Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File:                     FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier:          rqJ639380GAHCTzOvtPVjsN/KoHnKlzf/+5ymL2jVmA=
Subject key identifier:   7D:74:73:41:DC:44:3F:76:A9:77:E0:C8:5A:6C:BD:B5:3E:3F:62:1D
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer:       /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial:       01962E999DA470CB14F8DA681809F4A38B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number:          080B
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: U/phm5CocD5RpE6+2ePX7Ms6ydmEr5oyWkJsYKvJS40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9d:a4:70:cb:14:f8:da:68:18:09:f4:a3:8b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=7d747341dc443f76a977e0c85a6cbdb53e3f621d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:d5:26:df:f1:60:df:67:a5:42:7b:aa:4d:
                    f4:08:00:a4:87:08:9f:33:13:19:5f:8c:68:1f:7e:
                    1a:a1:48:d2:aa:73:31:01:37:cf:a3:20:e7:0b:b7:
                    78:57:4f:47:ea:db:e7:1f:41:f2:f3:fe:09:d1:4f:
                    66:1c:c1:e3:73:bc:df:e3:87:22:8b:f2:9a:bb:eb:
                    73:80:e4:b9:af:da:29:80:67:40:63:8c:3c:bb:3f:
                    b7:f7:26:2b:ff:2d:fa:30:5c:90:73:ab:50:07:02:
                    c2:d5:c9:54:da:22:a8:7f:06:c0:c0:43:c3:0f:a0:
                    64:c3:ef:5c:83:6d:3d:e0:17:78:dd:51:98:01:ef:
                    18:63:e7:41:06:55:3f:76:51:64:30:f0:c8:9a:b6:
                    5e:66:63:4e:c3:99:44:35:16:b8:08:98:63:24:83:
                    10:07:c1:81:b9:6d:5c:98:b5:45:f3:50:63:cf:85:
                    a7:a0:5c:64:08:9a:05:c8:32:01:b2:8c:cb:3c:a5:
                    6b:e9:10:06:f9:7f:81:d7:4d:62:fa:d1:50:8d:46:
                    a6:03:7c:a5:c1:d7:1f:4c:76:4b:c3:2e:1d:ba:09:
                    32:cf:ee:1a:8a:57:3a:ef:1b:dd:6b:c8:01:6e:f8:
                    2b:3d:4e:e1:9f:c8:6a:c1:7d:c9:cc:69:32:6c:36:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:74:73:41:DC:44:3F:76:A9:77:E0:C8:5A:6C:BD:B5:3E:3F:62:1D
            X509v3 Authority Key Identifier:
                keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:86:69:e3:d6:ee:ed:f4:4c:c3:cd:b4:02:96:8f:4e:65:9b:
         70:29:38:51:48:dc:2b:57:0b:b6:b5:8b:07:84:4a:b1:c8:76:
         6a:e5:48:8d:0a:7f:0d:4f:42:51:4f:f7:62:7a:40:8e:3c:69:
         8d:df:0d:ac:3c:0d:10:82:30:bc:ec:f5:45:05:e2:ec:6f:77:
         d6:60:9c:c1:64:91:1a:aa:c4:3a:ce:bf:9c:32:60:7f:72:17:
         85:24:35:7f:90:9a:df:7e:d8:a3:d7:59:3e:72:b0:72:60:a0:
         ca:83:6e:bf:2a:8d:d4:61:2b:09:fb:b5:cf:84:55:60:57:b5:
         5f:8b:cd:4a:fd:94:e9:b9:d9:98:54:9e:1d:9d:c6:53:4e:db:
         11:4d:c1:f2:74:23:4a:7d:6e:fa:f9:ad:b5:cf:ad:72:b8:32:
         3f:11:8b:85:c9:87:f5:a4:57:2d:d6:ba:d1:f7:27:2a:5d:9a:
         13:20:80:1f:27:5a:54:44:f6:df:de:1a:87:9b:b0:01:3d:51:
         81:cc:cc:03:c0:e1:11:69:42:41:a2:4a:1e:d9:a1:b2:ee:24:
         df:af:28:aa:70:66:34:9f:c4:7f:1e:67:64:cd:1e:9a:05:63:
         26:59:8e:9a:ff:e6:4a:dc:0a:7a:aa:01:da:fd:df:0e:ec:a4:
         2a:d8:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----