Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
File:                     Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft (raw, json)
Hash identifier:          Utm1diQy/JtDRgqz+9i3qAGh+qDvT9eVKl2fjikGSd8=
Subject key identifier:   C3:9E:CD:3B:36:98:BB:E5:51:28:05:D6:14:A9:83:BB:43:FD:96:10
Authority key identifier: 16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
Certificate issuer:       /CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Certificate serial:       01962F3D3B9DF7EC6993B34D8EA49AC7018E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
Manifest number:          0B7D
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl (hash: J0cH1IQVp1j5smV4rhme0Sgmmv253EdrD/lClGxlknY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3b:9d:f7:ec:69:93:b3:4d:8e:a4:9a:c7:01:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=c39ecd3b3698bbe5512805d614a983bb43fd9610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:61:58:ee:aa:a7:d5:4d:95:b8:25:8d:71:
                    8c:78:14:4d:bd:75:a6:02:c6:d5:ad:8e:0c:1c:6d:
                    84:5d:09:bb:15:f3:3e:7d:74:87:93:b3:8b:22:3b:
                    5c:37:dc:98:87:2e:37:97:f1:d4:a4:dc:11:7a:69:
                    1d:dd:1c:e4:13:ea:55:37:86:56:64:6b:f4:e7:47:
                    f0:62:18:10:0a:9f:02:ed:12:03:e6:f0:58:5e:45:
                    a7:03:79:fd:94:5d:a7:7c:d6:84:5b:4b:3f:7a:e2:
                    97:f4:f7:19:59:9e:62:03:25:67:60:9a:cd:5b:e6:
                    4a:b7:2d:12:25:8b:46:37:1f:2a:bb:ed:04:6c:83:
                    c2:c5:f8:35:90:8c:a4:18:e6:e0:9a:46:be:b7:da:
                    75:f3:ac:2f:d5:1e:99:0a:c3:9d:a3:95:79:f7:05:
                    a3:fb:8e:19:ef:79:cd:38:c8:cf:81:a5:05:23:5d:
                    a2:54:3d:fb:cb:22:34:bb:0b:bf:9c:78:3b:c1:a5:
                    c5:9d:67:c2:a6:6d:e6:31:fe:1a:14:40:bc:29:37:
                    18:66:27:fa:8e:e5:fb:6b:01:99:86:50:3a:9c:36:
                    cc:95:ff:11:5c:7f:b8:dc:93:d3:95:fa:7b:a7:d5:
                    00:ab:7b:70:0e:33:42:a6:e8:24:47:81:70:50:22:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9E:CD:3B:36:98:BB:E5:51:28:05:D6:14:A9:83:BB:43:FD:96:10
            X509v3 Authority Key Identifier:
                keyid:16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:93:9e:2a:3b:bd:1c:d1:68:8f:d0:c0:e7:48:79:51:8c:b9:
         c6:15:27:d3:2e:59:c6:ef:48:9c:4f:0f:8e:e5:be:dd:6a:68:
         07:c5:cb:25:bc:1d:cb:96:ec:e3:5e:9c:d0:2a:69:7b:45:89:
         a1:fd:15:83:c2:4c:f5:e7:68:41:1f:4e:82:12:5c:6b:e3:11:
         21:6b:f3:cc:70:ab:ac:7e:13:d3:c6:f4:2a:67:82:8d:5c:55:
         a5:66:33:6c:90:c5:38:50:4c:96:de:1c:3f:20:0e:8c:61:39:
         8e:cf:ba:62:93:cf:1c:3d:01:d8:60:cc:9a:65:37:b8:68:65:
         ae:0c:2b:d4:94:fc:6a:8f:cd:42:1e:8a:35:6b:b4:61:aa:95:
         ec:58:1a:48:1b:dd:10:52:73:e7:46:a8:c3:02:f0:16:be:79:
         8a:7d:83:41:77:3e:97:03:d9:95:67:1c:d7:3a:75:1e:fd:0f:
         5a:40:c9:4f:15:eb:f5:c8:b1:cf:b7:39:1d:1f:ae:57:7c:a5:
         ab:6e:70:55:b3:84:58:af:58:3d:51:bf:1b:c7:a0:1f:0f:d5:
         b1:33:b1:91:17:b8:2c:71:f8:77:3b:44:73:bb:02:ba:0a:d8:
         b6:a4:48:c4:8a:82:e4:93:5f:95:89:ab:96:ae:a1:8f:e1:1b:
         c1:c7:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----