Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File:                     x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier:          THId55cdiWGDtzCc3qupQmYuxffxPCOaz8pS8Xkyds4=
Subject key identifier:   47:AC:B1:B6:5A:9A:6F:2C:32:CF:B5:91:CD:48:75:2E:D9:FC:AF:32
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer:       /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial:       01962F74B99B37C8A9093754B6F830ED0D94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: edSaDML+vfbYaHt/7zDTos9mVEDGVK+BAu78G8DJCsw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b9:9b:37:c8:a9:09:37:54:b6:f8:30:ed:0d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=47acb1b65a9a6f2c32cfb591cd48752ed9fcaf32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:c7:44:16:06:89:9c:13:54:0a:26:fd:4b:
                    da:e9:c2:30:ad:d7:7f:64:7d:25:72:15:8d:67:4b:
                    56:58:42:51:30:10:ed:5d:0d:a0:18:19:07:a0:4d:
                    d1:40:c1:02:25:41:62:15:63:a4:3d:cd:86:6e:60:
                    c1:35:84:fc:b0:c9:43:11:c0:f4:d4:ff:b4:86:7a:
                    f4:f6:a9:9d:d4:50:3c:40:7a:2f:b8:9a:cf:af:8e:
                    2c:4a:1c:d3:43:13:a4:44:b4:de:a7:e9:72:24:c0:
                    d7:43:ff:e1:eb:44:ef:ca:d0:a3:99:f9:67:77:4a:
                    ee:61:f9:28:5e:71:ba:11:2e:86:cf:61:a2:9f:0c:
                    9f:ae:3b:b1:5e:5c:b7:5c:fd:10:8f:68:34:52:eb:
                    39:44:d0:51:23:74:37:04:e8:e8:38:f9:eb:f3:d4:
                    9b:25:74:2a:28:bb:d3:c9:fb:bb:3d:41:bc:3e:63:
                    d8:30:d7:95:91:3d:8d:a1:4d:8c:e3:47:0f:6c:af:
                    fe:63:6f:64:1d:88:64:fc:74:47:6c:f1:11:f6:86:
                    91:69:1a:19:63:88:91:e9:93:9f:5e:30:ac:c0:54:
                    87:1b:5f:17:81:87:5b:ab:bf:0c:17:1e:d9:2d:7e:
                    37:5b:62:9f:27:5b:54:e7:2a:90:b2:a1:7b:91:40:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AC:B1:B6:5A:9A:6F:2C:32:CF:B5:91:CD:48:75:2E:D9:FC:AF:32
            X509v3 Authority Key Identifier:
                keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:59:f7:f0:be:75:55:f3:84:84:31:b8:3d:75:e6:b2:d8:72:
         f6:86:ca:c2:b1:29:93:ba:42:da:1c:98:a2:3e:f3:1b:71:ca:
         da:7e:8f:2d:56:d2:4f:73:a1:b8:29:ff:ed:cd:fb:d9:2b:cb:
         ac:de:52:36:79:7b:46:76:11:cd:ea:65:a1:66:f9:0e:1d:dd:
         5f:61:72:b2:46:22:2f:48:a2:83:51:24:55:ba:9a:24:b5:ab:
         10:94:52:5e:7e:5d:b5:53:fb:b6:83:1d:3c:7d:ad:b5:7d:d3:
         03:e4:49:88:09:a3:5c:f4:f2:23:43:60:fe:8e:95:17:08:ba:
         e1:47:fe:9f:95:63:7a:60:96:af:07:3b:36:f2:02:1b:da:6f:
         48:19:ac:59:cd:40:07:d7:6e:e4:3a:6f:fc:55:45:75:e7:df:
         59:bc:1a:ba:eb:21:9e:46:15:39:c1:5d:2c:58:05:58:9d:5f:
         1c:f6:7e:0e:7e:7e:c0:c2:cc:ca:a6:35:17:21:f0:1b:7f:29:
         87:62:17:89:d1:a1:cb:3a:58:06:09:10:63:12:df:c6:e3:4a:
         bd:01:a5:21:01:e1:aa:11:41:02:6e:7f:73:00:50:6d:f2:4e:
         98:48:2e:ee:a3:13:25:80:be:c0:48:4d:23:e6:e7:8a:11:ad:
         ce:68:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----