Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File:                     f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier:          zWMGWIbfvbo9RUF3LDLtFdRVyTy2izeBZQcMhtWY6VE=
Subject key identifier:   96:7C:14:BD:C9:BC:94:2D:40:7F:F6:78:45:C6:51:CD:17:16:DF:57
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       01962E61BF16F2735B7E9064E861BBA32A53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number:          0228
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: 2sx/+Wg8WVhXNc51OoGym7/ygO6600N1HcYqKjRx8fk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bf:16:f2:73:5b:7e:90:64:e8:61:bb:a3:2a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=967c14bdc9bc942d407ff67845c651cd1716df57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:42:a6:bc:c0:61:cf:7d:ea:78:98:c6:2d:
                    a0:61:3b:a6:7d:8d:bc:55:2a:d8:93:d3:3c:76:bc:
                    f2:05:f7:b9:78:28:6e:c1:5d:99:24:73:c6:55:37:
                    f7:14:ae:b7:64:8a:b3:c3:96:f3:62:15:4d:21:d1:
                    00:87:e8:c2:62:b8:24:cc:8c:3d:16:60:1a:fd:ab:
                    4d:a0:60:b3:c7:e2:a4:e7:a9:51:c3:7a:a8:b7:79:
                    9b:ce:c5:3b:53:2c:9e:92:e2:e6:a2:0b:f3:dd:4e:
                    b6:46:d8:d6:2d:c8:a1:f5:dd:17:f1:6e:81:27:82:
                    c3:e5:67:f2:34:87:06:f1:e1:01:a3:6a:dd:56:a4:
                    c1:29:f3:98:5b:e1:79:b0:12:66:61:3c:1d:8d:83:
                    ee:f6:16:75:2b:be:23:a5:2b:db:ed:63:8c:29:bb:
                    b8:9e:2d:96:a0:84:9d:03:36:df:95:05:22:73:46:
                    98:e9:39:fd:dc:28:7a:20:8b:12:c4:63:8c:c1:93:
                    3a:4c:4b:bf:d9:ae:10:b3:20:1e:b9:3c:a4:fe:a4:
                    2f:1a:b5:d4:e2:01:ab:f0:46:28:30:e5:1b:d0:a9:
                    7f:eb:86:a9:0e:8a:35:5d:9a:a1:ed:d8:d3:7b:61:
                    98:18:fb:94:b2:d2:99:17:e3:7d:b5:65:91:b9:26:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7C:14:BD:C9:BC:94:2D:40:7F:F6:78:45:C6:51:CD:17:16:DF:57
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:7f:f2:70:77:75:52:1d:a2:ad:a5:ad:99:c7:8b:2b:9b:
         4d:68:ae:ce:c3:23:d1:0d:8f:83:fd:2b:87:ad:f3:16:b9:43:
         6c:2c:ce:38:d0:26:65:d6:31:12:a2:59:90:1b:27:3c:92:32:
         a2:67:46:dd:d6:1a:26:07:5a:e5:ab:9f:8e:fc:0e:2b:f0:df:
         b6:a1:6a:74:e7:de:22:f5:9c:b4:2f:45:26:ac:f3:90:a5:e8:
         2c:27:fb:3d:58:5c:5f:58:6c:15:62:f1:d2:93:96:60:3e:40:
         2d:07:4e:f3:d8:00:67:fb:f1:60:a8:6c:4d:53:56:8e:6e:9d:
         23:42:cf:1b:38:b9:ae:c5:d4:0c:4e:6c:51:8c:14:a6:81:82:
         a1:89:1a:25:bc:40:78:ed:55:21:c2:f4:18:12:ab:0e:2e:03:
         3e:b8:96:10:fa:3b:7c:c5:b5:f4:a1:cd:af:77:aa:96:ee:3b:
         70:04:84:56:eb:7c:33:c9:b3:2f:bb:e7:a7:cd:bb:ab:08:8e:
         84:14:45:b2:5e:40:aa:ba:2c:23:76:59:46:3e:26:29:ed:74:
         04:0f:7a:c9:2b:e9:2e:27:2e:c7:c6:79:6c:db:a8:08:57:c5:
         34:3b:a1:47:43:1d:ea:46:99:f4:29:62:43:b0:b8:14:24:a7:
         39:75:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----