Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
File:                     FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json)
Hash identifier:          UQdxVuSLv9Jqb+R3sXV+SKpOXA3a0uvY7W+lWJs+Frg=
Subject key identifier:   59:73:1C:20:B0:A9:20:F4:F8:0C:37:67:BC:66:39:7C:37:AE:94:9A
Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
Certificate issuer:       /CN=15098341f26bb544640507bd880a99a7e7a235d0
Certificate serial:       01962F065DBFF7BD638C86D8D6C62A512036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: bxf73io1skh5sks55XszvbN1SJLhD7e1ub0IKAToE5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5d:bf:f7:bd:63:8c:86:d8:d6:c6:2a:51:20:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=59731c20b0a920f4f80c3767bc66397c37ae949a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:ea:f4:a6:9a:80:3d:8d:54:e7:8a:07:c8:
                    6b:3f:65:c7:33:de:79:09:6c:bb:01:64:8b:60:81:
                    d5:de:68:bb:7d:da:14:86:6a:bd:ed:4e:66:a7:47:
                    99:de:a4:76:97:f8:31:64:87:65:1b:d8:5b:1f:f8:
                    53:a5:f0:ec:9c:ef:f9:02:7f:5c:f6:31:97:95:16:
                    e7:bc:49:d6:d0:06:7a:8e:08:89:cd:f5:e7:cf:26:
                    a3:e6:da:99:e5:9b:09:e1:8e:bb:56:73:f7:86:69:
                    4e:04:06:54:d1:ea:85:20:30:d2:92:fd:dc:4a:66:
                    21:eb:fc:92:58:6f:4e:b6:e9:d9:6d:f6:b3:75:33:
                    8c:af:5c:8d:e2:2f:d7:3e:19:6a:d1:0b:50:26:4c:
                    8d:16:1d:6e:26:51:5e:ba:3a:fd:3f:e4:46:2c:bd:
                    25:a2:e1:30:d6:68:c7:e9:cf:e9:d0:96:0f:67:9a:
                    bb:6e:e1:4e:29:b9:69:f2:a5:66:11:f7:27:03:38:
                    35:e2:3f:43:01:23:2f:a1:0f:27:ba:f8:a7:3d:db:
                    20:a2:28:3f:57:dd:6d:59:21:85:8b:87:ab:4a:b4:
                    25:37:16:4e:10:bf:0b:2f:47:93:b8:01:8e:7f:d0:
                    28:bc:a4:de:37:ed:04:b5:b5:7f:52:b1:13:7f:ab:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:73:1C:20:B0:A9:20:F4:F8:0C:37:67:BC:66:39:7C:37:AE:94:9A
            X509v3 Authority Key Identifier:
                keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e3:05:86:bd:c3:a8:a4:f4:ba:15:47:ec:90:c6:86:44:35:
         91:47:e9:f9:fb:47:f5:2d:ff:eb:e1:c3:7c:30:91:c2:4c:db:
         c9:dd:c6:e7:bc:43:db:8b:d1:5d:d8:07:b3:ff:29:f4:c3:e5:
         91:b2:26:34:49:3b:a7:e0:96:75:5e:a1:5d:45:a0:46:13:7a:
         ba:a0:24:c3:b2:49:18:95:ae:94:2a:f9:75:69:b0:c2:0c:44:
         bd:2a:1d:4e:40:45:58:09:75:49:37:88:f6:4a:51:0b:73:d5:
         0f:bd:11:fd:8c:fb:df:47:96:73:82:c2:1e:95:de:4c:ff:d2:
         56:67:88:5c:32:3f:ee:c2:67:2c:ca:bb:1f:71:eb:a4:26:cb:
         39:40:e3:1b:53:46:52:51:93:ad:54:78:c0:13:0a:59:ee:44:
         59:1f:c2:6d:db:8c:37:c6:55:dd:a3:09:4f:ea:d4:98:aa:dc:
         77:b4:f9:a2:49:e8:67:3b:9f:9b:ae:42:9a:5f:93:fd:00:c1:
         d5:f3:23:a1:9f:14:c7:b6:50:82:e7:ee:86:f5:13:d9:6d:3f:
         dc:02:6c:e1:06:8d:63:ca:76:fb:01:16:27:a7:19:b5:46:4f:
         8d:23:75:b8:b8:8e:51:61:36:ea:4d:e2:ff:28:19:20:5b:5a:
         45:de:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----