Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
File:                     fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft (raw, json)
Hash identifier:          KAlk5zpFSAFcRf4Ur005kHdAP5dnywqHRd0sQ/2ILuU=
Subject key identifier:   03:5C:B2:CE:0B:56:35:18:7F:E8:59:50:7A:E7:0E:6C:1F:5A:68:7E
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Certificate issuer:       /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial:       01962E9910BCE3E22CF97CEBD8B972F64FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl (hash: XSa3WGnQsgVv9G5Ih0wvpKWM+v3qAgwbQ0mM5byGVyQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:10:bc:e3:e2:2c:f9:7c:eb:d8:b9:72:f6:4f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=035cb2ce0b5635187fe859507ae70e6c1f5a687e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:3f:ab:74:cb:9d:ba:ff:09:50:23:24:a0:
                    e1:c3:25:ef:b9:fa:ce:a4:89:2d:73:d2:74:d0:3f:
                    79:b9:98:32:64:fa:77:08:0a:e9:a5:98:02:1b:85:
                    be:61:42:4a:3d:09:24:dd:4b:71:21:6e:f5:73:d6:
                    ae:49:ae:21:40:71:7b:f2:d9:7a:c5:ad:af:38:02:
                    09:ca:8f:5e:10:7d:45:a4:6d:d5:53:f1:22:af:a8:
                    36:61:81:e1:f8:04:00:8e:f5:b8:bf:2e:cc:af:b1:
                    00:6d:35:07:a5:f4:3d:fc:14:03:51:1c:ef:43:8d:
                    e8:46:43:72:c2:5d:c6:de:30:9e:f8:cf:e2:9e:8c:
                    63:ec:88:6c:c2:89:c7:84:92:54:1b:33:7c:73:cf:
                    58:7e:91:7f:8a:ef:0c:e6:e8:66:84:a7:8a:68:c0:
                    f5:14:04:5e:2c:59:2d:26:ce:0c:f3:d1:29:28:0e:
                    21:7e:7d:bf:0f:d0:82:01:5b:37:70:d7:da:72:08:
                    ac:59:53:26:a8:bc:04:f4:ad:e3:22:45:cb:98:cc:
                    03:3a:e3:92:22:f5:68:b0:8d:81:f9:60:4e:3c:52:
                    8b:26:af:65:6e:42:ea:59:a6:f2:8f:93:a2:ea:f8:
                    61:7a:10:a2:b7:0f:34:9f:32:6c:07:cd:8a:f7:5b:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5C:B2:CE:0B:56:35:18:7F:E8:59:50:7A:E7:0E:6C:1F:5A:68:7E
            X509v3 Authority Key Identifier:
                keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f7:3f:f8:2b:ac:28:9b:bc:13:ef:40:d1:68:70:29:1c:23:
         8e:0e:0b:fa:0a:d4:9f:d3:45:37:3a:9d:d8:46:b8:8a:4a:2c:
         c3:27:aa:44:30:c8:d8:6f:f9:50:ac:e7:96:6e:56:41:84:90:
         8e:00:9e:17:df:1a:38:eb:95:52:b3:6e:cf:95:e0:0c:50:d3:
         d4:2f:83:0b:de:98:86:a1:42:54:7c:f1:f9:57:1c:cb:a5:65:
         3d:e4:c3:cb:8c:db:43:e6:2f:d8:7b:37:d0:0c:34:3a:64:f4:
         4f:e1:8f:67:82:66:1b:24:5a:c0:e4:a4:ec:c6:14:73:e2:af:
         69:23:67:f5:e5:f4:80:00:a7:9f:b4:25:9c:e0:25:29:83:d1:
         ce:89:48:56:d2:db:59:c4:61:59:a3:19:3c:9d:58:c8:ab:e7:
         4d:47:3b:0c:a8:66:ef:4d:20:f2:a6:77:ce:7f:b7:36:f7:8a:
         b3:34:25:d0:94:d4:fd:61:8f:08:08:cf:8d:88:e6:7b:6e:3d:
         17:4d:f6:ac:8e:86:f1:7a:38:63:cd:b0:58:1b:25:85:60:23:
         d5:19:89:4a:d7:66:75:a1:ac:f0:c7:2f:37:a0:6b:0a:16:9f:
         ca:5b:5c:d8:9b:6d:a5:75:db:60:2d:1c:d0:ed:db:cb:8c:f3:
         18:f5:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----