936BA536A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
Manifest number:          0331
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: cmdWhl8dDElxYwvN6F/GKVGlemmSolHIezLDP/6V+1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e6:42:e4:16:7e:fd:32:16:33:99:36:ba:53:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=6771054c6473a04d2b612de1fb97970edc410006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6c:8c:78:49:50:a1:bf:08:14:27:1d:be:e9:
                    5c:30:bb:17:6e:e0:66:1a:4d:d0:98:ff:87:e9:87:
                    ef:80:30:5f:85:3f:21:aa:01:7b:d0:ab:b3:d5:3f:
                    d9:5d:59:a1:78:81:c0:b9:19:49:98:96:1a:08:49:
                    1b:93:31:78:4a:f3:ed:b5:cd:11:44:06:38:01:da:
                    86:03:12:c8:ae:09:42:02:35:2c:c5:dd:34:82:a2:
                    9d:0d:db:fb:41:6c:24:a4:eb:35:0a:87:e9:66:96:
                    40:dc:e6:22:b6:1a:22:31:d9:b7:77:77:f2:cd:5e:
                    95:05:f9:77:3e:06:41:12:39:da:01:98:05:dd:81:
                    80:d6:36:c2:d8:88:c6:d7:2a:54:7b:61:60:50:d9:
                    88:fd:8e:eb:41:ca:68:34:3c:21:6e:4e:ed:74:ce:
                    d5:4a:01:1b:66:9e:9c:10:40:cc:68:7f:bc:01:00:
                    1b:32:e7:ae:ad:66:48:6e:3e:47:cd:53:6b:b6:1c:
                    4f:f9:3d:31:e1:9c:92:21:a8:d7:5b:4b:cb:57:3c:
                    19:0f:12:90:f1:42:b0:f2:ff:48:b5:9e:4f:a9:ee:
                    a6:7a:10:10:35:84:a2:e6:d8:35:0f:c8:4f:62:01:
                    e7:4a:af:8e:8e:3c:05:56:24:38:2d:3d:e8:49:05:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:71:05:4C:64:73:A0:4D:2B:61:2D:E1:FB:97:97:0E:DC:41:00:06
            X509v3 Authority Key Identifier:
                keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:88:b3:b2:71:5b:bd:92:7c:39:54:27:f2:d8:86:c6:45:
         66:cc:4d:c2:03:2d:84:a6:37:a3:3c:8d:71:37:44:01:f5:00:
         17:28:ca:ff:f9:33:5a:95:12:e5:82:de:3c:e4:d2:8e:32:e4:
         48:7c:45:36:53:ed:ee:99:57:ec:c1:a5:7e:4f:39:fe:b2:a0:
         76:55:76:75:c4:d6:c7:db:e8:08:9c:ac:f7:91:1f:17:0e:6a:
         c8:7c:5f:91:c3:22:ef:e4:f0:b9:d0:51:cd:71:45:e3:dc:fa:
         5d:36:ab:20:c2:fe:17:33:1b:f8:bb:ec:d1:41:46:57:43:d6:
         53:08:9d:7a:d4:3f:95:d9:be:31:61:26:b8:5b:39:b0:b3:ec:
         a3:3a:71:a2:81:16:af:cb:eb:04:0b:b0:f3:95:43:1d:36:8e:
         34:e8:6b:c9:ef:66:93:f0:05:59:75:30:95:d7:a1:b7:d5:a8:
         f0:3f:ad:9c:52:3f:51:16:36:ef:87:ca:86:13:6a:8f:78:c6:
         72:30:52:79:d1:c3:db:95:9d:e6:74:57:df:b4:0d:7c:50:f6:
         4b:d0:53:c8:4e:eb:3b:cf:09:2a:14:2f:a1:2d:a7:65:f3:49:
         2c:3c:24:68:df:58:96:19:85:cb:6a:c0:90:f1:ee:3b:9e:cf:
         7a:43:98:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----