Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
File:                     F1yfOANJZKGpKvgMdo-D0IVAeT4.mft (raw, json)
Hash identifier:          k9e9nNRyxQKOPgGDA+AoVZMA/BFkANadEeb3+CX9+mE=
Subject key identifier:   21:FC:F8:D1:C0:1A:77:27:45:70:F7:4C:5C:CF:66:85:3B:C5:AC:14
Authority key identifier: 17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
Certificate issuer:       /CN=175c9f38034964a1a92af80c768f83d08540793e
Certificate serial:       01962F06A235AC7431A9029B930009CDF6E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: F1yfOANJZKGpKvgMdo-D0IVAeT4.crl (hash: EONZJ/YF01LA5WHpBu1+7/8qGdgILgDjtOYdKBw+Pok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a2:35:ac:74:31:a9:02:9b:93:00:09:cd:f6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175c9f38034964a1a92af80c768f83d08540793e
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=21fcf8d1c01a77274570f74c5ccf66853bc5ac14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:d5:39:f1:95:b8:a0:0c:d8:e4:f1:08:e0:
                    1b:e2:cc:a6:0d:6a:be:27:41:c6:63:4e:f8:bd:a3:
                    05:ac:07:a6:d1:b3:ad:82:2e:ad:95:65:38:5f:c8:
                    c0:fd:2b:a8:61:0a:94:a6:3c:c7:5c:76:6f:52:2f:
                    a2:cf:16:64:84:6e:9d:d6:3b:81:04:62:cc:aa:01:
                    44:7e:bf:3c:b6:69:2c:0a:1c:85:41:41:c0:fb:5e:
                    ed:31:c2:05:c1:b6:13:cf:32:60:bd:f5:84:1e:0b:
                    7c:b6:d4:3d:cf:04:d6:98:98:2f:c0:fa:31:7c:69:
                    48:f8:3a:40:ca:8b:59:99:f4:f3:51:c7:51:e6:36:
                    4b:97:e6:0c:09:32:33:e6:05:e5:84:20:58:cb:ea:
                    ec:9d:68:05:3a:c2:6b:fd:b1:cb:9f:d0:99:eb:78:
                    14:10:10:40:3d:99:11:6e:cd:fc:d7:9e:c2:37:30:
                    8a:28:8c:22:40:63:ac:6d:74:70:8a:db:cc:97:93:
                    e7:fd:f5:f6:34:c8:09:12:3a:b5:77:99:fb:92:ba:
                    e6:a2:ad:2e:d0:f2:9b:73:8c:62:dd:1a:8d:7c:c4:
                    af:2b:8d:01:5e:9b:48:cc:c2:97:c4:13:ce:bd:c9:
                    ca:6c:8a:6f:a8:98:d8:d8:b4:c8:45:3c:aa:ee:9e:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FC:F8:D1:C0:1A:77:27:45:70:F7:4C:5C:CF:66:85:3B:C5:AC:14
            X509v3 Authority Key Identifier:
                keyid:17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3f:31:17:66:a0:f9:4c:f1:bb:c5:67:e4:75:a0:01:2c:23:
         32:91:aa:03:2e:91:a1:04:32:91:65:22:fa:ec:f9:03:6a:31:
         d3:2d:e4:91:6b:53:e3:9a:9c:6d:ef:97:f6:5a:60:71:96:c1:
         4e:be:31:f8:44:33:c9:af:01:ff:6f:f8:fd:0d:46:41:c0:b3:
         83:dc:3a:bf:d2:7d:bd:9a:c0:f3:9d:3e:6e:d6:93:23:8f:cd:
         7d:2f:c1:03:7f:f6:b4:f7:30:32:d0:9a:55:31:5a:c8:d8:d5:
         f6:7f:26:c8:ca:9d:46:3f:92:be:9f:36:e5:39:96:a9:d8:61:
         69:c4:eb:f0:de:cb:84:92:cc:f9:b2:a4:1f:eb:ea:ed:ed:b7:
         25:86:99:a9:b9:f9:5e:ad:9f:ce:8a:34:49:ec:3c:09:4f:d4:
         10:52:62:88:75:24:01:35:8b:c9:04:d6:0b:c8:ce:ef:2c:01:
         68:69:f2:21:cc:45:f0:cf:f1:93:65:42:4f:a7:48:ef:49:44:
         5e:da:8f:e3:68:24:41:34:e4:5f:c6:08:ab:5e:c4:35:c9:58:
         ea:ab:34:2f:7c:aa:ff:58:30:c8:6d:46:e2:55:03:c0:69:1d:
         ba:ff:a4:96:2f:bc:98:97:30:78:ce:4a:ee:12:06:78:bb:74:
         1a:f8:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----