Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
File:                     Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json)
Hash identifier:          KslPgJkTRs4ORs5LzvJu9/V4dAAvTndNf6oP0iXJWH0=
Subject key identifier:   8B:1E:16:A5:6A:08:69:C4:DD:A8:96:D5:A0:AA:18:A8:43:FC:1B:FE
Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
Certificate issuer:       /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Certificate serial:       01962E98BBB4D8C1F8FA99A11B0BC3E87296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
Manifest number:          045F
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: SecwAuhtGlR8ReCg6oC9r/kVhneQpkDcmfJD7gDokCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bb:b4:d8:c1:f8:fa:99:a1:1b:0b:c3:e8:72:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=8b1e16a56a0869c4dda896d5a0aa18a843fc1bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:87:16:5d:2f:8d:cd:5c:c8:b8:a4:54:be:
                    aa:2a:02:4c:f2:e4:b3:89:b6:2e:a3:81:f3:08:d2:
                    04:5e:3e:86:57:27:cc:11:82:d8:ef:10:92:77:bf:
                    9a:cb:65:87:69:4f:aa:15:4e:e8:8c:ae:ff:f5:d6:
                    df:64:fd:c7:1c:34:fc:e7:63:f7:3e:ed:a6:77:8c:
                    c2:3e:73:72:f3:1d:95:33:22:c1:d7:dd:c2:3b:0e:
                    39:b2:f1:c7:a4:7a:5f:d8:70:48:5c:a7:ac:98:b8:
                    d9:97:86:4c:3e:81:e0:9b:54:8d:88:e5:9b:65:b1:
                    97:37:5c:de:70:b5:da:3d:df:ca:40:69:d7:ef:79:
                    66:61:82:a5:e5:20:35:50:ec:60:f9:c7:38:66:c9:
                    55:cc:aa:12:67:a4:48:40:80:05:d7:cf:27:ab:df:
                    3e:f6:37:62:73:6e:72:bd:6e:78:ac:f2:d2:32:98:
                    2a:be:20:a1:91:e7:e3:fc:9c:98:35:40:ff:65:86:
                    bf:23:d2:1d:f7:de:9a:c0:24:7b:d4:bb:f0:d2:97:
                    0a:0c:c7:c8:7e:eb:5a:30:55:bd:fe:92:a0:5e:9d:
                    c2:1c:ce:f7:6c:2e:0d:9b:7f:fd:8c:51:33:d4:fd:
                    df:1e:0a:62:8e:f5:e8:bc:37:3e:4a:dd:91:d0:4c:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1E:16:A5:6A:08:69:C4:DD:A8:96:D5:A0:AA:18:A8:43:FC:1B:FE
            X509v3 Authority Key Identifier:
                keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:11:43:31:46:3e:6f:cc:2a:9e:b5:0b:9b:12:aa:64:86:d9:
         38:6f:54:0f:90:7d:e5:23:66:77:77:5b:29:26:a4:e5:0a:cf:
         36:0e:d4:8e:e0:43:e3:b1:07:16:93:64:33:6a:70:7f:1e:a1:
         f5:6d:9a:0c:1a:97:2e:ab:7f:93:e7:57:f8:c3:1c:66:6a:2c:
         5e:74:e1:e6:3c:98:0d:2d:84:9a:06:7f:fe:e4:12:94:3c:14:
         10:11:c0:a0:85:f9:32:33:c0:eb:ff:a7:2d:d3:0c:cf:49:45:
         46:22:1a:1d:cf:8e:4b:6b:54:58:50:ad:14:d8:b6:c4:6e:3e:
         96:b5:97:ba:e5:dc:e7:50:1d:31:73:51:57:66:31:cd:00:66:
         90:ad:4c:98:99:a5:0e:63:bc:f2:03:88:ac:6c:46:03:1a:de:
         e4:7f:f7:77:39:81:f1:04:5a:1c:dd:43:85:a2:06:bc:45:ee:
         7b:19:b3:ce:f0:0d:a7:82:97:83:76:f6:de:79:ff:27:ce:95:
         9e:f6:c9:e4:cb:7e:25:73:7c:30:90:ed:ee:a1:04:1a:75:61:
         db:78:51:85:31:02:3d:b0:11:b1:49:0a:10:79:21:81:f4:9b:
         5f:b0:03:52:c6:af:3f:c8:55:38:ad:f9:17:6a:99:11:84:60:
         de:53:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----