Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File:                     FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier:          JYJh4CguXJQvy/f0CB6jVnoVJWVUz8/q/CSUQKSZF+Q=
Subject key identifier:   D6:88:14:AC:89:23:F3:28:F7:33:7B:5F:05:CD:CD:90:53:BB:B8:48
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer:       /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial:       01962DF3A02F8383B59F279A23A20D7F1B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number:          04A1
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: 1CzyiQty6AzZ8S12ODcAaNUxP+W4NprnCWiSQmxRhHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a0:2f:83:83:b5:9f:27:9a:23:a2:0d:7f:1b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=d68814ac8923f328f7337b5f05cdcd9053bbb848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:dd:6d:7f:0f:f2:22:5e:c9:87:d2:26:6a:
                    4f:b9:d7:7b:c5:8d:ad:bf:fc:f8:9e:4a:af:30:08:
                    36:01:2b:fe:25:59:83:23:4e:90:c4:df:c8:20:87:
                    a1:a4:8b:ad:3c:53:24:49:3d:f0:0e:fb:bb:3c:3b:
                    bb:9c:5e:1f:06:33:c7:c3:c0:90:22:d6:c3:20:11:
                    29:89:cb:c3:02:ca:0f:99:0f:60:98:34:08:09:19:
                    8b:40:40:7b:1b:fd:fd:c0:ab:74:fe:01:24:21:b7:
                    23:1c:35:47:25:92:a0:ec:01:d4:74:e1:7a:7b:98:
                    73:34:21:72:b3:aa:f0:1a:69:43:26:9e:10:45:73:
                    e7:6a:7d:9b:9a:f5:f0:f3:39:0c:ad:83:8f:95:cc:
                    2d:81:c3:c6:b1:05:84:ab:6d:79:1f:94:4d:dc:29:
                    59:40:e0:1e:a3:0f:97:ad:f8:7d:69:67:76:5f:84:
                    d1:38:ac:0b:b4:38:38:dd:fb:5c:74:56:41:02:5b:
                    86:70:42:18:78:92:2f:50:c2:1d:9d:6e:90:34:6b:
                    7e:dd:e2:9e:ee:e8:ef:5b:f6:15:7f:b7:56:f7:3b:
                    ac:7a:7d:20:3c:9b:24:59:e6:0c:51:62:ea:46:4a:
                    a4:cf:c0:bc:db:b4:2d:5f:dc:61:a6:7e:8f:6d:8c:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:88:14:AC:89:23:F3:28:F7:33:7B:5F:05:CD:CD:90:53:BB:B8:48
            X509v3 Authority Key Identifier:
                keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:74:ae:00:a9:f2:d8:ca:b0:a1:4c:23:8c:df:50:ba:90:f8:
         e1:f0:fa:06:d8:18:80:97:4b:19:c5:5c:6e:c7:3b:4b:3a:ea:
         13:23:31:7f:06:3e:cc:84:ba:f4:f1:61:42:68:3d:9d:db:40:
         6f:6b:a3:00:c0:0d:fb:1e:61:3f:e4:d3:46:81:bf:24:c0:99:
         02:29:a9:88:4e:d6:73:28:5b:8b:6f:bd:88:d7:c1:a4:69:dc:
         1d:6a:47:48:0d:8c:9a:d7:26:2f:bf:83:52:46:f6:80:f1:32:
         d9:67:b8:22:db:7c:19:4e:84:fc:df:e0:f0:67:1d:de:65:b1:
         33:3b:cc:d2:a4:76:67:00:51:9c:2a:02:33:ef:76:59:4c:7a:
         a1:57:14:07:86:88:9d:16:ab:e4:4a:b8:94:52:f5:35:9f:f7:
         13:c7:19:49:56:73:07:99:ed:48:70:2c:1b:4a:0a:a1:71:ff:
         aa:93:15:25:2c:2b:63:b0:c1:fc:67:0d:fa:6b:75:59:56:be:
         65:93:59:6c:1d:ad:4e:93:29:6d:88:be:cf:57:e3:a0:3f:f5:
         68:e5:9f:35:f1:49:cc:09:97:d3:48:c6:8a:98:b0:6b:f3:ec:
         b9:d1:e2:d1:52:d3:11:ff:66:91:ea:8a:ad:70:8c:0d:78:44:
         1c:6f:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----