Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File:                     FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier:          0PyOSQUrFgHt06yfOZEP2i1tc5O0ddM6d7cAUaahbbk=
Subject key identifier:   2A:B8:D8:55:76:9B:D0:2B:0E:51:29:32:DC:57:50:EE:EA:80:B3:B4
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer:       /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial:       01962DF3E2D07CCC66EFA6FC78FA6E567549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number:          06DF
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: W6q2wk/QeoPjC3qOFV8UOGj8HWIhUtXiZ8uSTh/6Xpk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e2:d0:7c:cc:66:ef:a6:fc:78:fa:6e:56:75:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=2ab8d855769bd02b0e512932dc5750eeea80b3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ff:5e:b9:c2:74:d5:da:30:a1:3e:a5:af:cc:
                    88:a7:af:ab:06:e1:89:7a:a4:35:0a:2f:f2:f3:b4:
                    d4:38:22:71:39:d9:86:79:32:11:b8:8e:84:f6:8a:
                    f1:ba:a4:36:a8:0b:d0:cb:39:31:8e:2d:aa:ef:fb:
                    70:21:d2:4c:36:16:aa:e3:84:bc:82:bf:c1:a4:d9:
                    c4:76:92:1c:14:74:99:bc:96:46:cc:57:5e:c7:9f:
                    ed:62:09:21:15:f5:90:b6:20:9a:11:82:9b:85:28:
                    71:59:24:df:48:a4:27:8d:c4:9b:4d:85:41:c7:81:
                    fb:84:37:c5:c1:60:57:ac:eb:ef:2a:0c:6b:38:3c:
                    ac:e7:16:c3:70:ac:d3:cd:e1:dc:b6:1e:39:26:cd:
                    8c:20:82:b5:ea:ac:49:a0:90:3d:cf:58:95:bb:c6:
                    77:18:4a:9c:ab:7b:82:d0:23:13:00:09:da:7b:5b:
                    5a:09:0e:71:35:b1:26:8b:97:36:f0:b3:49:1a:17:
                    43:69:2f:b0:6e:07:9d:60:d6:1c:00:c8:f4:7d:09:
                    da:75:4a:85:ad:15:11:33:c4:9a:cd:46:47:ff:6a:
                    c3:67:9b:8c:99:51:1f:79:b8:22:df:79:22:14:db:
                    15:d1:ea:8b:db:1e:66:32:c4:ca:b5:2d:27:fd:06:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B8:D8:55:76:9B:D0:2B:0E:51:29:32:DC:57:50:EE:EA:80:B3:B4
            X509v3 Authority Key Identifier:
                keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:ce:98:58:45:94:8e:9b:41:53:6d:a3:03:a1:10:75:e1:
         7b:93:66:e2:54:3e:ae:72:46:a7:fd:10:32:11:1e:1e:ad:09:
         65:f7:26:a3:bb:23:c3:69:08:00:6c:61:bc:72:63:82:a1:66:
         17:e1:fa:0c:d4:f2:9c:98:c8:fd:fa:69:7a:83:89:cb:5d:6c:
         57:34:f5:41:16:bd:23:b5:9e:dd:5b:8b:06:28:61:dc:6b:5e:
         5d:f8:92:d8:5b:f2:25:92:17:51:5c:e9:d9:bd:8e:96:ee:36:
         05:73:70:ef:f8:30:ef:ab:01:80:11:d5:42:95:8a:bc:86:fc:
         2c:e3:00:91:6a:49:fc:07:04:c0:cc:48:ca:b1:a9:85:f6:d3:
         6b:e8:ac:0b:5a:82:78:6b:e5:77:28:bf:1c:e4:d4:de:4f:5e:
         71:29:db:a0:6c:a6:f4:17:46:7a:d5:ff:52:c4:97:a2:65:a9:
         19:72:6a:4f:41:d7:cf:8b:43:8d:f2:46:71:a3:26:6f:91:19:
         b5:48:96:2e:8d:be:13:26:c9:6a:4b:2d:ba:62:43:d0:c1:26:
         d5:d8:b4:05:6b:d7:b5:1b:4c:09:6f:96:e3:e5:8f:e2:20:a5:
         3a:85:60:4d:d4:26:af:30:b1:83:cf:01:ac:dd:9d:eb:eb:40:
         46:ac:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----