Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
File:                     _-W67rcNfV5-7SxR09WEe7NhtFU.mft (raw, json)
Hash identifier:          XRuYi/+beX19LWOhc1bhOlVax8RNgEBk4SBObBXqPqc=
Subject key identifier:   94:32:55:A9:BE:5F:95:64:7A:94:13:FC:8D:B1:28:2D:DD:92:ED:06
Authority key identifier: FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
Certificate issuer:       /CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Certificate serial:       01962F7474F04E82C59DC493A04600F677B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
Manifest number:          69
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: _-W67rcNfV5-7SxR09WEe7NhtFU.crl (hash: dnDbkA5p/opy13l4SrtXYM2LuTBvPpH5ISeiBg5s/bE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:74:f0:4e:82:c5:9d:c4:93:a0:46:00:f6:77:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=943255a9be5f95647a9413fc8db1282ddd92ed06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:12:d6:60:bf:95:1a:ba:06:94:ac:7a:6e:
                    d7:74:e6:f0:81:df:98:b6:44:10:37:a1:63:1a:de:
                    f5:f3:a9:9f:7b:6e:35:ac:49:f9:0d:08:76:d5:67:
                    d8:4b:b0:34:9f:39:54:fc:ef:66:54:71:3f:f8:bb:
                    e0:e5:a7:69:0a:d3:6a:d3:df:fb:24:25:dc:6a:4a:
                    3b:fd:25:aa:80:a9:11:e4:54:6d:5e:2c:48:e4:d8:
                    df:4e:8c:e3:6f:e5:09:d2:a4:b9:28:77:f4:a5:be:
                    27:be:8e:f3:53:6e:c9:83:6f:27:0a:57:6c:f3:2a:
                    ea:ea:98:59:b7:d8:0d:3f:8f:21:c9:08:7b:18:66:
                    ff:6c:39:36:68:3a:54:c4:a9:fa:94:93:29:64:90:
                    ae:23:13:10:22:08:6d:98:19:2a:47:6f:ce:92:1a:
                    84:16:b1:2e:f3:f4:97:f4:02:b0:49:7f:7d:14:39:
                    3c:1e:cd:bf:5c:33:d2:c9:b0:7c:97:f9:20:6d:2d:
                    60:03:40:bf:45:fc:0a:ff:a4:9f:64:b2:74:4a:37:
                    9c:61:be:f6:76:c0:a1:7d:e9:a9:40:f8:44:c8:8a:
                    cd:0b:92:7b:f1:fe:d2:80:c6:f7:10:dd:d7:0e:22:
                    36:4d:bd:4e:a3:aa:03:c0:d5:41:52:44:66:9c:fa:
                    0d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:32:55:A9:BE:5F:95:64:7A:94:13:FC:8D:B1:28:2D:DD:92:ED:06
            X509v3 Authority Key Identifier:
                keyid:FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:34:fd:6c:2b:7e:cb:63:53:70:2c:aa:0d:5d:4d:7f:f6:28:
         59:73:72:fd:af:6d:75:f7:42:81:f9:8b:1c:83:ba:88:36:9b:
         b3:38:bb:e1:aa:d2:bc:7e:7a:74:a2:10:a8:32:47:d1:82:be:
         6b:cd:30:88:30:fa:7f:d7:8a:bd:d6:dc:91:9a:fd:70:83:db:
         de:eb:33:8e:34:9a:c0:3f:c8:1c:37:88:4e:89:5f:d1:2d:6a:
         ef:d5:76:bb:92:e4:9c:8c:09:13:89:d3:1e:59:45:47:58:4b:
         f5:62:fd:03:80:49:3f:6b:d8:f1:10:bc:57:be:56:81:5f:79:
         38:14:52:f3:1d:23:b2:e2:ea:97:0a:ba:36:1b:d7:d6:3f:64:
         49:63:6b:11:47:6b:a1:25:93:e9:c4:80:74:d4:b3:64:9f:51:
         f1:a9:9f:57:71:a4:49:3b:31:1f:d2:1e:c8:45:4d:62:cf:c8:
         af:ae:38:8b:43:46:be:04:64:fc:b7:2c:6e:69:a3:a0:4d:8d:
         02:3b:06:ec:95:b0:c8:df:af:ae:45:02:16:44:67:69:3e:b8:
         55:16:7d:01:ae:4b:24:35:0f:83:de:a4:ec:fc:82:b4:2e:23:
         ab:c9:0a:26:ba:38:5e:f1:bb:97:61:e1:31:15:ac:c5:63:12:
         74:2b:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----