Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File:                     _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier:          3W+nBwzP/B0yuI+RzHXn/GMwTiHzWLQJC8/e1hwesf8=
Subject key identifier:   94:C8:0B:C2:5A:77:E5:4C:1F:E6:37:C7:8F:74:6A:B0:24:9F:E9:3E
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer:       /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial:       01962DF3FF74174C807AF33AFD91FB9E2674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number:          0EC4
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: b9rcErGFXn/Bejv0ySA9hwYVj2wEy44Vi+lSb2t6saY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ff:74:17:4c:80:7a:f3:3a:fd:91:fb:9e:26:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=94c80bc25a77e54c1fe637c78f746ab0249fe93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5a:dd:5c:bc:8e:f6:4d:75:6c:4e:c3:ab:c3:
                    d4:8b:ab:aa:16:f4:6c:f3:52:31:0e:5a:bb:1a:4c:
                    78:42:d3:23:eb:8a:aa:fc:06:47:c5:fc:58:8a:97:
                    49:3d:cc:ab:ea:40:20:aa:84:b9:75:63:9f:1b:eb:
                    48:7f:85:2d:3a:78:c2:38:1a:ea:42:24:59:15:34:
                    15:2e:89:7b:05:ea:70:e7:e5:e8:5a:3a:f6:d2:ea:
                    3a:e7:b6:12:c1:a6:cd:91:2e:e5:cc:da:2e:bc:8a:
                    f8:1f:a1:0b:f5:35:54:d2:c6:1d:29:a7:11:05:cc:
                    3c:60:be:73:6a:61:cb:c4:bd:e5:85:7a:89:a7:29:
                    2c:45:c8:7b:62:f4:67:22:5c:3d:56:37:44:32:7c:
                    ba:8b:56:2e:a6:8e:69:65:7a:4d:ef:ce:ea:a7:b5:
                    4e:3a:88:ba:c5:b4:be:31:01:f2:72:d7:60:18:2c:
                    b9:77:ef:e2:47:ef:e8:76:d8:a3:cd:2e:51:78:31:
                    98:c5:73:41:1e:02:3c:89:27:da:60:a4:e7:68:64:
                    34:da:63:ef:a3:f0:40:e6:3a:02:a6:e3:9e:3d:4b:
                    86:f9:11:b3:b9:b7:d0:50:5f:6f:f5:e8:db:54:72:
                    8d:d6:14:09:d2:82:66:a3:94:ea:03:81:89:2d:28:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C8:0B:C2:5A:77:E5:4C:1F:E6:37:C7:8F:74:6A:B0:24:9F:E9:3E
            X509v3 Authority Key Identifier:
                keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d5:58:69:ed:2b:f8:6e:ae:90:65:f8:8a:9d:29:5b:17:b6:
         dd:0e:ed:ae:2d:26:73:a4:14:1f:3b:91:48:03:4b:20:0e:b3:
         6a:f0:97:22:74:2d:66:14:45:1e:83:85:7c:03:55:d4:6d:59:
         26:51:3a:2a:aa:f5:d8:e3:99:5d:f8:7e:d0:4a:32:ff:96:34:
         4c:a7:89:0b:2d:0f:74:1e:c4:84:ce:72:32:e9:fe:69:3f:26:
         7d:46:ed:34:07:35:6a:29:6d:de:45:e3:3e:09:3c:27:7b:24:
         05:e1:9e:dd:53:ca:45:12:60:6c:2d:59:36:05:99:0e:d6:19:
         f3:d6:06:f2:17:5d:c2:d7:82:3b:99:46:4c:0d:f8:d1:a1:e5:
         19:77:a7:cc:a8:53:c5:fe:5f:35:ef:ba:18:85:a2:fe:03:40:
         6b:24:54:d9:3c:e8:4f:4f:fc:29:36:21:16:30:60:2a:8e:d3:
         f6:bb:1f:7e:0c:2a:b7:2c:82:dc:c8:c1:86:25:f0:e3:04:17:
         c1:f1:5d:1d:50:de:09:26:74:20:8b:7e:46:0b:a8:25:b3:a0:
         3e:d0:72:d2:2f:04:ec:8b:c2:68:b3:7a:1d:ba:1d:d1:be:3b:
         df:ed:22:e3:a1:6e:e2:23:11:4f:65:f0:2c:25:75:2f:72:03:
         2a:a3:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----