Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
File:                     FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json)
Hash identifier:          Fza9K+mZqJJc6gjhr17zWkYvLeBVLeXUsxwg0ogtqlE=
Subject key identifier:   6C:A3:41:3A:C5:3E:45:8C:B5:D4:52:1A:96:F5:AF:A8:8F:4B:07:DC
Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Certificate issuer:       /CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Certificate serial:       01962F7493443E5F9C2968433A5ED7537617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
Manifest number:          0299
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: RIzSjW9k3ALib/7LoclaOJza4gqGdaP5T9VVsWvE2VM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:93:44:3e:5f:9c:29:68:43:3a:5e:d7:53:76:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=6ca3413ac53e458cb5d4521a96f5afa88f4b07dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:a3:21:9e:1b:2f:6a:ff:f8:42:c0:8c:5c:
                    a2:f0:f6:22:49:fe:62:8a:2a:43:a3:5f:6c:00:09:
                    a0:dd:62:82:99:bc:9b:d4:0e:4c:bd:d0:90:99:1a:
                    73:c5:c0:85:2a:83:f0:06:71:c8:f4:f6:4e:67:52:
                    46:80:e8:e6:9b:3e:3e:e3:57:a8:af:62:d4:b0:b6:
                    45:17:fa:f4:1e:28:1a:dc:cc:6f:38:3f:71:81:f0:
                    0e:4f:3d:7a:a7:b5:2b:5e:24:94:7b:72:cd:b9:c7:
                    c1:50:7a:52:99:48:97:57:f0:1d:18:7f:ab:76:3e:
                    9d:a8:a3:1a:cc:41:dd:96:e2:49:e4:43:76:f5:d5:
                    50:9c:c7:c0:ad:72:1c:68:f8:24:c9:d2:38:88:eb:
                    9b:8b:39:66:48:63:d4:51:92:0b:c9:91:02:ca:6d:
                    b4:4f:1e:0b:78:fc:5a:f3:2f:6c:3a:33:c5:e0:32:
                    a3:07:28:28:c5:ae:fd:9d:db:d1:7c:1d:92:38:c5:
                    99:a6:d8:cd:8d:22:4a:b9:92:50:ed:b7:df:b2:da:
                    97:48:5c:b8:39:99:05:23:1f:09:19:15:41:e8:00:
                    0a:c7:85:12:b3:fa:1d:8f:eb:5e:e6:6f:86:88:f1:
                    41:0c:ca:7f:3e:17:2f:a7:09:36:24:90:57:89:ff:
                    a7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A3:41:3A:C5:3E:45:8C:B5:D4:52:1A:96:F5:AF:A8:8F:4B:07:DC
            X509v3 Authority Key Identifier:
                keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:13:2d:36:51:19:62:d0:1e:37:13:6a:67:7f:34:8c:94:35:
         2e:24:1a:f8:ee:5c:be:5f:14:da:72:83:54:e3:6c:66:09:4b:
         51:09:33:17:a4:94:ed:dd:ce:5b:38:ec:99:bf:2c:06:44:d4:
         0a:96:b4:ef:a6:6c:82:ed:47:2d:a3:f6:97:67:3d:cd:8d:a7:
         e3:27:68:a6:93:1e:74:16:ef:db:60:1a:7f:65:46:6f:2d:67:
         ea:53:2d:97:1c:d2:36:f8:8d:06:a2:01:84:1c:df:ee:70:b0:
         25:a6:1f:d4:cd:4d:86:3a:e3:ea:48:73:01:a5:3d:07:b5:8d:
         d3:ac:1b:34:97:a6:94:49:89:4b:c3:f8:01:8c:95:e5:54:11:
         14:9b:2c:2a:16:1e:74:73:38:35:6b:0c:f6:51:62:0e:a2:2b:
         11:4f:e5:cf:23:cb:8c:63:c8:e1:32:59:ad:4a:1c:d7:37:5f:
         af:91:fa:7e:6a:ff:25:14:dd:22:34:e7:fa:bb:42:10:31:62:
         f8:b5:bc:0c:9a:81:11:ef:93:91:55:94:3d:b7:f3:38:d0:74:
         49:55:c6:c3:6d:d1:5c:64:ca:1d:eb:97:f6:2a:8c:fd:d2:9c:
         27:a4:70:dd:53:7b:ba:dc:6a:1f:46:87:35:ac:bf:80:07:c6:
         d9:69:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----