Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
File:                     FGK93WyF9js9vnfnrIVJwm_m8-w.mft (raw, json)
Hash identifier:          RsWUxNnvYOzilDSMFqYxYDAsNJnwnADtrzbrqnVTCgE=
Subject key identifier:   4B:72:79:57:95:A4:0E:82:98:F1:A0:1F:28:DA:C4:B6:45:BB:7E:86
Authority key identifier: 14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC
Certificate issuer:       /CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
Certificate serial:       01962F7488BA70CDD426AB679CEBEED81E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
Manifest number:          0FD8
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: FGK93WyF9js9vnfnrIVJwm_m8-w.crl (hash: kyVT/X+bJBnT6XUjK3dU0QJvvBc+Zi5lp72bW3QL3iE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:88:ba:70:cd:d4:26:ab:67:9c:eb:ee:d8:1e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=4b72795795a40e8298f1a01f28dac4b645bb7e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:d0:16:52:4e:b6:5f:70:4e:19:e3:3d:c1:
                    76:db:09:b1:f1:3e:dd:b8:9b:2c:cc:97:ab:61:e1:
                    4e:69:aa:db:fa:b1:2a:fa:a8:c5:de:93:2a:68:88:
                    b0:90:1d:cd:39:31:8d:82:f3:e6:9e:c5:40:8b:57:
                    54:05:9f:0e:54:ac:ed:fb:b0:10:db:c2:55:12:d5:
                    04:60:57:f2:0e:a7:2c:e5:ac:74:e8:19:94:3a:22:
                    73:68:52:86:c6:28:3b:e8:e5:a2:ab:7a:e7:6d:85:
                    61:45:c4:4d:76:fe:e7:d1:39:87:c2:fa:47:13:11:
                    36:51:68:71:6b:fb:55:db:e2:7d:10:7b:b7:bb:9d:
                    4c:f7:eb:17:e0:03:ba:c5:53:40:be:ca:0a:89:9d:
                    75:30:15:79:cb:de:97:73:cb:6e:98:98:08:c7:20:
                    0f:3b:ed:ee:55:5e:bc:3e:a9:a3:40:1c:dd:e1:51:
                    c2:e3:62:cb:8a:2f:99:86:21:3b:d2:b9:b5:5b:7a:
                    86:1a:71:a9:e8:1e:72:b0:c3:52:8e:3c:eb:bc:2b:
                    7d:68:13:48:41:50:26:f7:06:18:b2:57:99:f3:74:
                    30:ca:b9:df:24:1b:46:62:a5:36:59:04:3a:75:c6:
                    ae:47:24:53:bb:62:f6:c9:af:9e:57:a0:a4:4b:01:
                    99:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:72:79:57:95:A4:0E:82:98:F1:A0:1F:28:DA:C4:B6:45:BB:7E:86
            X509v3 Authority Key Identifier:
                keyid:14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:be:54:8c:6e:7e:3b:5b:73:73:e4:e2:d3:46:3b:b1:b0:
         b8:39:7e:fe:c1:ea:e9:51:ee:fd:92:bb:e8:f5:53:92:53:bb:
         c8:1f:1b:93:a6:e3:ce:c5:fc:af:7b:5b:6b:df:fd:d4:4b:f1:
         06:10:5e:20:4f:40:43:cd:30:1c:e6:a7:2e:af:44:35:c8:dd:
         dd:98:cd:be:d4:89:e3:8a:47:71:26:39:99:f1:da:42:8f:07:
         c9:f0:c2:fc:fa:fa:36:47:7e:69:63:53:c4:0d:d5:59:42:ad:
         c0:9d:1b:35:14:0e:89:12:ef:44:55:1a:b7:21:73:e8:ea:4b:
         71:e8:2e:f8:8b:c4:a9:60:b2:2d:96:de:60:ef:78:96:e8:bb:
         ab:d3:b8:c9:5f:bc:c9:d6:33:2a:15:42:dd:35:b8:b6:e8:38:
         a2:09:47:29:c0:a9:2e:5e:26:77:49:a5:a6:b3:0f:2d:cd:2f:
         aa:41:17:6c:2e:ab:1e:06:c2:09:2e:b1:27:df:cd:55:77:7e:
         b9:2c:27:c3:32:20:8f:f0:b0:48:68:ca:7d:1a:a9:ea:5a:36:
         2d:29:95:d7:db:aa:76:c2:cf:f4:63:40:09:cd:2a:55:f2:fc:
         ce:71:ce:c4:c2:61:a0:b4:88:60:b1:b5:cf:f6:d2:5d:0d:4a:
         f6:e9:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----