Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File:                     fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier:          T2iZVoEAjRUfEIAV+F0i3han5KF/fEXJ9btiFcGVi34=
Subject key identifier:   A8:C8:3D:94:22:71:B2:8F:B1:47:62:22:E9:3E:67:DC:04:50:19:BD
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer:       /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial:       01962F744895D28F927D34CCD82E4B1E7F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number:          1201
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: uSxsLdRrCDc3lYjyE/x8+uEs4GJ0WVyEcED8vAMY54I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:48:95:d2:8f:92:7d:34:cc:d8:2e:4b:1e:7f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=a8c83d942271b28fb1476222e93e67dc045019bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:cd:4d:35:c1:6a:99:ac:91:2d:f0:df:0b:
                    0b:49:14:dd:56:b6:b6:2e:6e:40:ff:50:b9:c8:f6:
                    bc:cd:d2:d9:39:d0:9a:27:7b:52:45:1b:a1:7e:f7:
                    a2:aa:f1:c5:8f:db:28:dc:d0:1a:74:02:24:16:f4:
                    ad:b9:03:cb:db:d7:47:9e:1c:2c:3a:e7:13:fb:60:
                    0b:eb:28:23:1c:ea:86:c1:33:9e:f1:27:60:a7:c1:
                    57:e0:58:25:08:67:9d:b6:5a:e8:1c:53:80:df:fc:
                    02:bb:1c:f8:28:b4:8a:85:23:92:9e:78:d6:79:8d:
                    9c:d8:97:f3:f1:73:ae:f9:17:cf:30:4e:4a:7c:a4:
                    48:d0:e8:6b:15:88:f5:ea:16:4c:84:20:8a:3f:03:
                    b6:69:8c:89:cd:01:96:54:0e:8e:e7:93:d1:da:f4:
                    79:8c:db:e0:56:f8:63:4f:f2:9b:36:ca:ce:69:82:
                    9c:18:06:81:80:48:d9:ee:35:22:26:5b:da:34:b6:
                    c8:08:b9:f1:fa:8a:e3:a3:d5:d6:f4:36:8a:e9:1b:
                    fc:37:77:e5:4e:dc:b7:a9:24:bc:3c:3b:ab:5f:0e:
                    f1:30:9b:aa:c0:08:d3:d5:85:6f:58:d0:f2:2a:19:
                    9f:e1:06:da:d5:ea:cf:ef:c5:c7:c5:c1:f9:b8:9d:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C8:3D:94:22:71:B2:8F:B1:47:62:22:E9:3E:67:DC:04:50:19:BD
            X509v3 Authority Key Identifier:
                keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:d0:81:c5:99:a0:e0:fb:56:cc:f5:8c:27:65:e6:8c:7a:
         7a:30:eb:ba:4e:c6:c6:56:72:5f:81:bc:4c:48:6b:6c:6d:39:
         c1:0b:d4:f6:2f:ae:cd:a3:af:67:bf:12:8e:6f:a2:ca:3b:27:
         2a:3c:c5:a6:05:81:c0:82:ca:26:47:32:bc:05:f7:52:03:06:
         09:47:f2:90:04:0d:16:d0:21:48:49:8e:2b:9d:49:87:1a:cc:
         21:29:b3:71:68:fb:d6:89:1c:8b:98:73:89:76:b4:5b:d5:1a:
         a8:56:61:7b:43:bc:89:c0:75:7c:c9:2f:64:5d:69:01:66:93:
         b6:aa:3b:d2:12:40:e0:af:10:7a:f2:d1:be:22:f9:4f:44:98:
         4d:09:83:cf:19:42:af:7c:c5:2e:f0:43:2a:59:e4:e3:6a:cc:
         9d:b5:48:71:89:4f:21:3c:57:d3:88:28:90:de:00:de:7f:f2:
         9c:23:2c:5a:ca:27:ef:86:c0:35:db:5e:3e:da:8f:8a:0c:b4:
         da:78:50:37:f0:67:e3:ab:6c:86:83:86:dd:36:d7:49:74:1e:
         74:14:87:8f:ac:0d:52:ea:94:f5:cf:6b:fc:8b:18:93:ce:aa:
         a8:fd:2a:f6:c7:93:ad:8a:a6:3a:47:69:a7:99:34:81:07:ac:
         d2:de:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----