Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File:                     Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier:          tgQJ4X1GaBG0IOrUoNSYzqrLbqkTWWqr0AcyV1iSLXk=
Subject key identifier:   E7:A9:1F:E8:8A:88:62:82:E9:A5:8B:FA:4F:47:27:5F:25:74:D2:10
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer:       /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial:       01962E61DABCB358830DD15BDBCCBFB0473F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: wc1LaXIIEgSSthpNS3VRxQ0nrLYamlNwoc5xKQQ7C/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:da:bc:b3:58:83:0d:d1:5b:db:cc:bf:b0:47:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=e7a91fe88a886282e9a58bfa4f47275f2574d210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cf:69:81:53:d1:9a:b5:a0:62:70:d0:eb:72:
                    c1:60:a2:c6:5e:24:66:67:de:a0:ad:42:99:6d:7d:
                    fe:4b:3a:0b:05:2e:09:74:ce:80:ba:e8:8c:9a:f4:
                    90:a5:bb:6f:ec:85:10:fa:57:f5:d7:31:25:44:fd:
                    c8:22:b4:4b:56:6f:fe:a1:c0:9d:3e:6e:97:cd:d8:
                    97:ba:54:81:db:c1:49:b4:fe:46:9e:63:19:d1:64:
                    73:cc:11:36:7e:5e:76:0d:ef:27:cf:4f:a0:87:d0:
                    80:92:42:09:e2:d9:ef:aa:5b:fc:b4:ed:80:80:41:
                    a1:fb:19:ef:f8:8f:b9:ce:8d:85:c8:1f:59:4b:8f:
                    db:44:4c:c1:bd:89:d4:39:82:cb:46:d4:98:a0:1e:
                    7f:f0:0e:2d:be:f1:35:7f:39:6f:94:49:94:6e:c5:
                    6e:ab:b0:f4:87:70:d4:68:9e:86:bc:5e:39:b9:3c:
                    1d:86:f6:dc:1b:54:18:bb:bc:2d:86:0e:da:ab:61:
                    e0:b1:87:f0:93:f3:92:a6:b2:1e:c2:1b:e6:e8:ee:
                    50:c1:7d:1d:b9:57:58:79:e9:f3:77:63:4f:a9:5e:
                    83:28:14:f1:e3:4f:91:b0:0a:5f:dd:1d:ef:8b:3f:
                    b7:e7:35:c1:ca:96:86:dd:c5:0d:11:3d:b7:01:30:
                    e7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A9:1F:E8:8A:88:62:82:E9:A5:8B:FA:4F:47:27:5F:25:74:D2:10
            X509v3 Authority Key Identifier:
                keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:28:be:ea:aa:1a:8c:cb:84:13:48:da:52:cc:db:3f:89:dd:
         d8:23:44:a2:0c:7a:bd:43:29:93:c1:98:16:cd:ee:4b:c7:52:
         4a:ca:d5:34:f3:04:4f:15:e3:be:08:dc:20:b8:96:82:30:29:
         ae:4a:77:b0:d5:6c:ca:0d:a7:16:fa:d4:04:13:e3:9a:30:3e:
         40:ef:46:13:ba:66:75:98:96:83:72:ed:0a:da:82:a6:a1:85:
         4e:54:73:9a:3c:28:48:21:1f:b4:86:d6:65:60:12:ef:a0:08:
         f5:b7:a8:ff:ed:fe:b2:f5:5d:26:71:cb:03:54:93:e2:bb:f5:
         49:ad:cb:b8:f1:79:a0:33:54:f6:a0:d6:1f:22:c9:15:ac:1f:
         43:f5:05:04:11:c3:7f:49:21:83:36:f9:31:b3:6b:5c:47:83:
         4f:d1:e8:bc:df:6a:25:3b:19:f4:46:7f:3f:46:8e:33:a5:19:
         e5:0b:0d:c2:80:eb:28:fd:d4:48:2c:3d:ac:65:ef:28:20:e7:
         61:41:9e:54:09:08:66:a6:e6:91:d9:2e:90:73:bb:0f:ef:75:
         7a:73:f9:4b:99:76:7f:f5:64:71:88:74:84:17:7e:7b:d3:a9:
         cb:2f:94:7e:0e:c4:8d:00:c3:3b:43:e0:96:71:22:66:d3:b4:
         61:9c:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----