Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File:                     Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier:          0CIi8RMXHh2u9O5GoGoEUkgZl57rOy+SSN1dJHdmcIo=
Subject key identifier:   47:07:CB:EC:5B:DB:CB:AC:8B:4D:0D:E8:2C:34:98:84:78:DA:63:88
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer:       /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial:       01962E619B7496DE1A3D96AD875157B79AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: 1tY0n_P9pCmxuMHMwVN4kuuE9Yw.roa (hash: OMoFTls8LA8ewzB3QD+33fEfQjFe6IrAty5YO50hD+U=)
                          2: 3qpur1zwBPkajyupQYlxerl-sX8.roa (hash: P/ij/bhS3D5UPNfyBQsnXDUHMAdZt5V8V+OvOjXddRE=)
                          3: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: 9FDWfm1f/h5heqOx8GOtOt5f2OHLL7mruJRnP4XtrL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9b:74:96:de:1a:3d:96:ad:87:51:57:b7:9a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=4707cbec5bdbcbac8b4d0de82c34988478da6388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:2a:63:be:03:de:d7:d8:95:bb:db:ff:2e:
                    0a:38:a6:90:a0:cb:bb:05:41:61:7d:82:6a:10:a7:
                    12:e8:bc:73:fc:28:2b:cd:83:78:36:26:5c:0a:b1:
                    7e:be:a8:12:2d:5c:85:05:61:1c:eb:ca:d4:fd:35:
                    67:27:f9:24:fb:9e:b3:e0:a5:ef:41:76:49:80:65:
                    f4:27:bc:6a:dd:17:06:77:fb:3f:99:37:77:b8:eb:
                    5e:e4:45:78:18:6b:b8:70:84:5e:b3:54:61:90:70:
                    15:81:7b:03:41:38:d0:a6:82:2f:e2:61:26:ab:10:
                    b8:02:2b:92:c6:53:4b:79:a3:76:cd:ba:a8:98:41:
                    85:63:74:3c:3b:cb:60:35:d6:58:5a:83:98:43:5a:
                    e2:68:71:d4:20:cc:ce:35:1a:09:6d:05:99:60:64:
                    cc:72:58:06:2e:4b:34:09:63:f4:f2:94:60:30:d5:
                    b4:cc:e2:44:e4:c2:84:3a:92:12:de:61:1d:e4:31:
                    bd:cf:cb:6a:6f:b2:56:e5:d8:f9:5d:be:90:8b:ea:
                    3d:f3:76:72:56:07:55:da:b0:67:e1:d9:97:4c:1f:
                    cb:f8:e2:b1:da:cd:66:ff:3f:7f:ee:e3:d1:92:9c:
                    5e:6a:1e:1b:bf:2f:85:80:29:0a:b7:63:18:09:75:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:07:CB:EC:5B:DB:CB:AC:8B:4D:0D:E8:2C:34:98:84:78:DA:63:88
            X509v3 Authority Key Identifier:
                keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7c:96:5e:57:f3:0a:a4:05:9f:83:81:81:25:18:31:66:64:
         7d:01:0a:21:9b:6e:bc:27:1f:62:ab:6e:06:5c:2d:95:5a:a8:
         b9:d9:a2:d0:25:46:26:a1:f8:0c:75:50:90:0b:5f:64:cf:c4:
         41:17:30:f6:82:c7:95:0f:7d:e1:4e:18:fc:15:3d:11:16:30:
         be:c3:f4:d8:23:43:72:e2:72:07:49:cb:6e:b8:4d:b7:3d:10:
         85:50:ef:f3:c9:54:b3:d5:1b:14:80:75:45:23:cc:4b:1d:ea:
         f3:2d:26:9c:b8:ed:7f:1e:bd:21:35:cc:da:79:d1:9e:74:05:
         85:97:25:fa:c8:be:85:31:2e:48:c7:e1:4f:b7:f5:90:86:d9:
         aa:2c:2e:7d:75:19:77:dd:1d:93:d1:d9:58:1a:a4:97:98:bd:
         b2:07:29:30:8e:cb:da:4a:c9:6f:41:de:9a:14:5e:49:65:3a:
         9c:04:ec:a7:94:dc:e3:77:16:f9:05:ef:93:f1:6a:0e:41:1a:
         88:c4:ee:92:90:c7:c7:b9:09:44:b5:3c:57:b2:28:c3:10:87:
         48:ec:8d:86:61:cb:32:3d:94:e5:28:64:78:9c:13:6f:81:61:
         bd:e9:4f:5e:b2:c0:cb:ef:b4:82:6a:4e:b4:d8:3e:7f:5e:3c:
         59:e0:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----