Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File:                     MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier:          cYrTJzgKSLQbeUEglXSZTCCbo3Y1V6yg/NTroPctA5Y=
Subject key identifier:   FA:B0:0A:51:74:C4:C1:6E:31:04:AC:C4:4F:AF:92:E6:F0:81:64:37
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer:       /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial:       01962F744B8BF47D73722EA349710F217D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number:          0BFC
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: UZGQ2hw2pUPz5/LO2BCVZrfko2Rr1bECt4pAAdewOec=)
                          2: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (hash: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4b:8b:f4:7d:73:72:2e:a3:49:71:0f:21:7d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=fab00a5174c4c16e3104acc44faf92e6f0816437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:59:2e:47:a5:b0:61:35:1f:88:15:bc:bc:
                    ca:13:00:04:d4:d6:d5:4e:4f:41:ed:02:92:fb:9e:
                    b2:6d:12:3d:81:a7:1c:74:9d:73:56:64:f0:e4:5d:
                    ec:14:8c:7c:f2:94:1f:4f:7d:42:4b:6e:45:53:48:
                    5d:37:3c:92:18:58:ae:41:96:2d:9e:1a:07:b6:85:
                    62:dd:d5:8e:c7:64:04:1b:af:00:17:fb:a8:50:71:
                    f2:0e:df:48:fc:80:ba:97:f6:32:09:cc:d6:56:07:
                    6e:9f:4f:d1:7f:a3:3f:a4:c3:d3:fc:79:61:1f:72:
                    eb:f0:e8:fa:1d:cf:85:a5:39:10:ec:44:c2:74:84:
                    59:63:4c:6d:95:2c:03:2c:cf:ee:08:ee:92:60:ff:
                    59:04:f1:05:9d:6e:a3:a8:a9:71:2b:89:2c:60:8a:
                    2f:60:79:f6:fd:04:a4:a5:2d:7f:d4:ac:6e:2f:51:
                    19:14:cc:27:16:2d:90:13:e8:61:73:30:34:87:8a:
                    b7:51:c0:c1:c9:ae:33:9c:f0:c6:ea:75:f7:c0:d6:
                    68:69:42:6b:3c:09:5f:4e:d2:eb:65:dc:25:b9:12:
                    75:ff:44:da:4d:a8:ef:c4:5e:ea:86:de:bf:a2:66:
                    82:bd:83:14:20:13:01:f7:db:a7:4a:6b:90:ec:33:
                    65:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B0:0A:51:74:C4:C1:6E:31:04:AC:C4:4F:AF:92:E6:F0:81:64:37
            X509v3 Authority Key Identifier:
                keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:51:de:ac:59:e1:50:be:8c:e9:e4:34:05:1f:fc:26:71:
         32:72:a8:97:b8:19:7d:96:dc:36:b0:9e:56:55:d4:fd:88:b0:
         24:b2:df:96:f9:90:3c:6d:cc:55:28:5a:44:e0:6c:d8:47:62:
         9a:05:d5:27:fe:24:f4:49:d3:3d:08:3f:5d:79:42:dc:ce:23:
         86:78:83:99:dc:c3:66:f5:c2:a7:3b:38:49:fc:59:f8:25:01:
         07:a8:7b:5a:db:25:5f:00:3a:74:39:7d:b8:4f:c1:7e:78:6a:
         c5:09:47:4e:54:e1:77:22:59:ee:67:ac:09:65:83:78:9c:7e:
         c0:e0:22:46:f9:87:f4:73:d4:e3:e1:ea:f9:2c:d6:d9:9c:f9:
         af:05:e9:24:11:90:36:b7:3b:fe:ff:5d:ba:64:6b:56:36:29:
         75:73:47:d1:a0:43:b1:9c:9e:53:82:a6:48:2a:fa:70:33:23:
         f4:c2:1d:5b:33:28:2f:64:0c:f1:26:3a:f5:b5:05:a9:c3:92:
         30:e9:08:b1:14:a3:5e:50:ff:c7:ec:db:ef:40:f7:d6:43:7b:
         f6:ec:eb:c0:4a:a0:5f:6a:51:a6:d1:f2:2d:b4:5e:c6:13:1b:
         70:a0:8f:2f:11:39:5c:e6:7a:ab:fa:08:29:0e:08:94:01:fa:
         9a:6f:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----