Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.mft
File:                     ft5NBeOAZYGxt49yG1uAzEkCvZI.mft (raw, json)
Hash identifier:          +HrvhwRrFW07tqQSVmq0dv8Cr5wYNJ1+Kpcycc+ldco=
Subject key identifier:   8C:CF:97:A0:90:F4:CD:9B:C1:19:60:31:AA:15:46:1F:A0:5E:68:8F
Authority key identifier: 7E:DE:4D:05:E3:80:65:81:B1:B7:8F:72:1B:5B:80:CC:49:02:BD:92
Certificate issuer:       /CN=7ede4d05e3806581b1b78f721b5b80cc4902bd92
Certificate serial:       01962E993B13EC32C154153F0C76495C5D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ft5NBeOAZYGxt49yG1uAzEkCvZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.mft
Manifest number:          0480
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: ft5NBeOAZYGxt49yG1uAzEkCvZI.crl (hash: o9iPtfM8fXrDV64BXIgznewxYpqc3IP0nDZMNR74zRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3b:13:ec:32:c1:54:15:3f:0c:76:49:5c:5d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede4d05e3806581b1b78f721b5b80cc4902bd92
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=8ccf97a090f4cd9bc1196031aa15461fa05e688f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:e9:fd:0c:5c:2d:e1:81:1b:cc:32:0c:4a:
                    30:43:c1:1d:0e:77:d8:97:91:ec:a2:06:1f:c4:b8:
                    f6:7b:8a:7f:ca:c6:a3:9f:90:5c:54:84:13:db:f6:
                    21:61:fe:7e:1c:df:61:c7:ac:88:5d:7f:ff:d3:8c:
                    cd:a3:32:b8:f6:94:c5:bb:04:0f:4e:ab:bb:fb:16:
                    f7:69:21:ec:58:b0:95:85:f6:c7:87:ec:fd:e9:74:
                    5f:50:35:df:df:cd:84:ee:c1:95:46:f0:b0:7e:98:
                    bb:a2:4f:f0:56:f7:1d:51:ea:0a:10:34:2b:16:af:
                    f3:79:b5:b2:fe:58:ac:c5:50:55:94:2b:87:91:7b:
                    86:7a:52:68:e1:67:30:03:38:72:ff:01:f6:d0:1f:
                    3a:39:a3:a6:50:ea:76:97:93:4a:78:25:76:f8:9b:
                    80:c5:e4:b2:5e:36:ab:6d:ef:5b:e4:31:8c:3a:44:
                    05:28:9c:67:64:f7:15:c1:64:b9:9f:d7:bd:68:73:
                    ad:85:1d:40:74:e8:fb:ee:44:66:1c:dc:0a:a4:4d:
                    ce:62:b1:0c:22:ee:2a:4a:33:6c:e3:33:52:ce:a1:
                    37:d0:d6:7a:4a:7b:48:ce:f6:8f:db:e3:6a:c3:74:
                    0d:af:d2:7f:9e:fb:2a:84:3c:c6:6a:e1:2c:17:32:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CF:97:A0:90:F4:CD:9B:C1:19:60:31:AA:15:46:1F:A0:5E:68:8F
            X509v3 Authority Key Identifier:
                keyid:7E:DE:4D:05:E3:80:65:81:B1:B7:8F:72:1B:5B:80:CC:49:02:BD:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ft5NBeOAZYGxt49yG1uAzEkCvZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e7:30:4b:43:78:6d:0f:92:92:93:93:a9:48:aa:21:e5:47:
         31:58:6a:30:56:99:77:1f:d0:0e:a0:45:48:79:26:ab:2b:50:
         08:79:72:e3:da:3d:52:61:d3:b1:9d:6d:98:93:cd:bb:b6:17:
         21:45:08:e0:2a:4b:31:1e:65:10:09:e6:07:c5:ca:86:61:03:
         d4:89:82:26:55:6d:ac:e1:c0:64:0f:86:59:6c:0e:93:bb:1c:
         52:77:c8:65:35:c9:8f:3b:2a:1e:03:14:75:0d:cd:22:56:ec:
         d2:02:43:3e:f8:37:bd:89:3d:82:be:d3:39:51:b3:59:3f:93:
         99:ac:f4:48:5a:1a:42:40:0c:9a:f2:4a:1e:e1:27:32:75:d5:
         64:e1:94:c9:3a:3b:df:0b:c6:e8:07:4f:bc:ea:39:70:b9:83:
         8c:70:a4:a1:2d:56:09:e8:26:d6:45:65:29:87:82:05:78:ed:
         73:40:cc:11:de:dd:0b:cb:08:6a:72:3b:1e:d2:36:75:e5:2c:
         ae:b1:cd:ba:b4:23:6f:15:43:1c:24:38:66:ad:f4:e1:75:64:
         57:e1:e3:7c:98:98:ba:e7:ff:d1:93:52:bf:ec:a9:30:5e:36:
         bf:b2:87:00:73:ee:3b:fb:c0:9a:95:13:01:af:a1:c2:b5:a2:
         81:ba:1d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----