Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
File:                     FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json)
Hash identifier:          La3BYGIc/XDHE3V4/e4CNoZj/aebY0l4jjTSHJbuoIE=
Subject key identifier:   50:86:EB:B5:1B:74:32:0F:8C:5B:50:F0:BB:38:80:63:C0:CB:E4:5E
Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
Certificate issuer:       /CN=17244ea944fe98634c1363038ee31d5435699261
Certificate serial:       01962FAB5D70AA7980065A99E9D9E0D93A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
Manifest number:          DE
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: YofSMCCOiz/GZCOSsTMPt4i3SgHJBuAKVW7KpKuTf/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5d:70:aa:79:80:06:5a:99:e9:d9:e0:d9:3a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17244ea944fe98634c1363038ee31d5435699261
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=5086ebb51b74320f8c5b50f0bb388063c0cbe45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:ca:bf:15:09:3d:4f:bb:7d:fb:e7:c1:45:
                    6f:a0:9a:01:77:28:99:3b:16:57:76:f8:d3:35:df:
                    9f:95:2f:60:dd:86:44:b6:57:b7:d2:94:5b:af:31:
                    7e:98:94:7b:7a:da:61:88:2d:3c:93:85:1b:78:e3:
                    b0:1f:b5:ad:82:8e:92:7d:26:91:78:5c:dd:d5:d0:
                    33:47:f4:7d:b7:fa:91:e3:9c:8b:c6:2f:fb:0f:45:
                    6d:08:2e:9b:c9:b0:e9:b8:74:c0:42:83:c9:b3:0a:
                    47:d0:b2:dc:55:b8:ae:9d:da:7f:3c:70:28:47:1a:
                    40:36:98:c3:fb:0b:6e:86:c5:4d:ac:88:ee:ae:bf:
                    21:f3:4d:35:0f:1a:d3:d2:d1:fe:fb:46:8e:38:82:
                    fd:20:e4:9c:94:6a:fd:28:99:d2:22:62:cb:f7:33:
                    17:ce:7f:a9:f2:d5:5e:fd:17:54:46:d5:43:cc:20:
                    37:3d:4a:3b:06:47:f6:d7:18:a6:05:79:f2:de:41:
                    15:d8:45:88:7b:c5:98:bf:7f:72:94:a5:b2:79:30:
                    27:92:b0:e4:c9:6f:3e:ce:bb:e5:07:75:21:67:3d:
                    96:c3:08:82:ab:4a:bc:77:4c:1a:8a:37:bb:5b:7d:
                    a5:8c:6f:71:aa:26:12:76:78:50:f3:58:f7:21:ed:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:86:EB:B5:1B:74:32:0F:8C:5B:50:F0:BB:38:80:63:C0:CB:E4:5E
            X509v3 Authority Key Identifier:
                keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c8:dd:94:2e:63:7f:22:dd:ff:23:21:cd:0a:54:91:56:4f:
         88:5f:e7:26:bd:2e:d0:d6:00:ab:c1:70:dd:b3:0e:6f:48:4c:
         7c:01:5d:d2:37:ce:db:e9:de:e1:6c:b1:93:70:fd:bb:55:bc:
         97:d6:10:33:c6:d5:de:86:b4:1a:ae:18:9b:92:15:44:fd:6a:
         43:02:54:6e:ea:4f:4d:6b:49:44:44:ce:d2:3b:c1:e5:49:eb:
         38:71:09:61:e9:2d:8e:b5:9b:3e:9f:e1:ab:35:97:4a:61:8a:
         e0:e9:f8:c9:12:04:8c:6f:62:56:a4:86:a1:fc:59:ea:d1:60:
         62:c5:d3:a2:e9:e6:72:03:b2:54:fc:4a:1e:03:b9:f9:c7:68:
         9e:78:7e:34:ba:43:57:0c:3d:08:28:da:d0:cc:c1:0d:78:10:
         cc:82:10:e9:a6:ca:66:b8:a4:f0:6b:66:1f:99:b2:9a:92:3d:
         fd:c1:26:d3:9b:36:62:aa:fb:bc:6d:5e:a9:bb:29:31:94:23:
         50:0a:42:66:28:39:5d:05:18:8f:9a:47:6f:12:28:dc:ab:cf:
         85:b0:2f:5b:fd:a5:bc:b7:c7:61:fb:65:48:7c:f9:48:39:d1:
         f0:0a:e8:2e:4e:75:62:f0:3c:cb:40:c3:96:cf:80:e1:00:7e:
         a1:73:06:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----