Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b30d66-8fb0-4e9d-98ec-c2d8a59b00d3/1/FLklHG89i7aaegPOrN0q58LIzjc.mft
File:                     FLklHG89i7aaegPOrN0q58LIzjc.mft (raw, json)
Hash identifier:          JUzetNKoGSI+Ku6/I+Nk9H3A4mTl9yR5H/A2Z13wo8g=
Subject key identifier:   A4:85:3C:39:98:06:7E:C1:FE:84:A9:59:20:5C:F5:6A:DF:7D:61:58
Authority key identifier: 14:B9:25:1C:6F:3D:8B:B6:9A:7A:03:CE:AC:DD:2A:E7:C2:C8:CE:37
Certificate issuer:       /CN=14b9251c6f3d8bb69a7a03ceacdd2ae7c2c8ce37
Certificate serial:       01962E618AC45E5B8A9280325398A56FE606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FLklHG89i7aaegPOrN0q58LIzjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b30d66-8fb0-4e9d-98ec-c2d8a59b00d3/1/FLklHG89i7aaegPOrN0q58LIzjc.mft
Manifest number:          54
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: FLklHG89i7aaegPOrN0q58LIzjc.crl (hash: mx6ZgwOJu6uHayBHX3vfuVGsDebKf8csV27ffieVh0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8a:c4:5e:5b:8a:92:80:32:53:98:a5:6f:e6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14b9251c6f3d8bb69a7a03ceacdd2ae7c2c8ce37
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=a4853c3998067ec1fe84a959205cf56adf7d6158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:53:b4:c0:23:7b:db:a4:18:0b:29:35:95:
                    a8:97:1e:bf:fc:dc:dc:cb:ae:90:31:ff:1e:5b:5c:
                    0f:df:65:37:df:8d:e3:be:7a:15:5f:90:2e:a1:e6:
                    bf:14:9b:34:4a:72:3e:8c:1e:b0:e5:53:69:3d:a6:
                    fa:34:3f:58:de:b6:a2:64:1b:bd:19:96:c3:d2:6a:
                    4b:45:18:40:f1:c3:87:75:72:76:d2:bd:d6:e3:50:
                    10:c2:30:1f:24:54:bf:f7:be:18:bd:f2:6d:26:83:
                    36:a0:0a:ee:02:12:d2:4c:5c:18:be:2e:fe:6d:c5:
                    93:35:88:42:78:38:52:24:85:60:69:fa:b5:48:86:
                    3f:12:46:86:89:e6:76:ab:2c:4a:45:26:9d:8b:3b:
                    5f:5b:e9:c2:fb:37:20:34:b7:6c:98:54:7d:35:fd:
                    f0:9f:84:47:64:d8:c8:41:80:32:96:8d:22:17:f3:
                    89:d7:ae:a2:92:e8:0a:83:5f:5c:9d:5c:2a:ba:04:
                    82:81:2b:17:88:9a:57:f0:db:e5:08:79:41:20:25:
                    f7:3d:1d:df:9d:98:61:b5:0f:3c:8c:0b:aa:ca:d8:
                    f6:dd:81:07:ee:75:de:e4:e9:66:f7:6d:22:67:2b:
                    21:cc:b6:93:e4:25:d4:61:09:15:c6:90:f1:2a:39:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:85:3C:39:98:06:7E:C1:FE:84:A9:59:20:5C:F5:6A:DF:7D:61:58
            X509v3 Authority Key Identifier:
                keyid:14:B9:25:1C:6F:3D:8B:B6:9A:7A:03:CE:AC:DD:2A:E7:C2:C8:CE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLklHG89i7aaegPOrN0q58LIzjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b30d66-8fb0-4e9d-98ec-c2d8a59b00d3/1/FLklHG89i7aaegPOrN0q58LIzjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b30d66-8fb0-4e9d-98ec-c2d8a59b00d3/1/FLklHG89i7aaegPOrN0q58LIzjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ac:1e:37:1f:65:d1:2f:ab:e4:af:83:8b:76:c3:be:a4:f0:
         52:6c:79:a8:51:76:a4:f6:6c:56:a7:5e:f0:23:56:73:7b:b3:
         40:f4:90:e0:76:71:84:89:de:b4:a6:41:02:4c:77:5a:cd:5c:
         d2:40:95:2f:81:c7:05:c8:b9:c1:4d:10:2d:5f:60:cf:74:50:
         a4:76:bd:6f:83:ba:a1:9a:e1:ff:d5:35:ba:f1:55:a3:1d:57:
         70:1a:98:a4:13:ce:83:4f:7f:d9:ad:52:7e:c1:a6:ac:07:7e:
         3c:bd:91:d0:f7:14:b3:21:07:db:79:a8:18:2d:fc:b7:5f:77:
         19:bb:27:48:d3:3a:d8:e4:d7:75:1a:4b:0a:0b:ef:fe:ae:55:
         8e:80:6b:22:8f:20:0a:f9:c7:98:2d:d4:7a:30:3c:6f:b9:8e:
         7b:e9:0d:ba:b4:56:39:b9:20:d7:d1:56:1a:dd:f2:78:46:75:
         6a:12:07:51:32:d1:6f:97:f1:9f:1d:bc:c5:09:2e:69:a1:a2:
         6c:d0:9a:b7:95:08:53:5e:25:e8:5d:84:5b:f6:25:ea:a1:a9:
         4a:87:97:d6:f8:4e:f2:03:35:bc:f8:b9:fd:87:7a:09:05:63:
         7f:94:1f:bd:c2:d7:93:84:76:1c:5e:d6:52:86:19:8d:1f:76:
         ba:d0:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----