Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File:                     _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier:          aL/i9vHkDIVEKhvG9O760UKsBguRvdv6ctwLTBkDkIw=
Subject key identifier:   2A:74:56:EF:95:84:E9:3E:59:52:04:95:F4:46:43:88:60:F3:F6:CE
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer:       /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial:       01962DF3ADCAFA2B822D51332CFB50274840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: qVavBPBefV3Kju2kgRj5N/ttIb/GPY+Qz7Dkwe+uXm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ad:ca:fa:2b:82:2d:51:33:2c:fb:50:27:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=2a7456ef9584e93e59520495f446438860f3f6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:3a:5a:a5:e6:fc:02:05:57:bf:10:4d:11:
                    bb:51:f5:ea:b4:f3:4b:6b:d0:19:14:ba:58:ce:3c:
                    0c:44:56:04:ce:8c:01:a6:cd:66:2d:50:b3:bd:d1:
                    6b:26:88:d9:8c:11:89:09:13:89:3b:ab:b1:8c:7e:
                    83:7c:d0:f0:5f:0b:90:f7:e1:04:6c:6d:d7:82:90:
                    b2:1a:73:e5:84:0f:81:4e:a6:80:48:c1:04:f2:36:
                    7f:b6:b2:dc:b1:d1:f4:51:71:03:ee:e7:7d:e4:49:
                    e9:73:bd:98:84:55:29:5a:8b:a3:15:39:80:74:d1:
                    d4:a7:18:1a:aa:f3:49:18:2d:20:71:21:a6:37:28:
                    a5:f9:11:22:b7:45:39:52:88:c1:5e:dd:24:7d:61:
                    f7:bf:fb:0c:70:39:a7:9f:b1:f5:59:5b:64:aa:32:
                    7d:3f:20:91:b7:64:6c:1d:30:bf:f4:77:d0:c0:9b:
                    10:a5:ec:04:ab:0f:64:89:d5:66:9f:77:01:b8:ac:
                    7c:0a:4b:f9:39:90:ba:69:84:2b:a7:7f:b2:42:5d:
                    a9:f1:1a:49:79:d3:7b:30:62:2a:48:d9:f9:1d:89:
                    dd:cf:e7:e2:08:a3:47:45:bf:4d:eb:c5:3c:66:18:
                    4c:7f:98:a3:fc:d8:af:2e:74:44:12:31:cc:38:07:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:74:56:EF:95:84:E9:3E:59:52:04:95:F4:46:43:88:60:F3:F6:CE
            X509v3 Authority Key Identifier:
                keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:84:d1:3c:17:81:18:d6:20:aa:af:6b:16:29:95:c1:be:33:
         ed:32:d5:36:b0:7f:1d:f0:5f:5f:f5:ef:7d:77:27:be:9c:26:
         e3:74:27:41:44:b3:37:2e:5b:38:0d:41:c6:17:82:ea:ae:c7:
         c7:0b:21:3a:24:b5:e3:68:51:b4:dd:a1:19:b4:9e:0a:b2:2a:
         9b:ad:0e:95:73:02:b9:ea:8b:9f:ca:f4:8f:bf:18:1b:ac:52:
         26:06:84:da:97:e9:17:af:04:f2:88:af:37:6c:a2:75:1e:1d:
         a6:dd:c5:18:b4:68:56:df:96:66:1b:75:30:cb:c3:2d:57:14:
         d8:64:0c:af:00:d3:fa:c5:7e:76:1d:84:ef:3e:b1:68:11:d0:
         f8:aa:45:df:90:9a:87:39:78:5e:ec:f5:28:2a:6c:21:e6:f6:
         de:1e:12:17:5a:7a:36:1a:31:72:fb:37:1d:24:e3:1e:31:94:
         d6:4d:b2:e9:31:c9:df:2d:f9:ee:59:24:2a:aa:37:37:6e:e7:
         2c:28:d5:e9:f4:9f:d1:0c:e1:18:30:70:a3:40:d4:d6:ac:12:
         d4:eb:29:7f:c5:7c:9a:af:eb:3d:69:66:5b:df:bd:3e:2d:83:
         ab:73:a4:55:dd:c5:95:c9:54:11:23:5d:cf:84:e3:f5:49:c0:
         16:72:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----