Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File:                     FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier:          f7h9BJWjjElevPQLRkquYyQUvYMH0jLRmX7kyd+7J7w=
Subject key identifier:   CD:32:23:55:55:A0:70:C8:D5:68:6B:CD:8A:4F:4A:AC:68:4D:7A:4D
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer:       /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial:       01962ECF65318E0C6E1CD94B64F2CCD64293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number:          08FC
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: nKw/Sx2SeHyg6hH7QqND7amHHcVSbGwfVVACGEkeZEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:65:31:8e:0c:6e:1c:d9:4b:64:f2:cc:d6:42:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=cd32235555a070c8d5686bcd8a4f4aac684d7a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:fe:3b:90:c8:a4:2e:24:a3:24:6f:7c:84:
                    55:16:d6:5e:39:74:2f:30:9d:c2:12:49:f8:08:4c:
                    69:97:7e:58:02:ba:fc:8a:5c:53:f6:69:00:70:da:
                    69:af:b0:66:f0:5c:49:56:44:ad:a7:8e:75:89:d3:
                    ee:5c:83:42:02:59:ae:a4:d0:62:e4:10:43:22:a0:
                    4a:64:50:0d:0d:4f:d5:b0:4a:ea:89:1f:af:e4:ad:
                    4c:1f:78:c2:10:45:c3:b3:e3:cd:f5:d8:e5:e1:08:
                    01:4b:67:d9:fe:06:d7:d7:31:dd:da:21:82:2c:ff:
                    3d:d7:03:a0:99:4c:bd:34:4d:a5:98:c5:23:f6:51:
                    db:b0:23:48:39:52:fd:23:91:fd:db:1e:4a:74:a1:
                    67:3a:3d:d7:b3:6b:09:5b:24:3d:83:39:5d:30:29:
                    8e:71:94:f2:b2:38:5c:fa:82:64:88:62:5b:79:fa:
                    4f:3d:5b:69:17:89:d7:61:21:5f:d2:2d:b7:e9:37:
                    b5:a7:04:3e:72:60:c0:b5:b1:72:22:d1:52:bc:76:
                    8f:a1:81:56:7e:3c:9b:72:b5:81:ea:1d:eb:78:70:
                    77:12:11:5b:0f:d9:9a:4a:ce:b5:a5:77:05:77:cd:
                    e3:28:cb:ea:68:c2:a2:73:59:bb:f5:99:01:79:b6:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:23:55:55:A0:70:C8:D5:68:6B:CD:8A:4F:4A:AC:68:4D:7A:4D
            X509v3 Authority Key Identifier:
                keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:db:6c:42:60:41:3c:b3:38:4a:e1:17:9e:47:26:ab:ad:08:
         67:a8:63:8c:59:b2:2a:12:dd:e2:37:b4:4e:a4:f7:27:5e:fe:
         0a:77:d4:83:7a:e4:3d:f4:ac:2c:ed:82:90:64:94:d8:d6:da:
         16:1a:4c:96:32:17:b7:5b:60:e9:e4:f4:b8:d2:d2:9d:43:fe:
         62:fd:91:03:04:1b:b2:d5:78:5d:11:55:07:ea:14:14:2a:65:
         77:c8:f8:ff:c5:f0:cc:a0:7f:5c:d8:f8:81:b8:6d:cd:77:6f:
         57:b3:44:80:03:ec:83:ad:43:75:46:b8:b3:a5:fd:bb:2d:d7:
         23:94:9f:de:e2:76:1f:fd:09:2d:a1:20:f2:f3:20:ef:28:57:
         db:90:37:e4:0a:35:c6:52:a5:ed:b4:5d:62:5e:47:fa:cd:c4:
         6b:c5:76:f8:64:e9:51:b5:18:57:11:13:2d:0e:76:0b:d2:11:
         80:7e:66:56:ea:ba:a7:9b:60:06:92:d2:66:28:4a:e6:ed:7d:
         75:00:7c:4c:f7:36:39:91:06:6e:63:dd:43:93:2a:5b:49:4a:
         3c:57:ac:44:36:b1:29:e0:19:bb:91:e5:f8:0f:88:f7:ae:65:
         ae:33:d5:83:7e:8c:01:49:0b:30:2a:5f:5a:b7:1f:9b:53:85:
         02:3b:74:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----