Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File:                     1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier:          mjX73qLNQWpYX3Q7XWT8eknTHTW8w7VMyPR8TvuVf8o=
Subject key identifier:   7D:A1:0D:10:B0:16:37:AE:BA:6F:08:D8:73:D3:E3:41:15:19:C0:0E
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer:       /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial:       01962F748311808E9802BB6BC9C8458D7FF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: RAmV5EwQi1TOyeYULUULgKF5oBwbUWiHfxB553pXB8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:83:11:80:8e:98:02:bb:6b:c9:c8:45:8d:7f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=7da10d10b01637aeba6f08d873d3e3411519c00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fe:46:4c:18:64:03:44:2b:52:ef:20:3c:e9:
                    d7:76:5e:d5:3d:2b:e1:f0:9e:dc:de:a7:91:0d:8c:
                    e2:85:08:60:79:e8:37:e6:fe:63:59:50:d5:7f:ac:
                    3f:b8:32:b4:36:e8:e9:e1:af:44:7b:88:5f:7a:54:
                    34:fa:ba:96:f3:6d:f2:2d:63:8f:12:0d:bc:e6:2a:
                    00:fd:44:02:15:9c:a0:7b:be:a2:02:a9:b8:a0:ca:
                    1d:e7:9d:7a:03:3a:0d:86:d4:31:67:8a:17:ce:34:
                    08:77:cb:59:90:ed:43:24:7f:46:61:5a:78:51:55:
                    50:7d:fa:90:24:d5:36:23:85:82:b9:fb:a8:37:e9:
                    fd:60:d8:8e:7a:de:a7:5c:0a:a3:54:16:8a:11:b9:
                    92:4d:d7:0c:3b:c0:6c:9c:7f:72:fc:df:24:d6:d0:
                    17:3a:46:a4:a9:e5:c6:3e:ab:7d:15:a2:56:f1:cb:
                    6e:e4:02:89:cb:3c:6a:33:9a:f6:51:47:a9:44:55:
                    f0:3f:86:2a:0f:55:2a:35:57:45:cb:2e:ce:a6:d4:
                    76:2b:0e:e8:3b:05:b9:5a:15:64:9f:83:b7:39:7a:
                    4f:51:a9:71:c4:3d:2a:a8:8d:a0:13:39:71:ad:d4:
                    45:6b:38:a2:ca:ac:da:c6:15:e4:0a:9c:cc:ef:f5:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A1:0D:10:B0:16:37:AE:BA:6F:08:D8:73:D3:E3:41:15:19:C0:0E
            X509v3 Authority Key Identifier:
                keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:04:5c:04:03:02:e3:16:b6:be:b3:4f:87:a5:62:fa:93:34:
         d0:53:64:fa:4f:96:53:1f:8f:af:b5:10:d4:8e:95:d7:51:e3:
         3d:d0:ad:66:0b:39:13:85:a8:fb:d9:0b:cd:7a:39:c3:8c:c8:
         79:6b:f4:62:e6:87:14:66:39:07:22:6f:0d:6d:7d:59:e3:53:
         a4:3e:6e:3b:36:d3:76:7c:ea:c2:d5:eb:19:ac:4c:e9:18:b1:
         10:1c:17:af:6e:7d:98:48:a2:df:a8:91:91:00:ad:72:32:ba:
         42:7f:5b:ce:54:ea:1a:19:50:5c:81:f7:c9:95:d9:d9:8e:a5:
         a8:dd:85:6d:2d:76:c6:8a:2c:2b:db:0d:89:43:ef:bf:a9:d3:
         97:99:3b:48:91:85:bf:5b:82:ae:40:e8:e6:04:f5:48:7f:b8:
         8b:17:91:ac:f4:8d:d5:ef:d7:e0:59:2a:00:9f:93:3c:df:11:
         d4:32:79:e7:88:5b:ab:89:49:83:cd:4b:40:59:37:0f:33:8f:
         91:c2:f6:a2:7c:84:f5:9d:e3:46:50:e2:a3:de:d4:73:bf:9d:
         1d:78:be:ed:a6:c3:1f:1d:70:1a:4c:b6:1d:ee:c9:a9:6c:ae:
         49:cb:89:65:cf:14:88:c3:31:d2:78:c6:ec:76:4e:e4:62:cc:
         12:34:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----