Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
File:                     fuKac7j6u65GDnkk_nZoR13LmmM.mft (raw, json)
Hash identifier:          TvOTvdvHmzlmcmEmphezKfW97qm3aU96tNcF/qi/SVY=
Subject key identifier:   F8:D3:98:4B:C4:B5:C0:AA:C4:46:AA:92:AF:86:C4:53:7F:E5:7C:5D
Authority key identifier: 7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63
Certificate issuer:       /CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
Certificate serial:       01962E9885E70CF4CF9CC99E543881EB2D72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
Manifest number:          0464
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: fuKac7j6u65GDnkk_nZoR13LmmM.crl (hash: 9o6vZSmbC5Km2tUI39O57WFH/HZkUjZ2emCSHmY4mI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:85:e7:0c:f4:cf:9c:c9:9e:54:38:81:eb:2d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=f8d3984bc4b5c0aac446aa92af86c4537fe57c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:e4:d4:cc:a1:c6:00:58:41:2d:e5:f8:d5:
                    d8:89:73:94:98:d8:ca:25:8c:95:b7:3c:3b:be:b2:
                    64:8a:61:d2:ac:a0:ec:3b:51:bc:22:17:fc:b1:2f:
                    6a:5d:d4:fa:a0:73:f7:b6:ac:2e:08:e6:5f:ef:6a:
                    a8:c4:aa:84:7d:3f:57:cb:f6:8d:14:1f:a8:cd:b8:
                    36:75:a0:d0:43:8a:6c:25:2c:09:74:b7:c2:13:5e:
                    f0:76:1b:04:40:3f:9f:7d:43:3e:09:8b:67:6e:ee:
                    28:d0:60:40:13:8f:3f:ad:e5:66:f2:23:82:aa:f4:
                    04:38:c1:44:1a:29:b4:1a:db:e6:6a:3e:27:40:df:
                    44:64:a8:99:24:62:c9:89:dd:ab:67:ff:16:47:89:
                    ee:9f:68:4f:70:50:60:0d:87:c0:74:df:fc:12:e1:
                    54:96:cb:91:5a:f4:c0:2b:06:95:76:8d:a4:52:13:
                    96:98:62:14:f9:f0:66:07:a7:f0:13:50:b5:c8:ec:
                    b9:4f:db:31:0f:7c:cf:4b:7d:20:23:a9:4c:66:27:
                    5f:67:d3:00:f8:68:5d:69:d3:1b:d4:74:b7:ea:0b:
                    15:51:77:4e:59:3e:4c:d6:cd:28:f8:31:45:3f:75:
                    07:7d:92:04:d0:81:b0:1c:22:78:37:e6:6d:19:07:
                    79:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D3:98:4B:C4:B5:C0:AA:C4:46:AA:92:AF:86:C4:53:7F:E5:7C:5D
            X509v3 Authority Key Identifier:
                keyid:7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:69:c5:be:f4:ef:92:5e:19:8d:32:c3:e2:0c:99:4e:fe:74:
         37:cc:8c:64:9b:fa:e6:35:04:63:e3:cd:a3:c5:fa:ac:3b:b7:
         17:3a:aa:ec:f8:af:ab:80:3f:24:c0:e9:80:34:60:9e:01:f0:
         66:1f:a9:d2:93:0f:76:24:e3:4d:b7:b5:3d:55:22:ee:f4:55:
         74:58:de:b1:db:31:77:25:d9:ef:2a:06:3a:26:41:d3:18:3f:
         90:8b:34:f1:66:23:28:bd:2d:ae:cf:24:18:0f:6f:35:9a:6f:
         b7:e4:2b:ea:27:97:43:a4:70:69:31:27:df:d3:89:9b:df:e2:
         83:86:a6:21:bd:7d:a7:b6:42:59:ac:d7:0a:a2:b3:0d:93:13:
         34:c3:1d:7f:22:65:0b:f1:cf:2a:9c:76:0f:6f:15:fa:70:0f:
         fc:8b:d8:60:50:44:1f:87:17:c8:1c:7b:cd:37:c7:94:22:d6:
         54:50:09:d8:d1:1d:07:d3:59:3c:1a:fb:cf:da:bd:07:28:0b:
         43:54:b9:77:1e:0b:5e:b0:29:77:04:53:29:b4:d9:27:c6:68:
         29:e0:21:29:05:50:65:54:ed:47:a5:9d:2b:ed:ce:04:d8:6c:
         cf:80:b2:1b:81:51:00:c0:b7:67:89:e4:ac:dc:21:34:9b:76:
         18:15:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----