Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
File:                     FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json)
Hash identifier:          RODYgcfXqa2ZR4XD85kr/wvd1jKjLS0I4gPy5bVUVBA=
Subject key identifier:   8E:D6:04:0B:E0:C0:BC:1C:F9:F4:F4:2C:3A:AF:BA:56:78:4F:0F:FE
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Certificate issuer:       /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial:       01962F3D909ADCE827BC7B25D1B45CE43599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: 64zRShTV31-oIpx-wKCS8H98LZE.roa (hash: BgDFhrJmyJFk7YH+jYYjlsS94cvZOyBrU+0fh461ZcY=)
                          2: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: SnkDdoCk7vAQbouD76spCIPqNcOqk/ZIQ7w1MdzPwZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:90:9a:dc:e8:27:bc:7b:25:d1:b4:5c:e4:35:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=8ed6040be0c0bc1cf9f4f42c3aafba56784f0ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:ec:87:bf:35:cb:c0:36:02:35:b8:62:3b:
                    c8:b7:0b:85:97:bf:c9:48:83:85:be:90:cc:ed:31:
                    8c:b9:59:67:94:d2:86:2f:69:86:d9:30:1c:06:06:
                    3d:44:df:e7:7c:26:91:60:7e:12:92:60:82:75:dd:
                    e9:a5:93:bb:69:6d:4b:ee:ca:2c:83:8e:5f:46:7c:
                    eb:17:be:47:91:6b:ef:a9:c5:99:42:fc:46:3f:9c:
                    b7:da:37:a1:cf:ea:93:f2:52:4c:ef:b1:16:91:f9:
                    ff:94:03:98:7e:00:00:22:67:75:0c:81:32:5d:d9:
                    44:60:2a:bd:7c:41:d0:78:8e:4b:29:50:c6:b1:c4:
                    fd:d0:51:8f:13:66:66:99:78:22:d1:8c:91:30:0a:
                    a3:2c:b7:0c:a5:b7:04:78:46:97:14:93:8f:11:36:
                    ea:2e:4f:a0:ac:ee:6b:a3:56:bf:1d:fe:96:59:85:
                    0d:e7:87:7a:64:a9:f2:e6:9f:d5:b7:fd:30:2f:96:
                    a5:db:7f:e1:ce:b6:8b:0b:9d:81:f8:a8:6d:3c:71:
                    0c:0b:c1:64:96:3e:57:66:57:74:fa:48:c7:ad:3a:
                    d4:3b:f1:3c:ad:6f:c7:34:83:81:62:d1:f2:46:5c:
                    a5:53:36:59:c3:50:0a:6a:18:12:c8:2e:11:ef:6e:
                    85:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D6:04:0B:E0:C0:BC:1C:F9:F4:F4:2C:3A:AF:BA:56:78:4F:0F:FE
            X509v3 Authority Key Identifier:
                keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ea:c1:ea:d4:38:55:c1:ed:d4:f8:95:8a:e0:85:f9:bc:54:
         9d:12:54:7b:9b:f9:e2:74:6f:79:92:75:41:1e:1c:4e:c0:01:
         b3:95:52:b5:d3:7f:a6:4f:4c:e5:4c:54:11:9a:3c:d5:4f:cd:
         12:6c:a6:6c:88:e8:4e:bc:43:1a:70:d0:61:26:48:14:8d:d3:
         b0:cd:6e:29:8a:e9:d0:73:17:8f:b9:01:9b:f1:f2:de:16:27:
         9b:52:cd:e5:22:ef:23:81:2f:2c:cf:b2:1f:2f:4a:c4:06:b5:
         50:5f:92:73:2a:ce:56:27:1c:d4:33:fc:1e:a5:2e:7c:13:47:
         fd:6c:32:ac:b9:25:d9:1b:11:1e:5e:49:fa:37:b6:f7:7d:8c:
         f2:61:b9:1e:33:54:4a:18:0b:32:2c:07:bd:1f:97:a5:b8:43:
         52:d4:2e:e3:86:21:30:bd:99:5b:aa:9f:68:64:5e:77:89:e6:
         e4:30:79:bd:fd:6e:17:48:a7:49:f0:ca:16:62:24:f3:56:ee:
         38:2f:17:70:a5:b1:1d:b5:cd:57:5a:b3:f7:38:c4:9a:f5:c2:
         7d:5c:c9:85:9a:52:30:3d:a6:a3:d6:bd:66:8d:66:98:8a:45:
         22:a2:a0:f3:24:26:3b:8b:dc:37:3c:88:5e:8b:b7:6a:86:33:
         4e:a2:74:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----