Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File:                     R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier:          nBlc/+sMHD8TELlpwnYiaUTwG63eXeEjc0rc+osyVJk=
Subject key identifier:   98:3F:66:06:57:75:66:39:BB:61:68:E8:E4:30:2A:66:41:2D:C4:8D
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer:       /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial:       01962E996C4999C08403AFDDF01FEB0F712A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: ovgrNm2WgKKqOIqZR18wU6BjOZrDvdv4tvx+LlmFMg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6c:49:99:c0:84:03:af:dd:f0:1f:eb:0f:71:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=983f660657756639bb6168e8e4302a66412dc48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:4c:c6:4b:26:7f:dd:fd:c5:87:eb:53:c2:
                    86:e0:ca:a6:1e:fd:1f:12:94:ab:3f:5d:c5:66:33:
                    8a:3d:6a:17:fa:40:80:6c:ca:5d:67:d1:80:89:b6:
                    8b:92:b4:cc:74:11:1a:a1:07:3c:f0:95:d6:30:da:
                    7c:5b:8e:95:de:c3:3e:c9:62:22:7a:15:94:70:9a:
                    dd:9c:81:69:e9:55:46:51:bc:a7:e8:ca:fc:0e:3c:
                    ce:80:53:c8:3e:08:e9:b6:ad:66:70:e9:10:7b:d3:
                    94:27:19:38:1a:4f:b2:64:a2:91:4f:06:c4:b8:ed:
                    2a:0c:a9:51:14:81:00:d3:b6:bf:24:97:6c:bb:37:
                    fc:1f:12:3f:44:71:b3:94:e8:b3:f9:c4:5e:1a:94:
                    f2:f4:c7:a8:52:b9:d2:52:f8:3a:7a:a0:1d:06:8a:
                    92:94:d3:b4:49:9a:62:1d:3e:d8:73:11:84:80:dd:
                    7e:e8:39:f5:a4:a1:8d:5b:e4:f6:78:98:27:22:41:
                    fd:95:69:0e:c7:ef:2b:13:a2:1b:77:27:e0:d6:83:
                    ca:82:10:a9:83:10:9c:c5:1a:10:ba:45:00:62:45:
                    82:15:2e:ad:c8:3e:b1:4e:e1:fa:d0:b7:78:e5:ed:
                    bd:be:f2:77:40:8a:93:9a:d6:85:6f:44:84:06:32:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3F:66:06:57:75:66:39:BB:61:68:E8:E4:30:2A:66:41:2D:C4:8D
            X509v3 Authority Key Identifier:
                keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:d9:3f:0a:4f:ce:ad:82:6f:17:87:d6:f3:fd:a4:0c:b9:
         18:af:eb:2b:34:5b:8c:09:35:88:55:18:d5:28:15:e8:59:df:
         cd:5d:f8:96:06:16:86:b5:11:bd:7e:e3:91:df:66:13:f9:be:
         91:0b:fc:0b:b0:53:15:b7:8c:bf:b1:93:7a:9c:c0:0b:de:6f:
         12:f2:1d:53:ce:f2:68:39:10:77:56:77:20:9f:02:1c:05:04:
         5a:ac:54:9d:16:d6:13:a4:9c:d3:ed:9d:6c:b8:8e:9b:42:46:
         5f:ca:a1:b3:c6:50:30:2a:5b:f1:f5:36:e6:15:3f:35:e0:1f:
         07:bd:f0:6b:fd:8a:0f:ed:4b:8c:ac:bb:12:c1:47:4b:66:c7:
         d1:aa:52:1e:54:38:13:47:c5:a0:55:6b:14:29:cc:65:78:ad:
         bb:2e:5c:d7:b7:90:35:f1:a6:46:73:1a:d8:7f:d2:f7:bf:74:
         96:86:b2:97:6c:85:17:87:10:55:09:df:65:fd:26:e4:72:e9:
         1a:2e:a7:21:2d:b7:6a:6b:0c:00:86:69:8c:1a:75:35:45:92:
         57:d7:17:79:11:5d:23:6a:b9:a1:84:4f:1c:f4:b0:55:7e:8c:
         25:9c:50:e1:77:ee:c5:06:7c:f3:86:0b:07:34:0f:18:a3:d3:
         7b:f7:bf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----