Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
File:                     Fi14JJtyG00s6M9t_PvEQiITrJ0.mft (raw, json)
Hash identifier:          8Bks4gbRkB2H6zG2DUktpDaEDayRsFQypiPCWWm9bf0=
Subject key identifier:   79:36:36:05:49:31:90:33:E5:72:4D:21:48:F7:14:65:F9:12:1A:35
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Certificate issuer:       /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial:       01962E61B563EA3FF16FA0722C1E5C5B2826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 1-OxGWMnguhulz6f31kCb1mmRHrM.roa (hash: SvBOg3Xrt3LXP7jg7xDbyxKXVwwahdO0dORGRkeHvnw=)
                          2: Fi14JJtyG00s6M9t_PvEQiITrJ0.crl (hash: PvHOHend+0uGmkQjFo2BwUI7PF6Tjz5+2gaN1BF/JjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b5:63:ea:3f:f1:6f:a0:72:2c:1e:5c:5b:28:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=7936360549319033e5724d2148f71465f9121a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:dd:10:08:9c:49:f5:ad:5d:e8:25:50:81:
                    39:5d:27:45:e0:39:3c:8e:cf:6c:6d:cd:a0:fe:4f:
                    e9:96:90:9e:65:8b:87:ef:0d:01:fe:65:05:c9:4f:
                    58:43:ff:26:c2:4c:33:c5:04:4a:d0:9a:f8:f6:d1:
                    c1:3e:a5:90:45:05:58:6a:89:59:19:7c:10:b6:29:
                    74:a4:2a:d6:b0:5f:52:69:ef:44:c8:9b:19:f1:34:
                    18:3e:44:9f:be:5e:8f:a4:83:a8:d5:3c:3d:b6:95:
                    a7:06:44:a3:40:8c:cb:fd:1e:32:af:cb:14:df:f1:
                    97:40:86:2d:aa:4d:23:4b:61:09:e7:53:b4:e4:7f:
                    14:b9:e3:4d:65:5f:27:7d:52:81:37:d2:78:b9:31:
                    c4:91:eb:c2:e4:d3:7e:ea:bc:e9:2f:39:19:1c:de:
                    4e:fd:b3:f6:a6:44:53:79:32:49:bc:6c:d7:eb:9d:
                    17:55:9e:de:8f:80:94:dc:3b:a1:e7:2a:a8:14:83:
                    60:fd:6d:fc:68:e5:53:18:df:f2:d0:b0:03:6a:24:
                    bf:12:8c:54:7e:90:8b:87:ae:ba:aa:ae:ef:3d:ab:
                    e0:11:1a:a5:85:a5:10:e1:de:5f:f2:7b:9a:bf:7a:
                    47:f6:2c:f3:3e:1c:ee:fd:d5:81:43:ac:88:43:13:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:36:36:05:49:31:90:33:E5:72:4D:21:48:F7:14:65:F9:12:1A:35
            X509v3 Authority Key Identifier:
                keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a3:31:78:df:ba:c8:40:e0:cb:52:07:c4:bf:55:b8:c0:3c:
         2d:a1:67:fd:4b:f4:0c:f4:7f:5c:da:1f:e1:d1:40:23:ae:bf:
         a0:e5:62:49:91:02:59:25:2e:41:43:85:a4:80:14:16:90:5f:
         73:0e:ab:e5:49:b3:a3:15:15:b1:1c:c2:d2:9c:33:b7:91:6c:
         6e:88:14:38:57:1c:1f:d7:90:a2:44:78:40:23:8f:69:6f:f6:
         52:fb:89:5b:1d:de:90:2b:eb:f6:8d:bf:a6:8c:1e:26:a7:4d:
         ca:32:1d:99:f0:fc:e6:17:d2:fc:fe:b5:7d:2f:71:ba:fb:b4:
         3b:6d:bb:61:a7:98:9e:4c:13:fc:c2:d4:54:c2:b0:9b:64:1a:
         c8:75:c0:9e:6d:44:e4:dc:60:ac:12:6d:58:48:42:35:72:1f:
         d6:4a:31:8e:37:c3:dd:92:27:57:e9:0c:e8:56:27:a8:7f:06:
         2d:9d:6a:78:17:d3:de:b8:59:32:82:bc:97:34:61:f7:6c:bb:
         51:93:02:83:72:e1:66:c1:17:1d:1c:02:82:13:21:ec:0d:34:
         84:be:e7:b2:73:fb:29:59:3d:da:2c:79:21:5f:1e:7a:c3:2c:
         48:ad:f6:e6:f9:90:22:ae:b1:19:4a:5f:8d:b8:3a:a5:cf:4e:
         7d:1a:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----