Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File:                     FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier:          iFKtG7ZrgOGVlRQQef6QhSYNHlh1hDvf3Qyl3ohFG7A=
Subject key identifier:   4D:4F:F8:0B:67:04:F3:D8:83:B4:5D:83:70:35:5B:2F:DE:C6:C2:09
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer:       /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial:       01962DF42976AF7241F6DC356DB6D63E16A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: TI7Su96VKe6kotQvYQzrqgc44XtRkoMWKA1lKTzRftc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:29:76:af:72:41:f6:dc:35:6d:b6:d6:3e:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=4d4ff80b6704f3d883b45d8370355b2fdec6c209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:73:01:cc:f8:c8:e7:1f:dd:2e:b3:ee:b4:
                    8a:9d:7b:ab:40:93:89:64:cf:d0:86:0d:19:46:71:
                    80:cd:03:29:03:1d:3e:0c:d2:8b:d4:ea:1f:59:c4:
                    cb:3d:b1:2a:17:da:6f:bd:79:7f:56:90:d2:02:8e:
                    5f:e9:49:0d:ad:ad:6b:9a:e8:8f:b1:dc:d8:59:5d:
                    45:13:2a:94:3a:86:d0:ee:f0:fc:04:48:29:99:f2:
                    1f:00:a0:44:0d:7c:ec:79:4d:de:7d:c5:40:87:3a:
                    06:81:51:65:77:b0:f4:f3:aa:d6:6e:0a:c1:65:32:
                    d3:21:73:fc:62:3c:bf:fd:93:ff:49:59:c5:8e:08:
                    28:72:3c:7f:76:4f:be:03:c0:37:72:dc:22:b2:d6:
                    8c:81:5a:91:79:f3:85:b7:cb:f9:ba:da:53:c6:75:
                    f2:62:e0:41:e5:99:9f:fc:c6:e2:76:95:f4:1c:fc:
                    a9:f8:14:95:50:77:62:8d:16:a2:dd:fb:79:0b:90:
                    a9:b5:bd:9d:12:dd:1c:f6:da:bc:a1:8d:f1:f4:eb:
                    99:ed:40:ff:e9:37:8c:ae:7a:cd:13:08:1a:4f:4f:
                    54:45:d4:67:cf:2b:77:cc:43:a7:5d:f4:ac:d8:57:
                    6f:5c:d4:8c:d9:79:4d:2e:04:f7:d7:1b:5b:27:ef:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4F:F8:0B:67:04:F3:D8:83:B4:5D:83:70:35:5B:2F:DE:C6:C2:09
            X509v3 Authority Key Identifier:
                keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:49:21:cd:99:fd:60:dc:9b:1f:46:11:86:0e:e2:bf:ab:2a:
         47:42:8f:7a:34:0c:72:aa:76:4a:a5:ff:37:9e:cb:59:f4:aa:
         c5:21:d8:ad:88:5a:4f:77:e4:14:ce:a2:2a:48:6c:2e:b4:a2:
         2d:79:58:c1:73:e3:d2:9b:94:09:24:4f:e4:88:e1:2c:a4:8e:
         bf:69:00:91:b3:a0:88:4e:e3:ec:2a:de:2f:f7:4a:04:07:b4:
         50:45:2d:9a:d0:df:56:ff:7d:01:db:8f:cd:75:cb:09:5a:22:
         c5:02:a2:46:3a:84:a4:06:48:4b:53:d1:d1:cf:d2:10:07:55:
         d0:9b:64:72:7b:73:7b:bf:4e:72:b1:b0:6f:89:19:79:7e:f0:
         54:aa:3e:43:74:e1:2b:34:70:fe:56:89:30:2b:c9:90:c5:1c:
         c7:a8:12:92:8f:c4:7e:02:e3:d7:18:fb:7c:b3:10:a3:9c:0a:
         ea:cf:40:88:af:a9:1f:09:e4:40:29:d1:9d:20:13:0c:98:74:
         30:1e:2f:21:8c:26:5c:d8:a6:0a:c1:49:1d:f1:54:74:9d:1e:
         57:18:45:39:a0:3c:2e:24:3f:e1:84:bd:56:31:0a:31:47:14:
         10:b3:ac:70:f4:5a:6a:12:62:ae:c3:b0:98:69:b1:ab:39:c6:
         c6:11:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----