Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          esnLj58DMQH+3m7qGM/98ey3vCHNC9t+g3wS6oAArp8=
Subject key identifier:   E3:01:36:A0:41:AD:BD:53:19:18:83:E0:91:BA:88:07:B5:B2:F0:DC
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       01962FAB8DE319F05F067273771B908E44F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: A5LCvzmrhUO+41HsTxQButdKTKOHs9cpCRZhkOlskPo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8d:e3:19:f0:5f:06:72:73:77:1b:90:8e:44:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=e30136a041adbd53191883e091ba8807b5b2f0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:52:01:a3:56:04:58:3b:59:a3:b5:b5:1a:
                    81:db:7c:f1:85:2f:45:29:a5:33:72:50:f2:7e:09:
                    a0:80:70:cc:87:44:d6:3a:6e:4a:9a:29:92:cd:fd:
                    22:05:ba:5f:33:a0:8f:99:e6:83:46:75:e0:2b:c3:
                    68:a4:63:f0:b4:1d:1f:b0:71:a9:ed:77:bf:ee:87:
                    28:b3:8d:03:8f:24:95:ce:74:22:f2:e0:80:88:a7:
                    4c:2a:2b:0e:eb:c7:b7:b0:52:50:f0:57:b3:19:e9:
                    76:77:44:dd:9e:91:38:07:20:a7:e6:24:a8:ee:21:
                    31:3d:38:25:9e:05:7e:f2:62:3d:97:c2:43:31:f5:
                    ae:cd:5d:71:50:1f:1e:1f:01:f5:d7:58:93:76:74:
                    a0:ff:8c:a8:d3:07:e5:4e:82:5d:a4:c6:78:8c:e0:
                    51:ee:a8:5b:13:04:04:d0:42:b1:72:4c:54:f3:0a:
                    f9:45:9a:cd:3b:92:6c:0a:d6:ae:0e:d3:fb:e8:d5:
                    57:55:b6:e0:7d:62:55:b8:59:80:83:84:5b:9c:76:
                    48:2f:28:23:40:ab:de:6e:68:e9:ab:df:b9:16:13:
                    51:5b:81:b4:51:66:06:69:b6:c1:fb:05:e9:b6:3b:
                    b5:9f:be:e1:b8:44:e9:d6:25:fb:42:8f:a7:74:f0:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:01:36:A0:41:AD:BD:53:19:18:83:E0:91:BA:88:07:B5:B2:F0:DC
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ad:d5:be:c4:d4:b0:8c:fe:36:4a:ba:ac:9c:48:c3:90:bb:
         29:51:48:43:e4:4c:08:d1:31:c3:f3:dd:b4:da:ce:14:96:9b:
         0c:4e:6a:22:5d:73:9f:ce:eb:56:f3:5c:c7:dc:32:89:17:74:
         c1:5f:27:9d:66:84:8c:52:cc:0b:f9:ed:51:0a:38:bc:a1:65:
         ce:5a:5d:3e:3d:70:e2:1e:97:bc:46:a6:73:87:02:da:67:39:
         3e:4e:49:42:4d:74:8c:f3:1e:e6:8e:69:c3:89:d1:b7:c5:b2:
         38:3c:ed:56:1a:eb:28:39:e6:ae:0b:a4:6f:23:fb:1d:bc:fe:
         4f:34:75:c6:10:eb:7b:08:e7:f5:be:39:10:74:1d:d2:33:cf:
         3a:7f:18:ff:68:66:0c:00:5d:c1:17:52:1e:13:33:22:b1:e1:
         56:41:b8:4c:a9:5d:9f:72:06:42:97:08:8a:66:fe:b4:48:c3:
         15:79:43:7f:4f:07:5c:69:01:db:51:5b:d8:98:eb:3d:8d:bc:
         c4:18:d3:41:64:90:14:dd:9f:19:3f:e5:21:1a:39:03:d2:4b:
         68:2d:bf:47:73:70:7c:38:ea:d2:13:95:be:a4:a3:7e:d3:86:
         e4:35:44:b3:e9:7c:34:19:45:74:d1:2e:61:52:2c:b3:8a:5f:
         b2:cb:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----