Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/76ea77-1757-4db2-a083-d218fb3c137b/1/FK5SmozFunaS25UmkqCLVCJLvzY.mft
File:                     FK5SmozFunaS25UmkqCLVCJLvzY.mft (raw, json)
Hash identifier:          AxXnvxtZBDoURFISOjHqb042zDdwVelJpXxKWH0NeKs=
Subject key identifier:   E8:FD:99:38:AE:CC:49:0C:70:C4:0F:C1:E9:79:A0:4E:BF:A1:CD:0E
Authority key identifier: 14:AE:52:9A:8C:C5:BA:76:92:DB:95:26:92:A0:8B:54:22:4B:BF:36
Certificate issuer:       /CN=14ae529a8cc5ba7692db952692a08b54224bbf36
Certificate serial:       01962ECF679E159D933206E8018A07CA3327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK5SmozFunaS25UmkqCLVCJLvzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/76ea77-1757-4db2-a083-d218fb3c137b/1/FK5SmozFunaS25UmkqCLVCJLvzY.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: FK5SmozFunaS25UmkqCLVCJLvzY.crl (hash: Usi8RS0jYIo5Fykhl1MFMMkPUV8hfW877ig9eKbLqHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:67:9e:15:9d:93:32:06:e8:01:8a:07:ca:33:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ae529a8cc5ba7692db952692a08b54224bbf36
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=e8fd9938aecc490c70c40fc1e979a04ebfa1cd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:1a:b3:ea:55:4f:d3:fc:9f:57:12:64:61:
                    5a:f8:0f:8b:93:33:fc:dd:32:6f:c1:3b:3b:72:41:
                    b6:c1:50:05:63:1c:2d:d2:1c:2c:44:86:16:1e:93:
                    6d:f2:9c:78:81:29:31:28:53:b8:9d:86:e1:f1:78:
                    b3:bf:3a:14:7e:73:20:51:d7:0f:b9:01:ed:c6:be:
                    56:cd:16:0c:99:86:d7:fe:72:ef:e0:b6:48:de:5e:
                    0f:d8:d9:cf:f5:1f:8c:a8:b6:cb:de:85:71:12:80:
                    96:26:8d:a7:12:36:ce:f0:7c:d2:78:80:de:9f:bb:
                    f6:aa:95:60:d1:44:a0:44:86:1d:6c:a6:92:0e:5d:
                    05:c2:5f:8f:62:6b:ee:8f:21:0d:82:ec:a0:cb:8f:
                    3d:00:5c:00:ac:f7:87:91:fb:2b:41:e4:31:65:f5:
                    5e:c8:f2:8b:5a:d4:e7:72:38:5e:1c:70:4e:24:16:
                    51:8e:22:2c:6f:5f:d1:8e:bc:91:7c:d4:9e:e2:38:
                    07:e8:87:9f:b0:95:62:f3:77:88:d3:ef:62:ce:f8:
                    1f:07:e2:92:8f:cb:c5:b2:12:39:1b:e5:b8:aa:c0:
                    01:9f:fb:d5:39:63:fd:b8:9a:5e:ac:dc:c8:b7:3c:
                    82:93:87:0e:3d:f1:a1:0e:4a:71:12:32:b3:4d:da:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FD:99:38:AE:CC:49:0C:70:C4:0F:C1:E9:79:A0:4E:BF:A1:CD:0E
            X509v3 Authority Key Identifier:
                keyid:14:AE:52:9A:8C:C5:BA:76:92:DB:95:26:92:A0:8B:54:22:4B:BF:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK5SmozFunaS25UmkqCLVCJLvzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/76ea77-1757-4db2-a083-d218fb3c137b/1/FK5SmozFunaS25UmkqCLVCJLvzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/76ea77-1757-4db2-a083-d218fb3c137b/1/FK5SmozFunaS25UmkqCLVCJLvzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ad:1e:94:ab:89:3e:fd:d9:27:4f:96:58:e8:4e:a3:4a:90:
         24:89:59:fb:33:ff:84:f1:cc:f9:33:c5:1c:54:7d:eb:6f:1c:
         12:f0:35:72:8d:31:d7:6c:fa:ab:df:09:f7:52:ba:46:3f:d0:
         9b:d7:c2:ea:59:e6:36:a6:ad:ca:37:2c:ae:65:31:cb:9d:8f:
         d7:4f:17:dc:f6:64:d5:52:08:ce:7d:5f:fa:0c:bc:ac:f7:4e:
         c7:11:0e:35:c4:d8:66:58:bf:94:4a:b4:24:3f:98:e0:9f:0b:
         7c:f5:8e:d6:e7:a6:d4:8d:a9:87:4e:9f:d4:d5:e8:e8:3b:62:
         4a:a8:7e:b1:f4:10:f0:69:2c:fe:53:95:cc:f9:ea:0b:46:4e:
         a9:69:25:85:0a:0a:06:47:52:ee:1d:54:49:bc:77:ce:f6:1a:
         02:36:d1:30:0e:ac:a7:21:3c:01:a5:0b:12:ab:bd:ea:bb:41:
         7e:b6:a4:18:0b:4c:81:df:e0:76:5c:82:d5:83:69:4c:01:c7:
         bf:90:d7:1b:bc:aa:45:4b:ba:dc:a0:80:19:ca:34:f4:56:2f:
         25:5b:cb:ce:e3:0c:d8:8c:3a:7e:76:d0:47:7a:15:18:79:a4:
         1f:41:65:90:71:d8:53:c3:71:3e:de:49:58:71:6c:1e:93:d8:
         be:0a:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----