Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File:                     FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier:          1gGykuFR2PJ5d13mjvNI5q7aVhJnzDk1ZCmjwMzr56U=
Subject key identifier:   41:BD:47:A4:56:FD:0A:AF:10:BF:9A:37:E2:BB:19:8A:B1:0E:07:2F
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer:       /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial:       01962F06FE0BB0085CF91372A9B0B00E8D73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number:          0978
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: E8CGNDVJSvZiHsFQarSsPFGLvxyuCuqxOo1xDR7pPT8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fe:0b:b0:08:5c:f9:13:72:a9:b0:b0:0e:8d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=41bd47a456fd0aaf10bf9a37e2bb198ab10e072f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:42:9a:35:73:d8:83:3d:13:97:71:19:51:
                    1d:f8:c0:1c:e8:75:02:9f:2f:73:db:b9:60:f7:69:
                    87:be:09:b7:59:ff:0a:86:3f:a5:da:bc:d3:24:a7:
                    6b:86:ab:43:ac:23:c9:bb:82:f3:7e:83:fc:10:64:
                    0a:ff:b8:dd:9b:b9:83:31:ce:41:35:27:85:6d:4c:
                    7e:41:f3:66:6a:7b:51:d5:98:65:2d:15:29:b1:67:
                    12:11:96:a1:f9:21:ca:88:61:61:8f:c1:da:1a:6e:
                    50:a1:5c:a9:bd:ad:b6:3e:16:c1:4d:39:e7:76:0e:
                    eb:ab:c7:97:87:94:68:de:43:3d:e4:77:38:8b:b2:
                    c8:98:a3:7b:4b:e0:b3:d3:1a:90:8f:3a:c5:d0:9f:
                    7e:bf:fd:79:12:44:20:98:9a:de:31:17:5e:b9:05:
                    6d:1e:af:ec:89:56:0e:10:a7:be:f8:f5:dd:5d:0e:
                    00:20:e9:65:51:67:48:40:ee:ff:28:cd:c0:ae:2e:
                    97:67:fc:50:82:8e:18:29:2b:cf:25:e8:75:d1:1a:
                    92:ed:f3:f7:ef:d3:5f:9d:d9:20:e6:f5:9d:79:86:
                    cb:bd:eb:79:c9:5e:b5:04:39:64:5c:34:f6:2b:da:
                    fd:ae:6e:84:5f:21:f0:d7:45:b6:0c:c2:c3:bd:90:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BD:47:A4:56:FD:0A:AF:10:BF:9A:37:E2:BB:19:8A:B1:0E:07:2F
            X509v3 Authority Key Identifier:
                keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cd:1a:e8:de:fb:76:e4:87:c1:8e:d6:1a:d2:6c:e4:3d:2d:
         37:29:fb:fc:d0:bb:fc:44:17:de:70:33:8b:e4:4f:09:ab:ef:
         67:92:68:e9:d6:42:81:49:9c:0a:93:c1:bb:10:57:ee:68:52:
         a9:ca:de:f8:55:ad:ab:2d:0e:e1:e9:9c:3b:67:05:67:7a:61:
         ba:c8:e1:08:67:f7:b8:46:cc:2d:12:26:62:60:88:84:93:a0:
         c9:1f:2f:f7:7c:c6:dd:f9:5b:2d:c7:04:f2:05:3b:13:64:48:
         20:4c:50:8d:b5:f0:7b:78:46:ad:10:f0:04:93:c8:00:25:e4:
         a1:a5:25:ee:bf:43:b4:7b:ac:42:3d:15:17:52:9c:93:68:ea:
         54:fe:ca:f5:95:41:c1:b6:a5:a3:51:68:d9:66:50:31:39:ef:
         40:f1:7f:eb:de:4d:f4:b3:ef:ef:f0:61:e3:eb:75:fd:dd:6c:
         87:21:95:bc:b8:13:41:56:d6:e8:e7:ff:d5:34:23:5a:4b:a0:
         fe:d3:e0:89:0c:b5:b3:79:b3:eb:f6:29:d1:a5:99:46:42:a3:
         aa:44:1a:cc:e1:bc:18:f0:b5:c3:79:41:d2:67:7d:cf:51:cc:
         27:4b:9a:29:57:41:f1:80:8e:15:bf:ad:ed:5c:52:64:e8:ae:
         56:41:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----