Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File:                     FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier:          L07/n2Sbmfnlm0GbXk5+4Qy3pwSgQwywwY/X/FmeLtY=
Subject key identifier:   8F:2D:EC:DE:87:61:9B:14:91:62:D6:81:00:E9:F1:1C:13:8D:9F:2A
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer:       /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial:       01962DF3C3EAA74D36E0F8983F4C18FD6665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number:          01F0
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: 2dETDR8a9x5PhESr6uEWAjyiu4Mu/xDjdiHlozNbuVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c3:ea:a7:4d:36:e0:f8:98:3f:4c:18:fd:66:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=8f2decde87619b149162d68100e9f11c138d9f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:7f:6b:db:7e:0f:fb:27:6b:af:30:f9:90:
                    64:50:db:6c:8e:2a:cb:ed:66:fe:c9:67:40:16:16:
                    5b:77:b0:74:b5:fd:56:5e:37:2b:21:f8:65:09:ce:
                    45:83:7f:68:d4:bf:ce:53:cf:ad:59:a4:5f:27:2d:
                    75:d6:f7:e5:62:ce:69:71:33:fb:3b:4e:76:c0:e6:
                    a8:4f:c8:28:69:85:4c:b7:5b:12:23:7d:2b:68:6a:
                    78:95:26:ad:98:7e:4c:7e:b2:f4:04:5f:20:02:9e:
                    3b:1b:ea:b2:f6:1a:7f:0f:a2:1a:88:ac:4c:a5:d7:
                    a9:1e:2f:d7:3a:a3:bf:d6:b9:52:59:03:b7:a3:1e:
                    05:ab:b3:8a:25:f7:20:5b:24:e9:59:29:35:56:01:
                    83:93:a6:43:ad:81:de:75:02:ec:a3:27:9d:be:30:
                    4e:ef:14:55:42:be:fe:e0:b0:d5:73:72:2d:17:3e:
                    21:b2:57:88:d6:05:70:30:36:34:86:7b:89:a1:34:
                    e7:a1:cf:63:9a:98:78:be:69:c4:cb:e3:d5:ef:47:
                    28:ba:6a:be:79:f4:00:e0:8d:be:2c:e2:5e:e4:ae:
                    9d:10:c9:6e:42:21:de:94:f6:94:a6:69:d3:d6:af:
                    a5:d9:70:8f:f1:ef:93:d4:ac:b0:78:c9:d5:ed:fb:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:EC:DE:87:61:9B:14:91:62:D6:81:00:E9:F1:1C:13:8D:9F:2A
            X509v3 Authority Key Identifier:
                keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9a:68:a0:51:38:12:95:3b:af:85:e3:4c:91:3d:f5:9f:7f:
         c0:8e:78:8b:91:4a:a4:50:c0:af:66:85:95:4b:70:de:08:f3:
         04:99:0a:78:ce:a0:d3:fc:b6:89:ca:40:ec:4b:ad:de:87:d0:
         c0:11:83:03:e2:46:22:6d:6c:81:26:af:45:8e:8c:f8:e4:e9:
         e1:a9:66:79:21:8e:5f:0b:a9:c3:af:7d:fd:c7:db:36:02:5f:
         da:ec:80:0d:f8:4a:dc:34:bb:8c:d8:12:7a:3c:4c:49:2a:be:
         25:5e:1c:e1:0f:43:b2:06:65:6e:a2:af:8f:ae:5a:e0:1d:1a:
         8d:51:bf:d1:a6:f2:34:19:57:12:ff:7b:99:ea:42:db:9b:33:
         3c:37:4b:33:5c:10:9c:46:9b:09:a1:30:90:ca:7d:1b:02:80:
         cb:e2:18:a1:3c:12:00:32:ae:77:41:7f:11:a9:59:e7:74:97:
         d1:e9:84:af:f4:8c:6b:55:9c:9e:36:93:e4:51:9d:64:a1:f6:
         66:91:1d:fd:69:4e:0f:03:c0:1e:21:12:c3:fc:a7:94:9e:06:
         bf:53:6b:7f:b5:7d:03:dd:7a:f8:7d:eb:19:a1:03:d4:ee:9d:
         dc:98:31:a9:d5:d7:fb:9e:dc:54:ae:de:94:7a:a5:83:d2:11:
         a2:c3:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----