Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File:                     lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier:          5CkMgZ/do3vkAfdRcEyLzt72nYmdDirgyt2QT1rQ3Rk=
Subject key identifier:   FA:53:59:0F:2E:32:9A:F6:06:59:C9:41:CB:D5:A3:C4:FC:DD:99:B6
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer:       /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial:       01962FAB59B63DC652B3F18DB32AE9737E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number:          046C
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: IMyyZt3mjorvgg5raBDAL8/JeyvwvmMhzlXE6v5aQD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:59:b6:3d:c6:52:b3:f1:8d:b3:2a:e9:73:7e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=fa53590f2e329af60659c941cbd5a3c4fcdd99b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:a6:fd:9f:3a:bf:f8:49:be:a0:28:2d:9a:
                    7c:e8:64:41:ae:5f:b9:98:0f:89:5e:18:a3:3f:fa:
                    3d:7b:8b:2f:f3:a9:9a:c6:5c:eb:55:68:96:55:98:
                    97:52:65:cb:0c:65:ce:47:b0:57:8c:01:0d:72:17:
                    81:ef:d4:66:15:0b:6e:d1:f2:fe:7b:26:78:d5:9e:
                    41:49:74:d6:9b:73:eb:66:c9:c7:db:df:a7:71:5b:
                    f5:fa:97:ea:6c:d5:b3:d5:a1:9e:2a:d6:1a:4b:9d:
                    d8:b9:1a:7d:81:f4:d5:53:56:0a:54:76:0e:24:96:
                    94:3b:42:ff:e3:47:d6:a8:87:b6:fd:75:23:96:68:
                    d1:17:d0:20:39:da:ac:b0:83:7d:32:e5:e9:75:92:
                    5e:4a:88:04:2d:71:a7:a5:20:3e:0e:85:20:6c:d3:
                    c6:70:a5:93:11:24:99:4b:2f:ed:d6:7a:7d:f6:02:
                    cc:38:9b:6d:80:fb:d8:bb:77:56:6a:b2:f6:9b:40:
                    06:d7:1b:13:1a:b5:20:d9:8e:5f:24:62:6e:98:77:
                    ca:ff:50:6a:e1:22:c9:dd:03:73:61:0e:b4:94:85:
                    01:1e:ec:bb:9d:20:19:68:6a:f9:ce:db:1c:34:f0:
                    3f:70:30:1e:c1:c9:88:c6:63:15:d9:58:8e:58:de:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:53:59:0F:2E:32:9A:F6:06:59:C9:41:CB:D5:A3:C4:FC:DD:99:B6
            X509v3 Authority Key Identifier:
                keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:aa:30:3d:f7:43:45:12:8e:e0:cd:0d:d6:91:76:90:3f:
         62:a5:55:d3:22:6e:ca:7a:09:2e:ab:a5:b7:3b:a3:6e:57:ef:
         5b:c2:5d:17:5a:20:77:39:8c:0f:f0:59:f3:d2:67:0d:d2:63:
         a9:05:14:49:6a:84:d3:27:f1:e1:76:d2:a5:85:57:fc:50:c4:
         d9:25:dc:36:d0:71:0f:ec:9e:06:16:22:58:ac:7c:b7:74:9e:
         9a:46:c6:6d:52:fe:30:f3:1c:a3:bb:9e:29:4f:7e:04:66:d6:
         83:cd:8b:59:f6:b5:54:a0:55:88:6c:ba:55:42:b1:a7:03:c7:
         78:9f:e2:49:fa:2f:e4:e8:24:27:2b:19:d1:b0:3c:b0:de:d1:
         79:f0:14:78:ff:ac:a5:cc:f0:a5:e8:ce:25:92:f9:c7:96:0d:
         00:4a:e6:3f:04:dd:95:c4:09:44:5a:88:b3:d9:47:3c:41:bf:
         b3:0e:f8:e1:a3:67:6f:e0:06:82:80:72:9f:44:cb:5d:c6:ba:
         30:dd:e3:56:0a:5c:a9:3e:03:b5:89:9e:d7:48:bc:67:9e:fe:
         2e:e7:f9:51:7f:8a:cf:69:a6:21:12:6a:30:0d:29:0c:71:48:
         84:84:65:dc:12:94:cf:4e:39:15:3d:b8:51:7d:3f:3f:f1:85:
         90:48:46:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----