Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
File:                     _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft (raw, json)
Hash identifier:          U+UDiQwtJIAYmOmb+39DWh81JKGYetuvhWbtGVmon/U=
Subject key identifier:   32:34:B6:BA:F4:5F:D4:09:AD:25:08:90:0F:91:A8:F3:D0:80:98:21
Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
Certificate issuer:       /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Certificate serial:       01962DF39B4CF9845EDD65723F940B09AD5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: 5o12bWwrOgNj5T2QC_xsDzw2auo.roa (hash: z+dRGRfQAE/aaRQhADQq91xi62QWjaX7M/KM35XckmU=)
                          2: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl (hash: ixopQkNB2eJmAfmBu7QgPD5SwAuxeX2z2xm/gDva8zs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9b:4c:f9:84:5e:dd:65:72:3f:94:0b:09:ad:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=3234b6baf45fd409ad2508900f91a8f3d0809821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:6c:bb:5e:9e:da:62:78:11:5f:07:15:e4:
                    fa:ef:98:dd:93:6f:ef:19:20:38:34:e5:98:15:b4:
                    37:a7:5e:b1:8c:6d:d5:78:32:89:1f:36:79:2d:e0:
                    2c:bd:1b:21:8b:0f:c3:08:bc:e6:58:8d:2d:4e:71:
                    8d:ac:ed:cb:f8:e2:43:fd:14:6f:a8:2d:d1:fa:0f:
                    09:f0:59:28:72:7d:23:0d:29:7a:0d:38:65:96:43:
                    b0:32:fd:b1:b8:f7:ed:9f:2e:bd:8a:30:05:bc:07:
                    78:ee:c0:05:96:e0:ff:6a:86:4a:9a:6d:94:af:d9:
                    c0:39:bc:75:41:82:87:69:9a:83:96:a8:a7:b9:65:
                    22:72:7a:a5:a2:52:e3:77:d2:31:51:d5:fa:fa:88:
                    d9:dc:00:8b:77:16:67:e9:63:34:c9:18:e1:fe:66:
                    80:76:7b:55:27:42:1d:a1:1f:0a:af:f4:67:ad:05:
                    49:00:b1:89:d7:1a:36:65:ca:a5:bb:e0:91:50:dc:
                    01:46:69:b4:a1:39:0c:ff:b9:0d:6e:dd:f1:ce:df:
                    f7:3c:a0:45:24:e6:83:06:e8:bd:5b:ba:4c:d4:9b:
                    f5:15:1c:9c:c2:b1:67:03:53:9a:3d:0c:ec:d2:11:
                    55:4d:45:bd:e4:98:9b:3f:1d:d8:af:82:04:04:59:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:34:B6:BA:F4:5F:D4:09:AD:25:08:90:0F:91:A8:F3:D0:80:98:21
            X509v3 Authority Key Identifier:
                keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9b:22:b6:57:b1:c8:cf:cf:bf:cd:bc:8c:b9:d5:ce:8b:1e:
         25:3c:1d:34:95:2f:6b:3f:34:c9:f9:be:63:af:a9:f6:71:02:
         a0:84:23:54:d8:4b:78:63:4a:d3:11:3c:dc:e5:73:fa:7a:58:
         65:46:96:84:a6:84:66:16:bd:32:1f:04:08:d5:32:2a:63:d9:
         05:2b:f4:03:51:ba:d6:55:d7:b2:85:72:2f:db:95:93:81:f7:
         19:f2:d2:cc:c9:7e:13:4a:4f:4d:23:ef:bb:98:85:c4:5d:60:
         93:20:a5:9d:b8:11:e6:7d:f5:5e:80:6c:92:6f:8b:55:bd:f4:
         ff:51:f6:ad:98:06:c8:64:54:a4:ea:b9:0d:42:84:b3:df:75:
         b3:78:36:31:ec:ca:c5:ae:63:8a:32:db:cc:68:90:c7:5b:7b:
         e3:bd:93:77:ce:2d:c8:0a:2c:fe:de:7c:1b:fe:f0:e7:33:7f:
         f7:dd:84:52:3a:67:e0:9c:68:a3:d1:a8:dd:4f:25:a3:09:e4:
         58:11:53:cb:3c:50:d3:39:97:3d:92:a1:08:02:9e:e8:db:43:
         da:ac:92:0d:5a:4e:9d:c5:9b:b8:16:17:d1:50:25:96:24:ad:
         f9:d0:b9:64:ee:3c:cc:a7:c7:23:45:33:cc:34:f7:9f:46:79:
         b3:0b:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----