Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.mft
File:                     xAqOocjcM7gpD-vTTkU4vZWXROg.mft (raw, json)
Hash identifier:          cc3bxPPWy8Uhyi+l6BzSE7U1JX1pgo7Z2liuZRTDQYI=
Subject key identifier:   FD:B8:FB:72:14:4D:5D:29:5B:6F:E8:77:BF:07:83:08:58:02:00:85
Authority key identifier: C4:0A:8E:A1:C8:DC:33:B8:29:0F:EB:D3:4E:45:38:BD:95:97:44:E8
Certificate issuer:       /CN=c40a8ea1c8dc33b8290febd34e4538bd959744e8
Certificate serial:       01962F0681E08C85BB6A9893DB3BB237A1BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xAqOocjcM7gpD-vTTkU4vZWXROg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: xAqOocjcM7gpD-vTTkU4vZWXROg.crl (hash: 4u1m2swMioFNhY/jESmN+F8LAicy+vVcMLF8hFI5oMU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:81:e0:8c:85:bb:6a:98:93:db:3b:b2:37:a1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c40a8ea1c8dc33b8290febd34e4538bd959744e8
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=fdb8fb72144d5d295b6fe877bf07830858020085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:5d:17:c2:3c:05:50:88:4c:bd:62:42:81:
                    38:06:3c:c3:ba:bc:54:e4:3b:37:3e:6f:d3:bc:5b:
                    5a:4e:89:10:ad:40:68:d8:62:56:84:9d:da:37:10:
                    8d:59:78:6d:8e:9d:30:0e:48:c9:f1:30:10:d2:58:
                    f9:5a:33:d1:eb:e7:0f:df:7c:2b:db:0c:48:d6:d2:
                    17:57:7e:34:04:f5:01:3f:2f:64:15:25:f1:93:47:
                    07:73:f9:04:94:74:44:c9:ab:c9:15:9e:9f:f3:85:
                    07:40:8a:e3:ce:06:bc:4a:9c:08:de:08:e5:36:59:
                    6b:bc:c6:96:f4:78:ff:eb:40:83:ff:33:43:1e:65:
                    12:86:90:da:8a:59:37:3e:8e:74:d0:c5:d4:d2:21:
                    09:25:60:a3:95:87:44:f1:7e:ea:96:1a:13:21:c6:
                    2f:8b:d0:9f:52:05:d0:27:e0:0e:b1:d0:49:78:fd:
                    cb:b8:8c:d1:6e:c4:90:cf:d0:03:9e:99:c1:01:5e:
                    01:72:67:b7:77:fd:76:0a:40:e6:82:ca:e9:0a:5c:
                    93:8a:b5:6b:d3:92:07:e9:49:c5:42:11:1d:ba:7a:
                    b1:cf:fd:d9:d4:12:a5:d8:7e:90:b7:2a:1c:f9:28:
                    df:01:bb:3b:50:17:06:37:f2:e4:2b:88:21:e8:75:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B8:FB:72:14:4D:5D:29:5B:6F:E8:77:BF:07:83:08:58:02:00:85
            X509v3 Authority Key Identifier:
                keyid:C4:0A:8E:A1:C8:DC:33:B8:29:0F:EB:D3:4E:45:38:BD:95:97:44:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAqOocjcM7gpD-vTTkU4vZWXROg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:43:25:70:f6:06:35:83:01:c8:b5:ed:8d:b2:0e:8d:01:09:
         c5:0b:87:6a:e4:c6:69:23:62:bd:30:01:c8:53:66:6f:8f:5f:
         90:cd:31:b6:ac:23:5b:00:60:3b:7a:94:d9:4a:12:10:39:22:
         84:61:2e:44:a6:c8:17:2a:a0:b2:35:31:5c:ca:c0:ca:98:7e:
         3b:e9:36:42:a0:c0:11:95:bc:c7:df:64:2b:a3:f7:46:9e:9d:
         e7:c5:f1:0a:29:ae:13:4e:fd:15:a2:45:7f:2b:43:69:d4:bc:
         b3:14:0e:46:7a:ac:b5:62:a0:d2:70:6f:33:39:52:ce:9b:af:
         d0:f8:4e:60:51:09:86:48:e6:14:d4:95:12:59:ac:26:13:a2:
         53:9e:8d:82:54:f3:c4:44:a8:f2:df:52:30:78:10:eb:5f:a9:
         4f:f3:7c:a0:e8:4f:d7:6e:ea:a6:6c:8b:f6:72:99:b2:d6:46:
         b0:75:64:19:72:fe:2c:36:69:b8:5d:25:ad:6e:cd:83:b4:b8:
         ef:4d:6e:ae:08:8a:0f:3f:0d:f4:20:d8:f7:b4:e4:23:c6:9b:
         df:bd:4e:73:47:a7:37:a8:05:60:d4:97:9c:23:06:4c:5d:d8:
         90:d7:fe:78:bb:d6:57:9b:d6:bd:d9:18:79:e6:d4:fe:09:3d:
         3e:c6:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----