Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
File:                     fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json)
Hash identifier:          qg/96hvsAdmzuMnQeyMZd2Ky9kWJ3CCR6kjF1Y+K4ks=
Subject key identifier:   C6:13:EE:0B:71:E8:97:53:92:10:2C:99:B5:24:F2:87:8E:B3:A1:54
Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
Certificate issuer:       /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Certificate serial:       01962E98F0F497595F9B56F64D17DA830699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: Qrqw7Ud31fEaPw0XDP8gwtFKlpqLLxwgA87WnPMn2pY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f0:f4:97:59:5f:9b:56:f6:4d:17:da:83:06:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=c613ee0b71e8975392102c99b524f2878eb3a154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:b2:02:9b:8d:e3:dd:6b:4d:cd:b6:a9:11:
                    00:92:b5:53:f9:fe:51:5d:eb:8f:02:af:37:69:b9:
                    a8:eb:fc:4b:cd:0a:ee:54:c0:37:b5:3a:22:12:71:
                    30:76:98:99:43:e6:57:51:48:c8:02:ea:45:8a:4c:
                    cc:6b:e3:bc:85:6d:93:fb:f7:32:58:1e:1d:fc:c6:
                    35:d9:af:8c:5b:fd:34:ca:ec:14:19:e6:33:a8:80:
                    3d:ea:76:2d:d4:af:2e:a7:c0:c1:1c:0f:94:e1:43:
                    73:4a:34:9f:29:b6:1c:4d:ca:09:3b:63:69:a9:75:
                    fa:49:68:3d:18:da:73:28:29:b5:3b:ec:b3:23:2c:
                    16:c2:6e:40:ff:5c:5a:c8:e5:5b:e0:cb:a6:66:e7:
                    34:b1:26:e6:e3:79:cf:24:1e:28:8b:06:2f:9f:96:
                    0d:11:8b:fa:ce:24:8d:97:e6:96:02:5f:59:8b:ee:
                    dc:90:23:8d:2d:dc:ea:04:41:5f:b6:46:5e:06:68:
                    db:62:f8:54:03:d8:b4:d5:da:f8:fe:75:ea:10:71:
                    7a:d0:84:ad:df:0b:b3:76:45:c5:53:e4:29:83:dc:
                    6f:6c:95:1c:63:cb:b8:01:8c:d4:47:2b:c9:48:a9:
                    a7:c0:23:7c:d7:f2:4f:c3:7e:64:47:aa:50:d8:51:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:13:EE:0B:71:E8:97:53:92:10:2C:99:B5:24:F2:87:8E:B3:A1:54
            X509v3 Authority Key Identifier:
                keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a0:fc:72:44:59:07:fa:e7:4f:c3:96:8e:89:1d:fc:17:c9:
         53:df:60:57:44:34:f0:d8:2e:a5:b3:2c:d2:06:bf:e9:8e:f7:
         5b:75:05:6b:09:5d:c6:b3:55:7d:85:69:cf:97:c3:87:2c:01:
         06:5c:2f:bd:79:bc:7f:f8:62:a3:80:cc:fc:b0:b7:48:e9:b8:
         66:16:c3:fc:55:20:ab:6c:65:95:ee:f0:31:51:93:ec:6a:ba:
         43:8c:9e:f7:59:5a:b5:77:81:0b:06:0c:79:21:dc:ba:bf:81:
         21:11:6a:4d:03:17:1d:a0:af:68:f9:e8:55:93:ab:e5:9e:1d:
         0c:9d:43:61:e1:53:a3:c6:a4:d7:01:da:2a:92:07:4b:7d:74:
         b0:ac:2b:19:8c:fd:c4:6a:17:1e:17:46:35:d1:b7:91:3a:99:
         6e:1a:10:b4:50:64:10:b2:fd:3d:be:5e:4d:22:ed:d6:d4:71:
         3c:d3:90:98:7b:c0:15:cf:64:06:70:15:3e:96:b7:7d:fa:88:
         9c:57:ed:66:6e:eb:7f:43:af:f0:82:ad:2c:35:c9:d3:4c:4d:
         55:d4:79:1d:15:0b:e6:6e:7d:00:ad:a0:1a:b1:69:dc:14:f5:
         d1:f0:e0:40:f1:5d:5f:fc:95:6a:d9:13:5e:46:31:20:58:40:
         86:1b:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----