Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File:                     _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier:          pvK73drDxVf4EoN6X0es/t14//oQd7neyUllf9bQjvE=
Subject key identifier:   FF:9B:0A:7C:96:DA:EB:1A:8D:D2:24:FA:70:59:CB:8D:46:F1:88:F2
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer:       /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial:       01962F06C483F6002B9A7EFAC7468115E28B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: T1gV6aFfAkVcccesXVkxrhU0fWxwKBtp0YgWjYnRM80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c4:83:f6:00:2b:9a:7e:fa:c7:46:81:15:e2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=ff9b0a7c96daeb1a8dd224fa7059cb8d46f188f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d0:4c:0d:50:45:d8:f9:86:45:0a:e7:0b:00:
                    33:f3:9c:10:98:65:22:bd:95:fb:60:0a:3a:a6:02:
                    f7:df:4b:2f:24:23:4e:d5:7e:62:24:cb:68:7c:17:
                    88:48:01:f9:db:be:bc:68:a7:42:bd:13:a7:58:12:
                    ca:b7:ff:0b:65:7c:8b:fc:41:79:91:5f:02:53:68:
                    cd:40:e8:2d:cb:8b:55:11:97:01:18:79:e5:19:ce:
                    69:13:d1:70:d6:bf:da:bc:14:e7:cf:37:b2:93:3a:
                    2e:04:2d:9b:1c:ba:83:18:6d:b5:48:93:d9:ba:88:
                    00:8c:ac:ce:55:e5:f1:d4:50:a5:53:1f:6a:af:8b:
                    cb:07:15:ca:21:a4:be:d6:ec:17:d2:07:07:f0:df:
                    74:69:c0:0f:cb:35:80:8f:e5:9c:3e:fe:78:ba:33:
                    db:8d:47:4f:86:69:b3:e0:44:e2:3d:cf:aa:9c:99:
                    a1:d8:be:d3:da:f4:ba:c9:c9:22:08:36:98:a2:f9:
                    d9:70:f9:b5:f1:59:77:87:0b:4d:59:1b:d2:fe:ec:
                    19:e5:9b:39:c6:8f:0f:1b:2d:26:b6:4b:2d:f7:48:
                    82:13:2f:1b:c9:81:74:ff:b0:c6:23:27:e0:ba:36:
                    3b:c8:1f:19:b2:7e:79:8b:32:e0:f8:0f:c5:04:84:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:0A:7C:96:DA:EB:1A:8D:D2:24:FA:70:59:CB:8D:46:F1:88:F2
            X509v3 Authority Key Identifier:
                keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:27:cf:22:1c:64:16:78:ae:3f:cc:a6:e7:c0:24:23:30:
         65:09:92:fc:66:cd:fc:21:4d:63:d0:4b:c8:a8:52:49:57:74:
         b9:b9:bf:f7:b2:47:dc:f2:e4:47:63:b3:aa:7e:7f:d6:10:03:
         e6:0a:f6:ac:db:f0:23:b8:15:1a:04:ed:93:c8:9b:15:3b:e1:
         94:1f:37:f2:fa:ea:eb:00:60:11:c0:b1:d1:e7:86:c8:36:dc:
         5e:ad:40:be:e8:95:21:34:76:36:6b:b1:0f:38:4c:9e:16:d0:
         6d:3f:89:e6:42:97:4e:bc:71:2f:71:cf:97:71:b1:25:0b:c5:
         2e:fe:46:c9:61:95:12:f0:30:4b:be:0b:7d:1e:25:c6:b0:0b:
         ad:c5:fd:b1:7c:44:3b:06:b2:2b:17:64:ed:cf:38:9e:68:93:
         56:c7:af:76:7f:fa:2c:ab:94:8a:21:60:0a:4f:20:5d:75:4b:
         49:2c:fb:c4:3b:a1:00:f7:78:1b:d5:f8:4c:d7:0b:db:b7:13:
         36:17:73:8a:f5:37:85:1e:40:0b:e2:53:47:df:6f:70:eb:67:
         70:61:5b:68:92:9f:b8:9d:dd:73:0f:bf:13:d9:23:7a:2a:5a:
         d8:9d:3a:88:21:1b:6c:0c:47:f1:51:71:73:12:aa:bf:5e:f6:
         f2:08:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----